RRENAMEAT(r0, &(0x7f0000000080)={0x7, 0x4b, 0x1}, 0x7)
r2 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0xfffffffffffffffd)
recvmsg(r2, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
accept4$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10, 0x800)

07:28:54 executing program 5:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0)
write$apparmor_current(r0, 0x0, 0x0)

[  543.482315][T25573] Unknown ioctl 35125
[  543.508591][T25656] Unknown ioctl 1074022600
07:28:54 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)
r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x6, 0x0)
connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x3, @multicast1}}, 0x1e)

07:28:54 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ffffffffff, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:28:54 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffefd)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x20080, 0x0)
ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000080)={0x0, 0x5, 0x3, &(0x7f0000000040)=0x4})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)
personality(0x400000b)

07:28:54 executing program 5:
timer_create(0x2, 0x0, &(0x7f0000000300))
timer_gettime(0x0, 0x0)

07:28:54 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xfffffffffffffffe, 0x94000)
ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000180))
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xc0, 0x0)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="38744df4dac0f2112a2547db293bad3e5b9730a70ff2f5154d955bdb77c87232ebd905e7df6ff21ff2fe65a8dcc76509a2e94e761eeb857eb470971e4384d429b76059ff5ede761b651432f4a2e7806e8603f06d426a1cfe6f464d351d5fee559b4f5e2bbd6682da82a63d6711b59c360aa475d7f6b5f6b87bde03be54438f8048eac50ffb57894ff715b996217e48931b9023de7f47ef894556cd4b5db254e847f0b0af3397dd20d2d7bf38d4fe448d904a6c44a1ae274b1286ac5411bcc98d849b5b2514c23554e7d85158857bed8b0538eb37b7af5351a2f2167b549e3fa3e6526f8d45b0c3a35e438835c16823831245", 0xf2, 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000380)={r3, 0x100000001, 0x9}, &(0x7f00000003c0)={'enc=', 'oaep', ' hash=', {'michael_mic-generic\x00'}}, &(0x7f0000000440)="4e82a005150acef6ee9f7161fcef849845884eadb57a0826465e8e3ddfdad60165bb1a569ba2d492242ddbd92f3f12fa319686d7bcfdc203b35080f296a99f3bd278f49d74c26d009d35ea746d4b07074b23c27877e041c11594187be419670906733a50b30bddb22150295edac9fc105005bd80106d54b6cd574b4f9f890d1319ab49b1b122c9a54aeb134476f0b7685ae603324bb3760b1aee2760a34ba4df83cf5819474d2ba200f4aabcdf9827a343d01021198681a988e292", &(0x7f0000000500)="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")
ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000080)={0xfffffffffffffff8, "3143bbfc488bd5921370d8baf8ce3dc9b5c2cd01068dedb2d19970fd9f80a873", 0x2, 0x1})
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:28:54 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
unlink(0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000003c0)})

07:28:54 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)=0x3)
ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000000c0)={0x3, 0x4})
r1 = socket$inet(0x2, 0x800, 0xfffffffffffffffe)
pwrite64(r1, &(0x7f0000000200)="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", 0x1000, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r1, 0x1)

[  543.818263][T25764] binder: 25756:25764 transaction failed 29189/-22, size 0-0 line 2994
[  543.858537][ T7728] binder: undelivered TRANSACTION_ERROR: 29189
07:28:55 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x101208}, 0x0)

07:28:55 executing program 0:
openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0)
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x2)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:28:55 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffefff, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:28:55 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640)='/dev/fuse\x00', 0x2, 0x0)
dup3(r1, r0, 0x0)

07:28:55 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200000)
recvfrom$unix(r1, &(0x7f0000000080)=""/7, 0x7, 0x100, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)

[  544.183938][    C0] net_ratelimit: 12 callbacks suppressed
[  544.183947][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  544.195464][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  544.201332][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  544.207245][    C0] protocol 88fb is buggy, dev hsr_slave_1
07:28:55 executing program 5:
r0 = inotify_init()
r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x3)
inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x4000082)
write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="65f336224bdd3b533505b3540906a7ee8c91dc38e00f136c79a3f7cb93e001b6d239069cf8009dff"], 0x28)
sendfile(r1, r1, &(0x7f00000001c0), 0xa198)

07:28:55 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x200, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a45323, &(0x7f0000000080)={{0x20, 0x5}, 'port0\x00', 0x2, 0x808, 0x20, 0x40, 0x6, 0x7ff, 0x2f, 0x0, 0x7, 0x2b57})
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000140)=0xfff)
shutdown(r0, 0x1)

[  544.459054][T25944] Unknown ioctl 1084511011
[  544.503856][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  544.509732][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  544.512343][T25944] Unknown ioctl 8839
[  544.555116][T25944] Unknown ioctl 1084511011
[  544.567284][T25944] Unknown ioctl 8839
07:28:55 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x7, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000880)='/dev/vcs#\x00', 0x9, 0x2000)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@ipv4={[], [], @multicast2}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000a00)=0xe8)
r4 = getuid()
sendmsg$netlink(r2, &(0x7f0000001ec0)={&(0x7f00000008c0)=@kern={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001e40)=[{&(0x7f0000000a40)={0x130, 0x22, 0x0, 0x70bd2c, 0x25dfdbfe, "", [@nested={0x4, 0x48}, @typed={0x4, 0x1d}, @nested={0x118, 0x6a, [@generic="e6d0d8b0086ec2ced4d9581efb484408dd7ce8b779158d0c1ba0fc6117dee51532e260305c0e80344583e07a6fce1e3bf29ff60c1789ee634eedcbef5ef44db33c98f72f0555cb76caa790e8f4fa2c5059bf8bbfba807f9dbea16ff6784588fdc5e2df78e9c2aedf6f21f65b8578d67068574aaf91b686ff0c6d40f593b50d36d29e637ebc1eeb2cdce1e508fd586cdfa6dd9090c7817724f6f018db89", @generic="1616620a8d7a6955cac691d5e160db0af3606836832beb6a6d82334b4e510748ff1818e5c704ea3f764a99c74374c10446d4d2d576c143fbd61462c52cea35c29ceb6516540d3e744cd6cabc6e11ad6e9efc48a66cddabfa1c5184303ba78cacf53217df255cc0fd5863383a78f7", @typed={0x8, 0x2, @uid=r3}]}]}, 0x130}, {&(0x7f0000000b80)={0x12ac, 0x13, 0xc20, 0x70bd29, 0x25dfdbfd, "", [@generic="d15579ebd0a57f8324a5a5a41816dc2e5aff5dc54cb6b574ae1955b2c9797c0847d3399c410030edc40533b360e6af8fd0dfc704a875cee9ed2ab72a9b9c2bfb42fffb4b49aa3867b1b36592cb2d4221427e72a406cd18c2baf91c99fea0950de2824d4b5325fdb6d31622a4e4ead58dbf4758acfe65", @nested={0x1024, 0x3e, [@typed={0x4, 0x5e}, @typed={0x8, 0x52, @uid=r4}, @typed={0x14, 0x7d, @ipv6=@rand_addr="1e8676dbce79d34db4538ec8883b7ae5"}, @generic="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"]}, @typed={0x4, 0x64}, @generic="2aa51b2c6f35bf223b0ea2db0757c4f48cdf82e7215529ed1082902604f4886d33f7103a5f55e91354d7bd1b32237c789eff598faa3f6c19c5da1d738b050d4fb6c29e039025c1bd3014535e87c6d31a933a3c1299b4937f25046a9c0ea684895071be26757a7210d13aebef5befd9cf8bb462061136f0ae03498d4367da7df980ae44d4e75aab839654fcb64570f5062ed445c5c3291014b6fe9799a26f78fa31667faf1b5e30b067800e7e86ff2ebbada941b0d651ba0dfcd1bde7b670977f9ac9dbd631d5c9188abe592c2c2cd472befd2ddb037b14bf7f03753c8fbb961ff798f7dfb40b9439cf6f17", @generic="01e7748051cf9477039cfd730babfbbd9c86dfa795597cb398e669dd71d9032d8a566f67f9a0e2e16d", @typed={0x10, 0x60, @str='/dev/video2\x00'}, @generic="c3817c6ccf3a016c3b4431b30a24cc887f58739b696534b04e0f6396be9892b95c30db0b6a47de61f76074f79a8d48d83a0c690631ea79465174821b7664340548487f7854f9b2cb384dc7a9204dfc49fb306aaaf12490452c5b2826d089921e6bca601dd40fd00d2be338b8c15eae15351c38d05270db1fcb04ba7743ad6cb39292acce2914996b3d59d2ff6ff827e42315f2075d5c48c42d9e6fce6d1cd948c661366179de0098e8334cd40749acf7091f1fb27849c207c9746a82f27e50670be91c56ed65c3d099e317e518aa73d0ad234f98491d22"]}, 0x12ac}], 0x2, &(0x7f0000001e80), 0x0, 0x40}, 0xc081)
ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000040))
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

07:28:55 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10120800000000, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:28:55 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80, 0x0)
ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000080))
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:28:55 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
io_setup(0x2a3, &(0x7f0000000200)=<r1=>0x0)
io_destroy(r1)
shutdown(r0, 0x1)
r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2)
getdents64(r2, &(0x7f00000000c0)=""/137, 0x89)

07:28:55 executing program 0:
r0 = socket$inet(0x2, 0x8080001, 0x85)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:28:56 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x50c609}, 0x0)

07:28:56 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x129200, 0x0)
syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xffffffff80000000, 0x0)
syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2)
syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x102, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8906, 0x4)

07:28:56 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000940)='./file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

07:28:56 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x400)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xffffffffffffff9b)
r3 = fcntl$getown(r0, 0x9)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000400)=0xe8)
fcntl$getownex(r0, 0x10, &(0x7f0000001b80)={0x0, <r5=>0x0})
r6 = getpgid(0xffffffffffffffff)
sendmsg$netlink(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000380)={0x44, 0x15, 0x2, 0x70bd27, 0x25dfdbfb, "", [@generic="41958bca411bc3ccb261f3fd7b6083da105080207af9139b79d316eb0614b325eb1e634039e0862e7f9ae403f3266066bfa508"]}, 0x44}, {&(0x7f0000000780)={0x11dc, 0x3b, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@typed={0x14, 0x30, @str='/dev/input/mice\x00'}, @nested={0x1b8, 0xb, [@typed={0x8, 0x96, @uid=r2}, @generic="a5b2501fff9fff1b6ed9aaa1e6797e582890b706a09f5b0af74826dea6b96cc3b718968899f922006d7c1563daac5a6c1929b291cdb87414b8dd38994e32d34cb17f5865c8f00866d23de4487e429219dd3e918bccf43d6fc45c23b499d9c387cda5530611cc1130f4", @typed={0x14, 0x24, @ipv6=@local}, @typed={0x14, 0x7, @ipv6=@rand_addr="35084e0769cca834ad15bc9b5d453d5b"}, @generic="7abf7ec425bcfa12ab785955da22a844dd3f921c247f57c6999c38b2f67a88bf46d556d69f1df05b114103579a04c58f37bd6c1887b7597457f6aae212f59f690b09e589efeff2f65043ef0fe05fa83c9fe24e7c9dc75c8bc52042", @generic="4ff136d9e2480c0cf744da111cf5b04d040fda41bec0114cd4a3ee07c1f0ec7f1df29a21bb4545bbb5bed85b052f999aaa24ffb97ff8c6e989fd7724a256458947419cf92a3e322773f92ef4cd2b1c13ded1f38e841b2b7d8ef7c4b1b4c70ebc361443b8ce8ecf09d83879e43e3ed22d500e064b144393d53e56f60cf83ac4352d281dc4436c748b5ed992f609372ffb35aeba142ce49c61dd8a1bc3ff006c6c9c0b5560317ca3f44abb225e33b4eb26237daf64ad2c9750c50b74c2f22aa733"]}, @generic="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"]}, 0x11dc}, {&(0x7f0000001980)={0x1e8, 0x19, 0x4, 0x70bd28, 0x25dfdbff, "", [@typed={0x8, 0x88, @str='%@\xf9\x00'}, @typed={0x8, 0x1a, @pid=r3}, @typed={0x8, 0x90, @ipv4=@broadcast}, @typed={0xc, 0x92, @u64=0x9}, @generic="2a4e6cba5e06a14c2b32a59fedf5a9b017dfdaf0dc48ce2582bb2bb5cdd215cbd0ac91b9ef482d33c02500b1d5c6fcb5812d91efc69211c91bcf92614e75ed87ac50f1880a5bbe138bf57bd4921cbcf1d50aa222e7d98f5fbc14b72ad63dbe5db9e21650f55877282fd9edb83c7e5f714c73cfa73b98b0ae0982afb266a14d955a1a5630123d0c9258fa052c81d9bd8600c47b9125e1aef079c30b7d2eefdbec4e7d1c74ff71bb6bd581e78d95b6d432e70af317e0d2171a2cb44d7d7395d2332f10b06d18b1a3f75650bef9c65338e4", @typed={0x4, 0x11, @binary}, @generic="2aebcc11d6080c4ca0dcef0f21d600872212c112cb777d5c7c24494ba35d4e20358d45a192202b9d7526f083ba3c95b83dcba0a2806608c170fb51f8d5b75af5fd639cb242b49dec464f5f38ffbb85a0d3a7d6524f0f9013dfc62bfb2543cc004388bc3d59e3da8db96ea539ca4795a715a79fa2b1e62ad1293924e0de8dcaec9b2216fc9c97d247304919b1daaf4b77b770c486d450f9cfa23c086aba18de5f670941a02e93847e6dda545b39be076903b656f507ce07b20eee93099a61b0", @typed={0x14, 0x47, @ipv6=@rand_addr="b0599c551996d423459953940997b51a"}, @typed={0xc, 0x11, @u64=0xffffffffffff8e8b}]}, 0x1e8}, {&(0x7f0000007fc0)={0x2588, 0x42, 0x9, 0x70bd2c, 0x25dfdbfd, "", [@nested={0x88, 0x5d, [@generic="64a9b787b9d153c0103c0caa207137aca54fd1e9fa14cebb5d73be7ec86d41efd91c11801bb7b44f6de3c47646194b02fcba20a80a3cddc4bd5622a43b4b1b3176c7372015335f958f2fa65f685bf2377e08c49b1f8b537111bb95b5dad705", @typed={0x8, 0x53, @uid=r4}, @typed={0x8, 0x52, @pid=r5}, @typed={0xc, 0x91, @u64=0x7}, @typed={0x8, 0x84, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}}]}, @typed={0x8, 0x5a, @u32=0x9}, @generic="8555c6e268847392d7f48e055ce948ed80bfe5f35da0b8e33cc129994aa366457c3e4cae9a84d876f7d14d544e813ce5fd2cd34c72d62f8471e3246a3d5e9952b692ff652c61e80d4dd35db08619fa9c57ca3a2b9f144f8727f3f84700c201434fc7d1031f676da9a1ee8c836eece01fe4e62f6cd079e10bec337afcdd79350ec85b4f033370c966c991ce2d2ab188ebf72085e90e219c557156a1fb1eddc5d81780c9ab22e940c1e1b6b34eb5e1784d2c9e2ee21673a72b566e875254182db62cc56e3a0fe073782331fe7baa7578ba6b758ecc9062304fc463d5907fa8a11e0829d12271376c312e1759e4520bab13853570c06b", @typed={0x8, 0x23, @u32=0x86d7}, @generic="ee1680f3c23f37213f9f07a191b3fb2a039b7a635655b9eb29882a9f0c3c001fed7e62572dce22d420d199866ca2eddb2d4ec6552255334ad491356eae2319c00692aef2745a55905c83435902817a7fe17019f6031a229152713a22a705f29f644e6ef472ad8f90867ab2a375f411a99cdbe6ddae17dd799a3754d91a7a2e3f3093f547704e80d7946a7c32be51", @typed={0x8, 0x72, @u32=0x1}, @nested={0x2168, 0x55, [@generic="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", @generic="5a9d4a1e7bbc67824ade9f0ddd2b5d385ff4589ff8e8594225e50ff2ddf59644a957b60b69d46a6510a661a5bb7273d4072d220fa3c07053debeba3c754b2348eeac1f7bb1cfa7661b339abac33bba3acf63d376c60729421a797001717e89ad46f38d32b2199ec5a1839b2c6b386f8951e315712c9ea0d314c03f593819ea3d97986f7253b45b39162bc1c4", @generic="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", @typed={0xc, 0x71, @u64=0x7c0000}, @generic="992a069a28d06ab0f398b1348fa72bce0ad01e205be3bcba5e2b7a8decab9d2323c5d0fa07dd8109eabdb7378802de8ec047325a99f28ec4d41aff8c4355a33d34aee70dc21c1862b06554e96400c8683f024f51ca7d99e91901e821c216d7e5d76eb218fefbdafd22b8a616bbdf8ca5b109179e", @generic="a7ba275d6e8335914911d319a95c6b0c4cae2756c997f28df9d2bb038254192734722445745d3bc9f5b330da718c9a70c9076e1e70d5e2459b106fc4c2ab19051de6c98b133db4e970ad3d37b3", @typed={0x8, 0x5b, @pid=r6}]}, @nested={0x1ec, 0x52, [@generic="4b2ea9b270f1da7d0f8508e8c68873c421c975939046a5c4f789aaf4886e", @generic="922a49def2ff7ee96062db4a5ba9e8f797836c57e05a75ebd48bee1dfc3ab2bae3e712af298fe96130e56ec2b875510484659dd9e1e3f3eb05583007d836e5ff9a0f5852dbeb1bdb1f7212ea6d5a8eb5013870309d8900766d544da07c9aafa724e5e3728da3a4363c080fc68d5ce6055ca88583ca4ce0ebb89c97326b9f8c421d7990a48bc88814010e47d5baba3c88d20cbead2e936ce2569a925bcf116e48a7f933666ca2fc2d05fca582baef92fd9444db96d6549a7804901ddd3c34816ece518b164c28fb7256dfd3397af06e0f9c958edda6d93084baa7aac19829e1d4d548f07cb8410ed06025776cf1a3cca360efd8", @generic="e9aa7488c018344f45f911f59ad49d3caa6d5666ca6aa98341e2e3fae58a65ee8f9bd216b71fd2e2d3ffed511ea7a65a6f5cce5e8a7d4c9aa81f79914374d340a702d0aa3301bfe505fcfa53dd3f685fb075d26f6a09d1aaaf5560ca200645745fb405260d3abad80b824eb36c00d8c9570b478b74a88339540ed29e72d01d2bc6c8fb0c0316a40f65d0c313df0e86a9dba132ebf63024f964605d1c06d3f92e06bcc3e91b09f2d21ceced26f522aef7fcace5a6ec5dd868fa87498f1bf67c4487d49bb815a47d95ecb5b63a5a967663fa4b811c2f8748"]}]}, 0x2588}], 0x4, &(0x7f0000001c00), 0x0, 0x10}, 0x40000)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000700)={'vcan0\x00', <r7=>0x0})
write$P9_RCREATE(r1, &(0x7f0000000300)={0x18, 0x73, 0x1, {{0x47, 0x4, 0x1}}}, 0x18)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000740)={r7, 0x1, 0x6, @link_local}, 0x10)
r8 = open(&(0x7f0000000140)='./file0\x00', 0xa0c01, 0x2)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="f50b020003000000"], &(0x7f0000000340)=0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000000)={0x0, 0xf85, 0x0, 0x4, 0x4, 0x3, 0x10001, 0x9, <r9=>0x0}, &(0x7f0000000100)=0x20)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000240)={r9, 0x8}, &(0x7f0000000280)=0x8)
recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x1cc}, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000000000000400000000000000040000000409000001000000000000000100000000000000ff7f00000000000004000000000000000080000000000000000000000000000004100000000000000000000000000000"])
ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000001c80)={0x2, 0x0, 0x2080, {0x101000, 0x4}, [], "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", "52f2cb2e446aea4fe6d24c647b091e4d7a057232ac72f61074950a3e92a37033de40a3b43bb2979e29426cf6d10fe4a93e74fd0ccd8701dd891ccbd25566e46f5ca3a48112f84a71093b260503dc38cd44d5a91fbcacc7ae4f1f79e208ae77cc241a384d76d9556d18190a6ad082038eb7794be4c8302f045cd808b2d8752b10edfbc1d9a93f4948a1b36d2c46f85bbbf4dbeb020ac293259fbd1d7c950611b9d365e89ac6b7e801a52ad4b3cb2fc5dc346e7e6573fbe39c1f674568e5cf1a2dea9813389c806c30e83ae352983575d4805fb294bdece199ea798775b57f8d3745140540a953503832b533c7f1df1474fcc62dfd796eec169cfe0f9fea9e952d4e9bdde93c16e7e5a95b4f717ce6fbaa604a6ae829eb3360a1eb63916f22886b4a568d0565703d9ce29ab09a293a8827a7a4ba313e025db16ad798cedb36d3626b8652ea2356ee754be91fb340fa47e52f7893fd0570dcd09f79b2a1cd4c8b2dbdde98591854dcca8275301fd9cd47836bb3726f4acb12b33ae37130de65cf4e796f974f70d0ff3719449a3dc16c4dffde3b32524b74966acacfaaaf6fdd08e07fcd6f482fb13722680b6d6e6bd82cf4b664ef5331a5e324e7a29e6c37662bcf8761453e29e5736812c1391635825cb3e95a7aa5f066577546a9934a4906c0e4c7eb8a6296823a033d0df4e5c6ac49e7b85d0aaa82c378d2797498c69fc7a8f78ab3d5bd7c8afeedd9902f991d6f96bfa02ea98d10667ad6e4e59151f6262bd0697573226b56722d53f1d7f7111bdbe8c848ddc95c7a0f080aee2822d59591c2951b9c714dfef69286dbdd504c7acf3c90f2dd11c98b331b4b9978d2472ec09ad8faa6d768f0c0c3a3ecdd2daaeb9906322f1144cb0e64505f8cb3c3c34a0125c30f67ad22e26a3bf6a6da433fc30f0dc2767c64d671ae8854e517f0a4a6dcaaa382bd454a95e6a0a5f1d4ae8ba7aa4cb528ec2cf5f7608642e1ee751de3a4500eeeb1652c8713fc3ef20c6eef3af5e248d3460e6f58e9d0401a74118b619349afaa3423e53aaef828b4d6da42a5c1b4c0b3ed942429a7d9c15a8a89ebd7651d4ca0f8d0626ac41efc4e2763f565a3dc66091948b860261e551ff81569389c8158b367460e7d976210c73729866cfbab301c09300e4df05da6db668c769e5221fdcd89861cacb242be3db51a01ea098e89c21915e03a149290957ac8eee2a71ed76ddc1a27b071dc769a0bf5b943d821e442e3d0c29c5061ae077d4d503356e45cc03577b509ab47ea0f27ddfd4b71a9ca7e41a6af7f94d4138e75b57912267a941560a0bbc4e6f972739957ebec8c0b223680c2b6276685195892a1fa17d4682b4e820481d1c1e3fc7301c84364661003815efc303f3b4ee0b022ebd3be886e52e023b6de6e900314db58367dd8617185e1fd7f987ba578c7d36345b74a85418130fc1d465c4c0fe52ec9f56117cc1b813bf32a76458facc19bba5fc921342b3eac48422d2cc839e08e352e97c5eb85dcd35857ac65f2de0ca412812f4651c397bb7fa0b348502d6a9bc12c38bf860a7f07780b4a957e2cb6560355e1aae194425e7f969fdf27ee23c02e973785a2474d81fbed80a18755c207eb021ce514429657644f2735caa45286fe8f692c1c1f2c398991f1c511b5361332fd738f0e07c466ef8ea4a6111aaff0dfc12f494fb66d71262a2beedf3193ea46e085ab866406c90ee9b276ea0971f7853d8c931d07973d934e13e6222170af36c412448a291f6b2f80de9a7b31f4baf362aee3cc4be5cf44f9278cf7e4e82bcbfddc598204f3422648157e1b4a6a9c81eeec62973b696e5cf114a7e38ff1d3a3e7d80668db0a33a120b28942ce9ece09a999be047dff84bab79b17fc0954549fc08f2a0f9a3010f63d925a5e1b92e27f5527f1fa11778550a3ca5a221288f424ad049eddd3ab78d8db760eb47b7addbaf9bb8487489e5ba738f6c6fd7c0d1cd597cfd307fafab4c7096a1804981df931726f1790455ea088739c1792717fb913752ebb4d19ecb5c0a63ea407d0f3ec2d33e77c1d97c9de7bd0c8b938a2b02ab8cea3d66827234a8b4ddb9ccb56cc9fe0ff245dcc6aa6ea99d18603d79910ef45d670e3787ac8cdb44857be2d0d31988c340f84ed54a76011de00736f8ec06a6f6d75d45d6060466f00bd0e8669588183b7e96965a53b7305dc6f7b0335a3fd3e7b06c0cac389ec72ddc3d68adf02f39be64c3e166c5c682fd25fedd7227ec1badd68222d565d223a99262b1b11e5ac8b1d99f09c957b2d908eb937d326eef527369fac327c4173a297ff166a074052e986c5d0b95e0f9fa24e2105bb7516353c831aefafc5f4e69ed465bfffdd0a424a6d5dbb59e3cd530c746f5df6113c2f7b60b8c1db2801de403bbbed45fc0c41e54b35b4c6cc2165c10a3cbcd0bd27f7410edec91160f649741bafefa75b63dec2ef53451eb5a91f370cef62f28d5eb8a2fce4399f63c20b39c00650a82a1f0f7eae028c02a4b4525ea50d697463206395ffc41d8bb2bb97eeb684128d1e7e9f2b9fb7c48bcbd187709bef9d401a549f62086370cd6c6e495db8535a85752c283bca0f23c862001c3a86c3e5f7fa8e39b7ad2bd66835d78be90e6ddb1eccdc722368c0346e1326a21b62261d10033db0a968771bf58fd7a275a50dd5823ec26fe4139937e89cea9e65b73ee2a65cdae439c28c2dacc391b0bf54d863d459441fdfd6421f6caf4aaf9e39ec61c85432aa02da986d5589f4c4919fcfce7888f3bb84a252b3d252ad51810a96deffcdf131eeeaea12877145f9403719f0384b9be1f0fc936511afbb9d826be2ad6cb478397692c35b40186a7128a224f3fa0f878f2a1114757efe034b7ed5d898c228e33284ac6950a6ef5a75f99c491439684f4d977d7ce2b554913668b66fbdb43d49376dcf7520ecaf155dd54b38baf30cb9349f876630da7456081be3bc2bf3966471ffacae879e9030b4659145f1f229921b6dc732192b1096e96ae981dc69de364be0983d1e94ce5a95a2d870ad876985c06893d1dcc13003dd7fe521100a253b00ebead463fa72885d7c288ec9c2a84f76cb8500a39a092cc1821f42b085521afefd47f97076cad18448c4640773ae00bdc89bcb3403d1b684534ad6a3f4667e1bf2244f853014c550e8812100e53f1fdab8b3baa3709711e748613cd4664e81d7640bec432b05965971e72ae28b76f6c2a6d44d1c3e0e6c77e598ff1a04373f02f0e3d2ef9d7fdc43863ac21e95cf69c97eba61301dc8551b8035591ad2605f915c76468d42ab9e055217a61719181c0b27c11494d695ce4d69c4ae2a4851c45c3184c005939d7f8fc92133645513a5e31f0138b12c53e38e5973faba54138c281a32e5bdcce7a784a0effb0ffbe87e62eb985dc9e96656ca309176b0c7dc08e8c9cb049e482f7a6095d23fa686374e76cbfa0e9cc6fa8fc3e4400e86c450e10724f75c69d8719415cff0fa607d62c53d67bd7c67839c6cece76ee2750ab05faa253fb7c1c3db732c2a602059e1b7d5632f8b5c37211ab22b072764c75cc024599d45e167670248d13c20c5102eaa6e60aea72a59f275b434925d49f336bd21f99d3f42a2a532d3fd16b46678a3f8f3c4a54296a5414bd15e4d1d19c1ec860057b368cce8a162c29552992591666d41508eefdb583dfd48207034c412cb9151939dea1c55ad4006f7ef8eb7a839cfe1ee6d45f93f0496e8fe64a1baf68c38452a8f8951dfa186c8dc2ba3883422a46024a597149a125d1d0f3b0fadb04d441feb3160b84978fec32b16684c69bc8111a7702ffbdf139e38954351fd333deba84d227a82ad2df6aef454293101af566b4fce561188796f5bfffe51cc643fb4aea5d6a5db1136dd310ec5581b69de9071c73ef61c78f1c7b8f2114c712b7e1db8c14d04ef56aaaa782f5396f0266fac37efde9ee87b7094c3cbf17ed14a6348a86ba8a717a123c3fafdf9f765bca1377be995697345735cb72648ed575bde2213e5e8f4c8c7b9079bb9e06e1dfe010b61b80b6e0c3d80b3490af78f6e8be0e745a65b7b33075dd356ba079b165089c254f867ea075b6319b8eb8fefa9bce079d2d1d1403597bfe1d96f3926c04fc5f502c4e4f0b96ea8f6a1481185be5a958136bd9aec255645b0637027e126c7c8694f46ad46f58edf464b2defc59394bb81dd422b31348e7c932e01b777b65247e2cec84f5b2bae00108508684fe486143b7f8681b314dd6f21f3fbeffa60c74cbd16993d336ec4778ca862a03b08e346e6793a92429565a86b274ec551f3f862cd9384bb5ca1b651396d5c6f621cb47751b35be73b07c1ed04a992bbecdf4eac28861028250e9b3d8fb0e16bdb6c706d00e2a0294d2a3720e788e28768463912b4854371452ce9e16c32a3e145357abf2565fefdedd5743fc884862bbca09c354e48f34e86d4267c1207e918508f4d0daabbf238aa8dac8d3716cea0f6674cb4d33d771468e576e3913f268c52e8acd5c54db52db1d95bd06a8bf4e2361724c8d7d1c4ad764462548ed1d4a5ecf4f2591afded31ca9ba2cfe53d3bbca66dcd639c6f4b8825703925649192a3716d428b8d0d5e51a13bcc34c8ecb1acf084062b7560251e964d263b8d302e0b9caaad0b6ca948faf57ce6c33bb7bfcbeca5c564578ee9698e21a804e1016aa0c28530e30b1ab6fe3d09ceac002dc286a163cb0be3a181b2f8c480304804a8e487501e025ace5cb5043644796e9e763987454b00dec8209745c51cfed9d99a2ff993c456cb75d347619bd7945a9c8639d26ca527f715449ce669450802937504fc0603e5debaf09b6527f8ea771001e07d0d30848994515babf00109455e5fbbf851466fc8b9266cdc2f9f7e7e4b2095a951e9b8377e592339ee5a0e1a75828350c2f80c0d7d2d3fe07da235ab48d96fbb3c7db4ae1365d83825ffbb87d1cc2a65634e46356e418bbdbd301afed4cbb963c032388d51f24f0b0fe3c3d611fe376b4a19886132fa1143ed93d79ffd5810326473175bb2578eef845b2c0f69a7845e8061474299ba1a9e1d9e3b32e2b8e25615cc13b2d36a1229ec09df320995116a2878078a692335c6d633a12343f3a3444e9ddc19f40b9023c9aed122d13fb1426a8b327a185a632caa6e8826279feb22f1f692e94f312fe817ed1001b70be85586e3f6da53fd7fa4a7564ab2954e61e44ab32c6beee316a90165889a597cdc4ded7a316629bd9e86e310e89128e5c7023164fbf40b2b6b99c6110cb0212c65cb24110f1d357c47f9ae2d2293a0a13f24edf7475400ccb41406fab53d946129ff084a2870a04b0f66e5b336d25672c392b2172183ad82aa7134a0c15925601da10f96f885437ea32866e04e4ecbf4344e9013f05926df7056a54122a873a3440524bd8e1549e3212a9153416a4a254ef22ce4feb78d22e08bd74203cdc486294f99a1592111250b4df620d2cce3b586967153ed67af87b983ec11c1d2524f904ef25a098661ee010d0a8cea89e19d2b5708cfe3c06382e985d5ae508991c8617053d501ada04d6f39b7c4ed3dc43dad4c2192c7985c05f54324d79f4e5b79d6b2024d0efac8a4e74cee7ad4271092032298ee59f986c10364a2e2e9c22b57de5bc6872f70c7538c07705a6ca8365bfed2704b082561d262b03fb630b608a59d4627d2d601459b32dc0cf071c53e75de372f8dd3bdc1fcf7ff67eef89531116a14d821e0daa91a5ed911b21e0c7aba0a6e8ac7cd77df67b8918275fbc4d14e44f6469c206e8765bfedf9dbec6a"})

07:28:56 executing program 4:
r0 = socket$inet(0x2, 0x800000000000006, 0x80)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0xb)
r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x400, 0x210002)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00')
ppoll(&(0x7f0000000000)=[{r0, 0x94}, {r0, 0x400}, {r0, 0x320}], 0x3, &(0x7f0000000080), &(0x7f00000000c0)={0x5}, 0x8)
sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x810200}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="f9bd941a", @ANYRES16=r2, @ANYBLOB="04002dbd7000fcdbdf2503000000080005000500000008000400010000801400010008000b007369700008000900370000003000030008000400e8ee000008000100030000001400020000000000000000000000000000000000080007004e230000240001000800060077727200080006006f766600080001000a0000000800060064680000500001000c0006006e6f6e650000000014000300e000000100000000000000000000000014000300fe8000000000000000000000000000bb0800010002000000080005000300000008000b00736970000c00030008000500ac1414aa"], 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x40004)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000000))

07:28:56 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80040800000000, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  545.182955][T26081] binder: 26080:26081 transaction failed 29189/-22, size 0-8 line 2994
07:28:56 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000740)='bdev\x00', 0x0, 0x0)

[  545.226825][T26092] binder: 26080:26092 transaction failed 29189/-22, size 0-8 line 2994
[  545.237961][ T7728] binder: undelivered TRANSACTION_ERROR: 29189
[  545.247146][ T7728] binder: undelivered TRANSACTION_ERROR: 29189
07:28:56 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x80000, 0x0)
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000080))
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000000c0))
shutdown(r0, 0x1)

07:28:56 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000040)={<r1=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={r1, 0x7a64, 0x9, "d88986ac58ab8d1aca"}, 0x11)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000180)="6c7a412f732693fab18e2fdfab75403c086a491bda846ae6d6c82c02344f50502c0bb870bc758307cf718de324e52c563a1fc7f8d81d6f9d427fa9a91305c45ebf17e07068e4a2cfa205bb0b4d5b4db52b9635a870e336f438f6e54e9b5f078cf6ad69cfbc8bf613ea3660edc0f27994e1f963", 0x73}, {&(0x7f0000000200)="0af9ff6fb56ee1bf1509252fd5d3886480881e245d5793acae6d6900324769f788101e6c2c02a99a217ac3ddaa7fa300649a495d3bbd25e3564eb2e7184e9a27d4ccf9b526d04bd7d4f2731a8d4543eae10f0f29f5a08eb93c16299dd219f90f4907064d2c81", 0x66}, {&(0x7f0000000280)="ae3cbea7bd51f39a5f0118ed1537024a19768a3716869fb3a83b7d4eb2550084f903377fc794ba811012ecc5d6369359352d132503c79d0767cffa7eac97ec83119d2de2b50d7e500e46c6a0fa5e0b38fac4b4cbd0a50cba7c18c50c628160909aaca0ea32a15c5e51813c65340e01956030d5ceff434bb8a2bdf42362b1a8cbaa848921b3f40b8b556dc9395a21dc06095ca1e16b8ea291f20d3d149f551fa2ef6651646cc47a155f59ca90bbb4561eca0f4b3c10", 0xb5}, {&(0x7f0000000340)="02d7d1905e2f5d03bab4f574dbcba34c97e3bddefc20d460ea76d0e0c023b366345d5d3d4944cebff7819dde4873948b342915bbfaca7add91b65c3697371607cefc361f184e85b5e9fbd08a2ff2620ad050966923fe6e78894af4d44b3ae7df4f153b73848b9afd969b92babe5e107b", 0x70}, {&(0x7f00000003c0)="3e5dfe3372914074c0af6c1cf69d47054beba669665c75eb3d23de87fb5b60eab6cc6418224512d8c4e6bd6feb2420c6274fab007d3215fdff3702df79e63fb4cee4ec070de8453abab444a2d1b58979cc1f5dc07401db72044126d6466930edd3cfd7f1e4d315", 0x67}, {&(0x7f0000000440)="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", 0xfc}], 0x6}, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000600)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r3, 0x720, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8001)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:28:56 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90120800000000, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:28:56 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000740)='bdev\x00', 0x0, 0x0)

07:28:56 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp6\x00')
setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000080)=0x1000, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)

[  545.793990][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  545.799871][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  545.863873][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  545.869730][    C1] protocol 88fb is buggy, dev hsr_slave_1
07:28:57 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x70c809}, 0x0)

07:28:57 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80, 0x0)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000080))
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000140)={0x2, 0x1}, 0x2)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:28:57 executing program 5:
r0 = inotify_init()
ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000100)=<r1=>0x0)
syz_open_procfs(r1, &(0x7f0000000140)='net/mcfilter6\x00')
r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x3)
inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x4000082)
write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="65f336224bdd3b533505b3540906a7ee8c91dc38e00f136c79a3f7cb93e001b6d239069cf8009dff"], 0x28)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r2, &(0x7f00000001c0), 0xa198)

07:28:57 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0510800000000, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:28:57 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7, 0x40800)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0))
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x3000})
shutdown(r0, 0x1)

07:28:57 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
chmod(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r1 = socket$bt_hidp(0x1f, 0x3, 0x6)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000080)=0x83, 0x4)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8906, 0x80)

07:28:57 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x70a)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5, 0x8010, r0, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
shutdown(r0, 0x1)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000200))
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'security\x00'}, &(0x7f0000000140)=0x54)
setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000180)={0x77359400}, 0x8)

07:28:57 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'ipddp0\x00', {0x2, 0x4e22, @rand_addr=0x4}})
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:28:57 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffffff7f0000, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:28:57 executing program 4:
getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000140)=0x80)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000180)={'ah\x00'}, &(0x7f0000000200)=0x1e)
r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7f, 0x101080)
ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000080)={0x80fd, 0x3})
r2 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r2, 0x1)

07:28:57 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={<r1=>0x0, 0xfffffffffffffecd, "64dc42e264f1745f5bcc00000000000000a4c71da2ea665757024184e0746f6b6663f9e9ed3bf66c19146b8e52235353da8a9f001a7bfe"}, &(0x7f0000000080)=0x19)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r1, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f0000000140)=0x84)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x100fc)

07:28:57 executing program 4:
r0 = socket$inet(0x2, 0xb, 0x7d)
socketpair(0x13, 0x80000, 0xb0d2, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000080)=0x6, 0x4)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40186417, &(0x7f0000000100)={0x0, 0xecdd, 0x0, 0x7ff, 0x2, 0xf1})
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r1, 0x2)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00')
ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40186417, &(0x7f0000000340)={0x2, 0x7, 0x7, 0x330, 0x5, 0x1})
sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x900400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa0, r3, 0x30f, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6c6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2f}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x17}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)

07:28:57 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x800408}, 0x0)

07:28:57 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})

07:28:57 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x2, 0x2)
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000140)={0x4, 0x0, [{0x1, 0x6, 0x4, 0x2, 0x4, 0x1, 0x1}, {0xc0000019, 0x9, 0x2, 0x9, 0x1, 0x3, 0x3ff}, {0x7, 0x1, 0x4, 0x6, 0x3, 0xffffffffffffffff, 0x4}, {0x80000007, 0x7, 0x2, 0x7ff, 0xd7d, 0x4, 0x5}]})

07:28:57 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffff600000, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:28:57 executing program 4:
r0 = socket$inet(0x2, 0x1000007, 0x40000000000084)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x101382, 0x0)
sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)="c292d319fc198fe2956d10aacd004e4360ef63712a795e8ba32b38786e0ce840eb7b9b0421bc4fa00812c406258ff2f12f351410298cdd404f2d6ef59324574c8d5e9c459e5c40e4d35a8aa8ccc02285ebc51b0bb25f985a972f110402cf939d3625eb2cc0d2b0242943fc25d9c7ad9d97e7685d81d4b4f237e3c56b8079427f6aff1c43ff93dd4eb26f625f8d469674577554a0af0b9afcfd9ea545447973225f6b5bd52ba7d48b1bad0520c36a55e767e61bbb179c4c4a8d863e", 0xbb}, {&(0x7f0000000200)="51e760a35f0ed0b5232943b4e60dbe41a2c8f99e1dedc0a9b97389abc79bb9aafb7b41f73e0e0341b6c209edae18ad459552c8c2e5f63b2757abc4e18cea6d422f070695daae41f3eb79bec476b61a802ac56671c0569298bb52d98a5d821822467091e299dcc232aca6a903e232da5d63981b29a9eb54a2e552f012e87844b343e07c0deb0657047449972887b1b3953deb2bbcfea72786111975c1a87bae37a1f2fe36a47c8fe2d9d880fda51a727a2eba1ecb9967f1b0c607d6b603", 0xbd}, {&(0x7f00000002c0)="1c5498a71c7a9b9bbd16fc655fec3bddbc8785075411b80952869c21378004295bf624c754", 0x25}, {&(0x7f0000000300)="e19863a4ab7b42f0f165d5faf2c74d05827d1f9b2e6544d729b77815ab95218ca00b3618a61acf2340ee57d384639afc36c619f7bdc74aad9ee710ab075e9fbc6c8c", 0x42}], 0x4, &(0x7f00000003c0)="4dcee95c3b939ef047c0df8e82d5c3b98d122daaacf57908fd8f43922393038bfb1b55e804df57fb4746e28a55922d8a5e", 0x31, 0x4000}, 0x40000)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0)
ioctl$CAPI_INSTALLED(r2, 0x80024322)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)
write$vhci(r2, &(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)

07:28:57 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x480142)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc004240a, &(0x7f0000000040)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

07:28:58 executing program 0:
r0 = socket$inet(0x2, 0x400000000007fffe, 0x81)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

[  547.060652][T26583] binder: 26577:26583 transaction failed 29189/-22, size 0-8 line 2994
[  547.092670][ T7728] binder: undelivered TRANSACTION_ERROR: 29189
07:28:58 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000940)='./file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

07:28:58 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
socket(0x8, 0x2, 0xffff)
r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2)
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000080)={0xf000, 0x4000, 0x5, 0x10001, 0x4000000000})
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)

07:28:58 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000080)={0x3, "68411dec3811046e1b89da24e1bfc690bffb6f04b6a893b820a1343470af5f50", 0x3, 0x1})
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000200)={0x24, {{0x2, 0x4e22, @remote}}}, 0x187)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e27, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', <r2=>0x0})
connect$packet(r1, &(0x7f00000002c0)={0x11, 0x1b, r2, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

[  547.244980][T26669] binder: 26663:26669 transaction failed 29189/-22, size 24-8 line 2994
07:28:58 executing program 4:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000200)=0x100000001, 0x4)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000080)={{0x2c, @multicast2, 0x4e20, 0x0, 'wlc\x00', 0x8, 0x2d, 0xf}, {@remote, 0x4e23, 0x0, 0xf0e5, 0x1e03, 0x4}}, 0x44)
r1 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r1, 0x1)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000180)=0x50)

07:28:58 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x4, 0x0, @initdev}}}}, 0x0)

[  547.309383][T26669] binder: 26663:26669 transaction failed 29189/-22, size 24-8 line 2994
07:28:58 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x901208}, 0x0)

07:28:58 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1}, 0x20)
unlink(&(0x7f0000000940)='./file0\x00')
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})

07:28:58 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/97, 0x61}, {&(0x7f0000000140)=""/82, 0x52}, {&(0x7f0000000200)=""/87, 0x57}, {&(0x7f0000000280)=""/158, 0x9e}, {&(0x7f0000000340)=""/145, 0x91}, {&(0x7f0000000400)=""/255, 0xff}], 0x6, 0x0)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:28:58 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x8, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x0)
shutdown(r0, 0x1)
r2 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000040))
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=<r3=>0x0)
syz_open_procfs(r3, &(0x7f0000000280)='net/tcp\x00')
ioctl$RTC_IRQP_READ(r1, 0x8004700b, &(0x7f0000000200))
r4 = syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x7, 0x200)
ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000000300)={'veth0_to_team\x00', {0x2, 0x4e23, @empty}})
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/17, &(0x7f0000000140)=0x11)

07:28:58 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x1508, @initdev}}}}, 0x0)

07:28:58 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000040))
r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x9, 0x80000)
write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0x0, 0x7, {0x7, 0x1d, 0x8, 0x10000, 0xbe5c, 0x1f, 0x1, 0x40}}, 0x50)

[  548.009285][T26833] binder: 26831:26833 transaction failed 29189/-22, size 24-8 line 2994
[  548.042357][T26832] IPVS: length: 17 != 8
07:28:59 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000040)="7447ded6486cbc5e907bd6bfda70", 0xe)

[  548.068636][T26856] IPVS: length: 17 != 8
07:28:59 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
r2 = dup3(r1, r0, 0x0)
poll(&(0x7f0000000000)=[{r2}], 0x1, 0x0)

07:28:59 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x6)
getresgid(&(0x7f0000000080), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
setfsgid(r2)
r3 = fcntl$dupfd(r0, 0x0, r0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000040)={0xfffffffffffffff9, 0x79777f5f, 0x1, @stepwise={0x200, 0x9, 0xffffffff, 0x3, 0x2, 0x1000}})

07:28:59 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
r1 = dup2(r0, r0)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000140)={0x80000001, {0x7, 0x30, 0x2, 0x80000001, 0x3, 0xc19e}})
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
r2 = dup2(r0, r0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0485510, &(0x7f0000000040)={0x101, 0x6, 0x3, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}]})
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:28:59 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

07:28:59 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x3508, @initdev}}}}, 0x0)

[  548.362928][T26966] binder: BINDER_SET_CONTEXT_MGR already set
[  548.378482][T26966] binder: 26964:26966 ioctl 40046207 0 returned -16
07:28:59 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x8048000}, 0x0)

07:28:59 executing program 4:
r0 = socket$inet(0x2, 0x20080001, 0x80)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x7d)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x1b)
getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000200)=0x4)
pipe2(&(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x84000)
ioctl$FICLONE(r0, 0x40049409, r1)
ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000100)={{0x3, 0x40, 0xfffffffffffffffe, 0xd1e, 0x6, 0x6}, 0x400})
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000040)={{0x0, @multicast2, 0x4e22, 0x0, 'wrr\x00', 0x10, 0x50e, 0x26}, {@multicast2, 0x4e24, 0x4, 0xffffffff, 0x5, 0x3}}, 0x22)

07:28:59 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$getflags(r0, 0x1)

07:28:59 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040)=0x5, 0x4)

07:28:59 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x5408, @initdev}}}}, 0x0)

07:28:59 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x88000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8906, 0x2)

07:28:59 executing program 5:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
getpgid(0x0)
setitimer(0x2, 0x0, &(0x7f00000004c0))
mount(0x0, 0x0, 0x0, 0x0, 0x0)

07:28:59 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x3)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x2, 0xa)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]})
shutdown(r0, 0x1)

07:29:00 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0xffffffffffffff62)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x20002)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x200000, 0x0)
r1 = dup2(r0, r0)
ioctl$BLKBSZSET(r1, 0x40041271, &(0x7f0000000200)=0x400)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x0)
r2 = fcntl$getown(r0, 0x9)
fcntl$lock(r1, 0x27, &(0x7f0000000080)={0x1, 0x3, 0x8, 0x9, r2})
kcmp(r2, r2, 0x6, r0, r0)
ioctl$TIOCSBRK(r1, 0x5427)
ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000140)=0x8000)

07:29:00 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0)

07:29:00 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x60ff, @initdev}}}}, 0x0)

07:29:00 executing program 0:
r0 = socket$inet(0x2, 0x5, 0x84)
r1 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0xff, 0x0)
ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000380))
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0x0, r2, r3)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000000500)=0xe8)
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000540)={r4, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0xfffffffffffffff8}, 0xc)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000180))
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f0000000340)='*', 0x1}], 0x1}, 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3)
prctl$PR_SET_PDEATHSIG(0x1, 0x601c)

[  549.313889][    C1] net_ratelimit: 14 callbacks suppressed
[  549.313899][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  549.325456][    C1] protocol 88fb is buggy, dev hsr_slave_1
07:29:00 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x8121000}, 0x0)

07:29:00 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

07:29:00 executing program 4:
r0 = socket$inet(0x2, 0x0, 0x2000000000000006)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)

07:29:00 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={<r1=>0x0, 0xfffffffffffffff7}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0x10000}, &(0x7f0000000180)=0x8)
r2 = socket$inet(0x2, 0x80001, 0x84)
sendmsg(r0, &(0x7f0000000280)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0xfe09, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1, 0x0, 0xfffffffffffffeb0}, 0x0)
recvmsg(r2, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:29:00 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x101208, @initdev}}}}, 0x0)

07:29:00 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
fsetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.origin\x00', &(0x7f0000000040)='\x00', 0x1, 0x1)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

[  549.898055][T27339] binder: BINDER_SET_CONTEXT_MGR already set
[  549.918893][T27339] binder: 27328:27339 ioctl 40046207 0 returned -16
07:29:00 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x4, 0x2e, 0x8001, 0x200, 0x7, 0x26, 0x5, {<r1=>0x0, @in6={{0xa, 0x4e20, 0xda0c, @rand_addr="0c73076ca0c2d0d21d9266f405d178f6", 0x4}}, 0x1, 0x7, 0x31fa, 0x4, 0x7fff}}, &(0x7f0000000040)=0xb0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e21, 0xb9, @dev={0xfe, 0x80, [], 0x22}, 0x8}}, 0xfff, 0x9, 0x5, 0x200, 0x8}, &(0x7f0000000080)=0x98)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

[  549.943856][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  549.949704][    C0] protocol 88fb is buggy, dev hsr_slave_1
07:29:00 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x20000fff})

07:29:01 executing program 4:
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(0xffffffffffffffff, 0x1)

[  550.023857][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  550.029777][    C1] protocol 88fb is buggy, dev hsr_slave_1
07:29:01 executing program 0:
r0 = socket$inet(0x2, 0x80004, 0x89)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00')
sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04022cbd7000fbdbdf2502000000080003008f000000080002000a000000080001004e2300000400050008000400030000000800038a359d396768e4a275003f000000"], 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0)

07:29:01 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x800408, @initdev}}}}, 0x0)

07:29:01 executing program 5:
mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4, 0x0, &(0x7f00000002c0)=[@exit_looper], 0x0, 0x0, 0x0})

[  550.423888][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  550.429739][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  550.435608][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  550.441384][    C0] protocol 88fb is buggy, dev hsr_slave_1
07:29:01 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000200)={<r2=>0x0, 0xba, "0211d75e37c38f379e2ee645b52676d844ebe5be80b62de74dabcddbd9ff6d01aab59ae80079e2f3c47afe25917b85f7e1835c63ed6c5ea7b71f34bec1cb5ff28b1a06097cf3721e7a310f09901830407e8c5c2203f69b5fc0fe4fdaa63cfa6079f40d0c8bd91f8842ca74680d3270b675eabd5e518dfd295b0df8467b72739f045b7b10a3d1a3a1f2691547e6e6518aa823df255dc4c0f17f5f9282b99c5b841a79cff107cf14f864a6f7fc3e675241005fa6154a9653a2ec86"}, &(0x7f0000000080)=0xc2)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x1f, 0x1}, 0x8)

07:29:01 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x67, &(0x7f0000007f80), 0x1}, 0x0)
shutdown(r0, 0x1)

07:29:01 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x8129000}, 0x0)

07:29:01 executing program 5:
r0 = getpgrp(0x0)
r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0)
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)
close(r1)

07:29:01 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x901208, @initdev}}}}, 0x0)

07:29:01 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x10a)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

07:29:01 executing program 0:
r0 = socket$inet(0x2, 0x7, 0x80085)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
listen(r0, 0x7f)

07:29:01 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xc40e, 0x2)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000b80)=<r3=>0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000bc0)={{{@in=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000cc0)=0xe8)
getgroups(0x3, &(0x7f0000000d00)=[<r5=>0xee00, 0xee01, 0x0])
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000d40)={<r6=>0x0}, &(0x7f0000000d80)=0xc)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000dc0)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000ec0)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000f00)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000f40)=0xc)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f80)=<r9=>0x0)
lstat(&(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
stat(&(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001300)=<r12=>0x0)
r13 = getuid()
r14 = getegid()
sendmmsg$unix(r1, &(0x7f0000001380)=[{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000200)="92c80973a1d951005f3ea6d13222b0ab8b3791bf3ba84271073423567df0d998dfe3c4c9774e8f3155e670e34fc23cf44368b8d7a70de83b55eef61120af20c9af9cd9ee466d314bdc491768fd03a6cc48cf839e621374ae72dadf586ab04bae209cce2cf340f3a30435b43b0921d2ac75e2adb7d4af83d157b9fb271e0a20a16373e078f5ad2c34ed95165b94f62bea6036b9e76c556e23070158d8d501d1bb7aa3001ef8715b970b5556f784c58a3fc162b51ebfebe377da2677e6b1ce8c98b97613c84e9a8ad22c1d0e01365bb7014291fa315d14f08de3dedc65116a2b40b67c50c2d89f65be36087ea6404f7ad41e0a7a7c23c3c1a0", 0xf8}], 0x1, &(0x7f0000000300)=[@rights={0x18, 0x1, 0x1, [r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @rights={0x24, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @rights={0x34, 0x1, 0x1, [r2, r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @rights={0x34, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0, r0]}], 0xc4, 0x44800}, {&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000480)="419e9e8f9873c8ac69cec0650498de5223f345fb669f8b278cd9478f09aa157bb2fbdd8687d896450c81e3e6f8449a9af70fb4d821c6fdf3d7f07d18f9b404e7a148369e78e267ac473f54dd2a3785afb1902b2ed0f1e8ae09c0dc4086133b892de298719f80ff3d24e8b86cc8b066e6b960336e49621c6e1c", 0x79}, {&(0x7f0000000500)="78bbc9d0f2d2f2feb245e1db587cf7fb17c2afdb775fe8f81fb694b50e74b6c3f90f08a9ca834daccecf90b47fbdab45ff91458afda9284a1ebe88ec18f9d3b1939f00e91beac786694ace8732fb4672798bd221719ac0262edc94f6d3ecab22d72ee43c8a4fd265b68d65b247a4ef967ada31fa9d2410e8007eabd07c75fdca42ae8f92f408e0d98bf1ba297ea44d9e3855", 0x92}, {&(0x7f00000005c0)="b2a5d2b2eff1b88601aea329cd0f2ce155482b6b4aef4e64801cb047e1522264ed51cb7d99f94666d53180bfe78a07cb42ebfdef8ac3009aa3394c9c9717175b4fbb107ed04c18f7f560f1ac572bc6a2549461e20bfa0980b636bfed3ee8eb0cff3a526cc69f0a5ec54b2b4d41a61413ed4ec885a4f6129a06cb8a4b60271e3f15d9f4568b1be3ac13f69bfc35ba21360f6b3e4f163a593f4e36197818cff48d415d7324b4815f4018772158c8e0e014d0d5465920f4e3a3193c64", 0xbb}, {&(0x7f0000000680)="14daa9cda563cf5b38b273b1c2c33b64718730d0c9a4d41de470a80ab59c5351a7fd2acc5b1419d2b582eb866f9e4c21f45aeb2a5791c082ec4c8e60507dc4627dae28291642d27d6bdc9b26e8273d8beaba45118e92a8ec5196252196ec1577377ef006428946953b3c682fd4606053b64a209d17a6da9f75b0680f6c6d788a928867270c86f658bcc20149cf19741158b5fadf5384467db6e6b85b64898aa94fb9e84ffb006e3386e2c8453f6902b99ae6e985c22a030cab8b41ac4470e8db9d23c7c66f8f8298ce03171fc43f5047c96775b452d6be37632301f121d282e56cb1613d3b2f38c5431a1b8ebd2cb4a1fcd625b3fcf424f2a648f884", 0xfc}, {&(0x7f0000000780)="af9941483f1fa8758e114ff7acb4207595efe7cda77feb45aab4b4aa6fc8857217dbd16f29f07f388a2b59276b04c5a5fd1c2a4bd69a2ba5cd51732e308601e4d61f9d823649151aac9ae52040f4ef7dad7e6775af9361105aaf66230da074f95ffc847a6b406b269fc03e4147f9c5d05202865155bccfeef9dddf2bfeaaae925af1db5a089d9551aa1cebad32521bfc0b7f9a6941b3fd401fd76010a0822421f4cc0b5bcd914275ff04b8955c853299b68ba40214ba45efbd9707fe798d20", 0xbf}], 0x5, 0x0, 0x0, 0x40000}, {&(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f00000008c0)="a7e00ec5b5f9528332713d63bc5c5668a3182285322322d62e5883f29d78fe4887c046c22047294146fa50da7cfb159fadfc117720c3932e506b9424d28178d3c2878f10c4c49f8828171a82f8144794d404c1c1fe0a072856c7ab456bfe3f944deb3cad7906ba91c97a8f40e41c94998a5e88befb4fac050d6aea50894fe1c4ebf073c88f6a0afd4fb42284ecb9ec928827351b1362bc490d2317e6d0dcd86be62d55441015880b106848f7e44d1778502c52ac6ad5a2a47cc9669b9cf7d086b5dc06b29a5d173df7ab4cfeaf167e79b9a8c48083857aabfc7287f9c7bfaf0bae121ce9603a2fc7952ad92c489baa", 0xef}, {&(0x7f00000009c0)="aa449d01db2afa0037d2d9ed73736f3e254f5bddfb99fadb91292fe4b58d780f071a4cac520f4634bb0c7c306dae1e9ef7760a79a1d8bde7b4e87c28224d02701041c38f7ab0230e3f90447fb4af869782d3a223d03fb99218d895ba5c15f68a4dff9f475c6d8b3f37dfc1485c10fc49b81398bd426a4c57b9cd18", 0x7b}, {&(0x7f0000000a40)="46af2878dcb1ccfeace5084c6d98bd9170b01184b21f41524d06ef292248fe7b05332f927104f81b4c4760d6a5624fdb7955cfb507580c70feb792df6b43f3b43d555645c3489fb46437d34dbd894a33a29b03edd810a3f417abf9ed9c81cef024381350c7b40ab22317eb41ed2dc4fce12f5857e194e02a12207f286dc11eac8f297e5c5587d9ef05d771d2f219edac5686d167148cfbb80a26ffe1816b48644eca47c3e5ac881885a70e", 0xab}, {&(0x7f0000000b00)="f03528e250ba188dcc297056d43d309e243aba796c89b87f78a5915244391b15dfadf10484cb86b24c12b722", 0x2c}], 0x4, &(0x7f0000001140)=[@rights={0x1c, 0x1, 0x1, [r0, r0, r0, r0]}, @cred={0x18, 0x1, 0x2, r3, r4, r5}, @cred={0x18, 0x1, 0x2, r6, r7, r8}, @cred={0x18, 0x1, 0x2, r9, r10, r11}], 0x64, 0x4000000}, {&(0x7f00000011c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000001240)="8416b05e01fc833c7e45bae09701a2bad2b25a66469cd8fad9c04c24164b6bba9edded4d29075004452c04d9e46d8e72de92e9574ecf561f09913dd9", 0x3c}, {&(0x7f0000001280)="3db731788170c19bd951f2fe41547ce220fdea7fc3d1a5bef9c3a6aaddec62d3409339c99bf8509bfce0a9d34cd663ccc3e8470ecf6a7f8dd4c5e514", 0x3c}], 0x2, &(0x7f0000001340)=[@rights={0x18, 0x1, 0x1, [r0, r0, r0]}, @cred={0x18, 0x1, 0x2, r12, r13, r14}], 0x30}], 0x4, 0x4000)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)

07:29:01 executing program 0:
r0 = socket$inet(0x2, 0x80003, 0x84)
fsetxattr$security_smack_transmute(r0, &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000001c0)='TRUE', 0x4, 0x2)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000140)={&(0x7f0000000040)=[0x7ff, 0x5, 0x0, 0x1aefc3e3, 0x1, 0xb8], 0x6, 0x400, 0xb6, 0x9, 0x344, 0xd1, {0x8, 0x0, 0x8, 0x9, 0x680000, 0x6, 0x1f, 0x7, 0x1, 0x4, 0x100000000, 0x1ff, 0x8, 0x2, "f39a0a67228b2b5d57e0bbcd2251cff4522f173d049825c4dbe66256dc33d625"}})
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000200), &(0x7f0000000240)=0x4)

07:29:02 executing program 0:
r0 = socket$inet(0x2, 0x80000, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x40000, 0x0)
ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000001280))

07:29:02 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0xe05108, @initdev}}}}, 0x0)

07:29:02 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvfrom(r0, &(0x7f0000000040)=""/206, 0xce, 0x40, &(0x7f0000000140)=@generic={0x10, "7f68643adb7dcd35d939b61621388d0404fd32be021055c95518860724d7babf7c07b0114c5095e43bb37d18616b478ba047fdf36d984eaf8b0278cdbbf17715ecc1571ef0c8f1e080187c864e3740e55027e49485a3af0c1d7ed763b64d2b1ecb3af94bee102a72a7b3eeffa1c71c413a49b439a2f4cb52c4c60fdca5e0"}, 0x80)
r1 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x6, 0x80000)
write$FUSE_LSEEK(r1, &(0x7f0000000240)={0x18, 0x0, 0x2, {0x1f}}, 0x18)
shutdown(r0, 0x1)

07:29:02 executing program 0:
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=<r0=>0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000180), &(0x7f0000000200)=0x4)
getpgrp(r0)
r2 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0)
setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x9}, 0x10)
recvmsg(r2, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:29:02 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x8048000, @initdev}}}}, 0x0)

07:29:02 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x8150000}, 0x0)

07:29:02 executing program 4:
r0 = socket$inet(0x2, 0x7, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x10000, 0x0)
prctl$PR_GET_DUMPABLE(0x3)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000200)={@in={0x2, 0x4e22, @multicast1}, {&(0x7f0000000080)=""/189, 0xbd}, &(0x7f00000002c0), 0x10}, 0x9c)
r2 = geteuid()
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={<r3=>0x0, 0x0, <r4=>0x0}, &(0x7f0000000400)=0xfffffd2f)
ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x8)
ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000300)={'ip6gre0\x00', 0x3f})
fchown(r1, r2, r4)
get_robust_list(r3, &(0x7f0000000440)=&(0x7f00000003c0)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000380)}, &(0x7f0000000480)=0xc)
close(r1)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)

07:29:02 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
r1 = socket$inet6_dccp(0xa, 0x6, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, 0x1c)
setsockopt$inet_dccp_buf(r0, 0x21, 0xc0, &(0x7f0000000080), 0x0)

07:29:02 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x8121000, @initdev}}}}, 0x0)

07:29:02 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x1000000000200202, 0x0)
ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000100)=[0x0, 0xfffffffffffff11a])

07:29:02 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x305)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
recvmmsg(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000100)=""/186, 0xba}, {&(0x7f00000001c0)=""/230, 0xe6}, {&(0x7f00000002c0)=""/77, 0x4d}, {&(0x7f0000000340)=""/103, 0x67}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000440)=""/218, 0xda}], 0x6, &(0x7f0000000580)=""/4096, 0x1000}, 0xfffffffffffffc00}, {{&(0x7f0000001580)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001600)=""/237, 0xed}, {&(0x7f0000001700)=""/224, 0xe0}, {&(0x7f0000001800)=""/72, 0x48}, {&(0x7f0000001880)=""/77, 0x4d}, {&(0x7f0000001900)=""/31, 0x1f}, {&(0x7f0000001940)=""/49, 0x31}, {&(0x7f0000001980)=""/176, 0xb0}], 0x7, &(0x7f0000001a80)=""/38, 0x26}, 0x7fff}], 0x2, 0x40012100, 0x0)
getsockname$unix(r1, &(0x7f0000001b00)=@abs, &(0x7f0000001b80)=0x6e)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
syz_open_dev$radio(&(0x7f0000001bc0)='/dev/radio#\x00', 0x0, 0x2)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)
r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5)

07:29:02 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
prctl$PR_CAPBSET_DROP(0x18, 0x9)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
sendto(r0, &(0x7f0000000040)="fb2370638806ba3ab665e835a9d6ac6d1538fe9c2d574be58a06b1e10dcd08106ba85324f4295f1bfe87a8fe95825d1dfe88919ff478a593e6d3e713861886c5168cf02189bfd1556ffb55f6", 0x4c, 0x0, &(0x7f0000000140)=@rc={0x1f, {0x3ff, 0x6f4fc237, 0x401, 0x19e4, 0x7, 0x3}, 0x5}, 0x80)
r1 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x1, 0x400)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x3ff, 0x20, 0x1, 0x0, 0xcf, 0x7, 0x1, {<r2=>0x0, @in6={{0xa, 0x4e23, 0xffffffffffff0001, @mcast2, 0x29cc8000}}, 0xa48c, 0x3, 0x3, 0x200, 0x3}}, &(0x7f0000000500)=0xb0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={<r3=>r2, 0x3, 0xffff}, &(0x7f0000000400)=0xffffffffffffff5f)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e21, @rand_addr=0x6}}, 0x3, 0x3d, 0x7fff, 0x6, 0x1}, &(0x7f0000000380)=0x24)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:29:02 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:02 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x800, 0x0)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)

07:29:02 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x8129000, @initdev}}}}, 0x0)

07:29:03 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x1)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x10400, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00')
ioctl(r0, 0x5, &(0x7f0000000380)="8d0acfe5ec4ee5767cb89438f0d61e695497fdd1e5e31a3f5e8fbbb3cb6174b94719142c1a5e2528cc1f13cd7772270b0dda57edef8944ae7ec54569e0a214783e0287acfa66611d697d5fe63ee13e8ad3e91173894d63106dd540076620e09d580a836a94db6991771acb8cf5fd76d4a35095ff4458618e50e4f0a0db6e9f632771a79f8bdf565dc90a239aa82d108683932cb967cbcbe5bfb5eab73f2fea7a40cbc988c023fa15d8b4c1f076a90a39e566fb515d12")
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x188003}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xbc, r2, 0x204, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x1b}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7462}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffffffffff29}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xbc}}, 0x4010)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f0000000440)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0xfffffffffffffffc, 0x4)
pipe2(&(0x7f0000000340), 0x800)

[  552.076365][T28080] binder: 28070:28080 unknown command 26449
[  552.100613][T28080] binder: 28070:28080 ioctl c0306201 200003c0 returned -22
07:29:03 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  552.295960][T28137] binder: BINDER_SET_CONTEXT_MGR already set
[  552.327800][T28137] binder: 28134:28137 ioctl 40046207 0 returned -16
[  552.388253][T28137] binder: 28134:28137 unknown command 26449
[  552.395728][T28137] binder: 28134:28137 ioctl c0306201 200003c0 returned -22
[  552.410169][ T7720] binder: release 28134:28199 transaction 32 out, still active
07:29:03 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x8350000}, 0x0)

07:29:03 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
prctl$PR_GET_FPEMU(0x9, &(0x7f0000000040))
shutdown(r0, 0x1)
r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x3, 0x1)
setsockopt$inet6_int(r1, 0x29, 0x12, &(0x7f00000000c0)=0xf05, 0x4)

07:29:03 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x8150000, @initdev}}}}, 0x0)

07:29:03 executing program 0:
r0 = socket$inet(0x2, 0x4, 0x5)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x800000000000)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
socket$inet(0x2, 0x5, 0x6)

07:29:03 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:03 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x800, 0x0)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x2c0580, 0x0)
ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0xfffffffffffff000, 0x100000000})
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

07:29:03 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000011c0)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f00000012c0)=0xe8)
setsockopt$inet_mreqn(r0, 0x0, 0x25470e8fa890c218, &(0x7f0000001300)={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, r1}, 0xc)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x295)
shutdown(r0, 0x1)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@dev, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000140)=0xe8)
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, r2}, 0xc)
r3 = semget(0x3, 0x3, 0x280)
semctl$GETNCNT(r3, 0x2, 0xe, &(0x7f00000001c0)=""/4096)

[  552.807520][T28215] binder: BINDER_SET_CONTEXT_MGR already set
[  552.838914][T28215] binder: 28214:28215 ioctl 40046207 0 returned -16
07:29:03 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x42000, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:29:03 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x8350000, @initdev}}}}, 0x0)

[  552.904128][T28331] binder: 28214:28331 unknown command 26449
[  552.924890][T28331] binder: 28214:28331 ioctl c0306201 200003c0 returned -22
07:29:03 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2)
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000040)={0x8, 0x0, [{0x7, 0x1, 0x401, 0xfffffffffffffff7, 0xffff}, {0xc0000007, 0x5, 0x2, 0x2, 0x101}, {0xc0000001, 0x10000, 0x9, 0x6, 0x86f0}, {0xd, 0x8, 0x8000, 0x4a, 0x5}, {0x4000000b, 0x6, 0x1, 0x2, 0x3}, {0xd, 0x4, 0x401, 0xd3, 0x3}, {0xc0000019, 0x6, 0xced, 0x2, 0x4c}, {0x8000000f, 0xfa79, 0xfffffffffffff1ba, 0x9, 0x3}]})
dup2(r0, r0)

07:29:03 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x101000)
ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000080)={r0, 0x1d})
ioctl$LOOP_SET_FD(r1, 0x4c00, r1)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x9}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f00000000c0)={'icmp6\x00'}, &(0x7f0000000100)=0x1e)

07:29:04 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x60002, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000240)={0x0, 0x0, [], {0x0, @bt={0x0, 0x6cf0, 0x0, 0x0, 0x257, 0x6, 0x1000, 0x2, 0xfffffffffffffff9, 0x0, 0x9, 0x5, 0x0, 0x6, 0x15, 0x5}}})
ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000080))
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)
r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00')
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x808, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8880}, 0x200040c0)

[  553.533949][ T7720] binder: release 28214:28215 transaction 35 out, still active
[  553.541584][ T7720] binder: unexpected work type, 4, not freed
[  553.556483][ T7720] binder: undelivered TRANSACTION_COMPLETE
07:29:04 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x9c65000}, 0x0)

07:29:04 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x55, 0x0}, 0x0)

07:29:04 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x851e000, @initdev}}}}, 0x0)

07:29:04 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x220000, 0x100)
ioctl$RTC_VL_CLR(r1, 0x7014)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000080)={0x7, 0x6, 0x7, 0x5, 0x3})
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)

07:29:04 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  553.739401][T28471] binder: BINDER_SET_CONTEXT_MGR already set
[  553.754550][T28471] binder: 28469:28471 ioctl 40046207 0 returned -16
07:29:04 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
sendto(r0, &(0x7f0000000040)="6516", 0x2, 0x48000, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x4, 0x1, 0x2, {0xa, 0x4e22, 0x4, @mcast2, 0x4}}}, 0x80)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x8e3, 0x0, 0x109, 0x0, 0x2fc}, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x400000, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x8, @mcast1, 0x2}, 0x1c)
ioctl$void(r0, 0xc0045878)
ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000001c80)={0x1, 0x0, 0x2080, {0x0, 0xf000, 0x3}, [], "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", "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"})

07:29:04 executing program 4:
r0 = socket$inet(0x2, 0x42, 0x66)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f0000000040)='*', 0x1}], 0x1}, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x2040, 0x0)
write$FUSE_GETXATTR(r1, &(0x7f0000000440)={0x18, 0x0, 0x1, {0xc8}}, 0x18)
shutdown(r0, 0x1)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00')
r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000200)='NET_DM\x00')
sendmsg$NET_DM_CMD_STOP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}}, 0x804)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x2000, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000300)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}})
setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000140)=0x7fffffff, 0x4)
ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x3e)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000380)=<r5=>0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000340), &(0x7f00000003c0)=0x4)
ptrace(0x8, r5)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x10bc}, &(0x7f0000000100)=0x8)

07:29:04 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  553.832930][T28558] binder: 28469:28558 unknown command 26449
[  553.851748][T28558] binder: 28469:28558 ioctl c0306201 200003c0 returned -22
07:29:04 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x8540000, @initdev}}}}, 0x0)

07:29:04 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)
r1 = dup(r0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000000)=0x100000000, &(0x7f0000000040)=0x1)

07:29:04 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=<r1=>0x0)
ptrace$getregset(0x4204, r1, 0x7, &(0x7f0000000140)={&(0x7f0000000080)=""/166, 0xa6})

07:29:04 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0)

[  553.993107][T28591] binder: BINDER_SET_CONTEXT_MGR already set
[  554.036256][T28591] binder: 28590:28591 ioctl 40046207 0 returned -16
[  554.128006][T28593] binder: 28590:28593 unknown command 26449
[  554.153265][T28593] binder: 28590:28593 ioctl c0306201 200003c0 returned -22
07:29:05 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x9c87000}, 0x0)

07:29:05 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
r1 = msgget(0x2, 0x82)
r2 = dup2(r0, r0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000200)={"cd63d1835420db93925510386a7921e4862aa1fc5c411b0443ce3c514eb349c100fa11ce8cb55c2767c0d75d6812d8521fbd2c53f908ceab4f9aea351aeb9ecaca94f0145a8a76a24f5200452765d8cd6c554a11d9f3b04af1b8f96b19d9161d4a8b329bd808fae761f0be23d072fe6d4e188e31176b2fd73f47533ee3330a484e4d0ef1d60702492b8c715d7b602f548bfdd4802fc957bf309fba374347453570a39db5740905bceaaac795d222005e85c71ff33d4c056183c584c8b3bf7d509fe0893870cf20bbbfe0fd38d656234ad7f835156613610258d8e5ff515a9c7111e0d388631331e5259a4132efa5b48e2dc32b6d848e07ecde5c3d186d35311c3f5cc84bc4273833c6b0067f8abe3fdb06d9398da1ed466b7bbda183a7d31b18ce7554e4e05f4e9071de54619876bbb53182170ba443ef5523d10d706a9b91fd411d0e6b8be1f6151966b8ba5f7caf8958511d81f87b0952c7470d18418b51c72f9797c8d2141ca319f97c538e4ab7d6294e1e40405b612c6b7e38c7a9491684743e70f54fe4ba4e89cc6cf388cd4c0cdf2a6e075ff1891f05496bdee8b30ce412d9e6e7e7443731d4688229aa4ae0fd2cba4e97464cbc5d0a8653511fe56943fd76da385e5d19300266b6893d80d5f62a1f3a87ba3a5a98019d908205d149a9972f19bf6920ae35f0615067eb26da7a537fc3ec9b39bd9a533c0360b35596d215f93a39b2e5fa3639234981af48a25597b4fe8ff9c8c35c5bd5f3bc2876535dd063193173ff49f1f112609252668f8ece4c5aa0f7665e5e065ba7909a0d829cd96d56d7f81bb2d243aa9384d045ffbe97ab83a14714e1ce8b6bfbc33c98c47cec2ad471a2d40f9ba7d8807892626fd8f1d093f409ed195f72554bcb06d80cb8d03b1cabf59d83c8ec42dba0d9819c3542a09269fe1d8f0ae9730287de279817a1cf3ec892d593d971058f9243c08078395cebbfda988f28e9ced49c02c0672a895f56279f40341e4ec8a924c31e53b75b8ba8f2a38d35587855a59abd47c923443910118fbd84852573fa0ce33526d5a66caf4989c0e0ded5aa9993af315c4a1ef03537f5a1f5a8451bd1d583b4b31c9a35ed7886b8467efbbdebfc412c99423521ed6e5f1983823d590dca124bc12b5506787f44d401a2cad711b2edefd7a06fa2d4beb4284b84f9478d97364f9caf6005dbda650008912f81c300ba01613f1b60f648c87f47a87e92ea85817b74cb5626b8755ee93f8a58495b284bad7b3d4e45b57453577e8a3dc7b6e341c18d3e3ae746c0eee5f2a799fab3453b6b7fde53500c1e4bf432a970a22d62038eb0f068be5137449c285b207f1ed01e9587af10d125bdd4f73ca822662163e7ba969178a89f9682016ca09c868f526edaa2c7f5cb80f7d75ddcbe25e5492d680a54a84eb2416f0218dc89cf9051e2bfef1938"})
msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000040)=""/59)

07:29:05 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @empty}, 0xffffffffffffff51)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)

07:29:05 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0xff600000, @initdev}}}}, 0x0)

[  554.583857][    C0] net_ratelimit: 18 callbacks suppressed
[  554.583866][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  554.595355][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  554.601165][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  554.606986][    C0] protocol 88fb is buggy, dev hsr_slave_1
07:29:05 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x0, 0x0)
ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000180)={0x62e581f9, 0x1})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={0x8, 0xcb64, 0x2, 0x0, 0x0, [], [], [], 0x20, 0x2})
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100)=<r2=>0x0)
getsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
sched_rr_get_interval(r2, &(0x7f0000000080))

07:29:05 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:05 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x83)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f0000000200)="2a996cf0bbecf7b092756d4bd59fe948e4b247287d1623c46170a9a7a9b9b28420cddb139b5cf4595b6fc6e1a0f309f2041a3efcd9c7692b20328e6ff871c39fc1fca841eccc21b1a99b3f8ebf603641b5780272495c57f9f319f0f0108bdca37d724e12fcd4d8452e6f582b75a8da319cb9dbae8eda51f0c35e67ac91bf3fdca1b836512d7e848a3b2a178ad6f253322cc3bd146c6569fac8089d1a3c2ff30c5338cf33a0f7b1328d6d7980a4c62eabee57aefe6d3127", 0xb7}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

[  554.724084][ T7728] binder: release 28590:28591 transaction 41 out, still active
[  554.731683][ T7728] binder: unexpected work type, 4, not freed
[  554.759300][ T7728] binder: undelivered TRANSACTION_COMPLETE
07:29:05 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x150800000000, @initdev}}}}, 0x0)

07:29:05 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x10001, 0x141000)
clock_gettime(0x0, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0})
write$evdev(r1, &(0x7f0000000180)=[{{0x0, 0x7530}, 0x0, 0x4, 0xffffffffffffffc0}, {{0x0, 0x7530}, 0x14, 0x9, 0x1e}, {{r2, r3/1000+30000}, 0x12, 0x3, 0x2}, {{0x77359400}, 0x1f, 0x8, 0x4}], 0x40)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0xfffffed2)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f00000000c0)={0xff, @loopback, 0x4e21, 0x1, 'wlc\x00', 0x10, 0x1000, 0x8}, 0x2c)
r4 = fcntl$dupfd(r0, 0x406, r0)
ioctl$BLKBSZSET(r4, 0x40041271, &(0x7f0000000100)=0x4)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x44, &(0x7f0000000080)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)

[  554.869598][T28831] binder: BINDER_SET_CONTEXT_MGR already set
[  554.904174][T28831] binder: 28830:28831 ioctl 40046207 0 returned -16
07:29:05 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800)
ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000040)={{0x3, @name="ae298a8a9e90b60dfbf11b7e9a91b1f095f522c9ac67e98b3fe0c27cead62591"}, 0x8, 0x2, 0x1ff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

[  554.978135][T28892] binder: 28830:28892 unknown command 26449
[  554.985624][T28892] binder: 28830:28892 ioctl c0306201 200003c0 returned -22
[  555.035989][T28922] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20001
07:29:06 executing program 0:
r0 = socket$inet(0x2, 0x4000000000080001, 0x8d)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:29:06 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x350800000000, @initdev}}}}, 0x0)

[  555.076933][T28922] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20001
07:29:06 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0xff600000}, 0x0)

07:29:06 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)

07:29:06 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000040)="dabe48c1329bc60bb84fa180d2de9d9daeee2e3511881c556a8411", 0x1b, 0x20000811, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:29:06 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x540800000000, @initdev}}}}, 0x0)

[  555.553855][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  555.559693][    C1] protocol 88fb is buggy, dev hsr_slave_1
07:29:06 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)

[  555.624039][ T7728] binder: release 28830:28831 transaction 44 out, still active
[  555.639264][ T7728] binder: unexpected work type, 4, not freed
07:29:06 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  555.671152][ T7728] binder: undelivered TRANSACTION_COMPLETE
07:29:06 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x60ffffffffff, @initdev}}}}, 0x0)

07:29:06 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000040)={0xe6c, 0x820b, 0x1, 0x10000, <r1=>0x0}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={r1}, 0x8)
shutdown(r0, 0x1)

[  555.777083][T29188] binder: BINDER_SET_CONTEXT_MGR already set
[  555.783312][T29188] binder: 29187:29188 ioctl 40046207 0 returned -16
07:29:06 executing program 4:
r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/vfio/vfio\x00', 0x20080, 0x0)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001e40)={0x5, [0x0, 0x8000, 0x80000001, 0x8, 0x3]}, &(0x7f0000001e80)=0xe)
r1 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
r2 = dup(r1)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040)=0x80, 0x4)
shutdown(r1, 0x1)

[  555.881627][T29198] binder: 29187:29198 unknown command 26449
[  555.894466][T29198] binder: 29187:29198 ioctl c0306201 200003c0 returned -22
07:29:06 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x7fffffffefff, @initdev}}}}, 0x0)

07:29:06 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='auxv\x00')
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00')
sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800480}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb8a7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000085)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x4200)
ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0245629, &(0x7f0000000080)={0x0, 0x9, 0xe3a4, [], &(0x7f0000000040)=0x4})
pause()
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

07:29:06 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_acct\x00')
recvmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)=""/143, 0x8f}, {&(0x7f0000000200)=""/248, 0xf8}], 0x2}, 0x10000)

[  556.183868][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  556.189778][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  556.264396][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  556.270379][    C1] protocol 88fb is buggy, dev hsr_slave_1
07:29:07 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x150800000000}, 0x0)

07:29:07 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={<r1=>0x0, 0x58, &(0x7f0000000040)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, @in6={0xa, 0x4e20, 0x7c2d, @mcast2}, @in6={0xa, 0x4e20, 0xffffffffffffff7f, @dev={0xfe, 0x80, [], 0xd}, 0xe0d}, @in={0x2, 0x4e23, @empty}]}, &(0x7f0000000100)=0xc)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r1, 0x3, 0xf710}, 0xc)
shutdown(r0, 0x1)

07:29:07 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000180)={@ipv4={[], [], @broadcast}, <r1=>0x0}, &(0x7f0000000200)=0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'rose0\x00', r1})

07:29:07 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x10120800000000, @initdev}}}}, 0x0)

07:29:07 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:07 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x8)
r1 = dup(r0)
ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000180)={0x4, 0x8bf, 0x3, 0x7})
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0xfffffffffffffdbe)
sendmsg(r0, &(0x7f0000000040)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1, 0x0, 0xfffffffffffffd66}, 0x1)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x82, 0x0)
ioctl$KDADDIO(r2, 0x4b34, 0x5e)
shutdown(r0, 0x1)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000080)={'broute\x00'}, &(0x7f0000000100)=0x50)

[  556.535670][ T7728] binder: release 29187:29188 transaction 47 out, still active
[  556.552014][ T7728] binder: unexpected work type, 4, not freed
[  556.573040][ T7728] binder: undelivered TRANSACTION_COMPLETE
07:29:07 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e1d, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x120)
ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000080))

07:29:07 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:07 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x80040800000000, @initdev}}}}, 0x0)

[  556.664870][T29526] binder: BINDER_SET_CONTEXT_MGR already set
[  556.673467][T29526] binder: 29520:29526 ioctl 40046207 0 returned -16
[  556.698657][T29526] binder: 29520:29526 unknown command 26449
[  556.706652][T29526] binder: 29520:29526 ioctl c0306201 200003c0 returned -22
07:29:07 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
sendfile64(r0, r0, &(0x7f00000002c0)=0x62, 0x3398)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast2, @multicast2}, &(0x7f0000000180)=0xc)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x20, 0x4)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000200)={0x0, @reserved})

[  556.825764][T29547] binder: BINDER_SET_CONTEXT_MGR already set
[  556.847113][T29547] binder: 29546:29547 ioctl 40046207 0 returned -16
[  556.892432][T29547] binder: 29546:29547 unknown command 26449
[  556.915797][T29547] binder: 29546:29547 ioctl c0306201 200003c0 returned -22
07:29:07 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10041, 0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x10080, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8906, 0xfffffffffffffffe)

07:29:07 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
accept4(r0, &(0x7f0000000040)=@ax25={{0x3, @default}, [@netrom, @rose, @rose, @default, @rose, @null, @null]}, &(0x7f00000000c0)=0x80, 0x80800)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)

07:29:08 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x350800000000}, 0x0)

07:29:08 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:08 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x100)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x800, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x82001, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000080)={0x18, 0x3, 0x2})

07:29:08 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x90120800000000, @initdev}}}}, 0x0)

07:29:08 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000080)={0x36, 0x6, 0x0, {0x2, 0x3, 0xd, 0x0, 'vboxnet0bdev&'}}, 0x36)
shutdown(r0, 0x1)

07:29:08 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
r2 = gettid()
process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x30f}], 0x26, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x25e, 0x0)
close(r1)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

[  557.484212][T29681] binder: BINDER_SET_CONTEXT_MGR already set
[  557.507233][T29681] binder: 29676:29681 ioctl 40046207 0 returned -16
[  557.538473][T29681] binder: 29676:29681 unknown command 26449
[  557.557379][T29681] binder: 29676:29681 ioctl c0306201 200003c0 returned -22
07:29:08 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x5)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:src_t:s0\x00', 0x1b, 0x1)
getsockopt$inet_mreqsrc(r0, 0x0, 0x2f, &(0x7f00000000c0)={@initdev, @remote, @local}, &(0x7f0000000300)=0xc)
shutdown(r0, 0x1)
lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="03000e00000002070010404457ec004d9bc976b0070f8887e80103b187592ab9db459ded232897aa9475c174727957762b779859f2e1ea507da673c22421a0efbbd25a6c7c5ebc18a385a9e485ca13688445a87a4b9f5fc52fd2e3217f0e93095665bc9421f63f9648447c203cd26a47f4eb9070a18071ccc69ecd81fccebe7510fefd57dfa36bed03c523ae2bf2a64cfa0000f07e54de"], 0x1a, 0x2)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200))

07:29:08 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:08 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0xe0510800000000, @initdev}}}}, 0x0)

[  557.779228][T29799] binder: BINDER_SET_CONTEXT_MGR already set
[  557.797104][T29799] binder: 29796:29799 ioctl 40046207 0 returned -16
[  557.819135][T29799] binder: 29796:29799 unknown command 26449
07:29:08 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100))
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  557.830617][T29799] binder: 29796:29799 ioctl c0306201 200003c0 returned -22
[  557.938356][T29850] binder: 29832:29850 unknown command 26449
[  557.964034][T29850] binder: 29832:29850 ioctl c0306201 200003c0 returned -22
07:29:08 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x84000)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x2, 0x7})
getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$RTC_IRQP_READ(r1, 0x8004700b, &(0x7f00000000c0))
r2 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r2, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8906, 0xfffffffffffffffc)

07:29:08 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:29:09 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x60ffffffffff}, 0x0)

07:29:09 executing program 4:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0)
r1 = accept4(r0, &(0x7f0000000080)=@caif=@rfm, &(0x7f0000000100)=0x80, 0x800)
r2 = socket$inet(0x2, 0x80001, 0x84)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r3, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xa75}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40000000000000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xdd}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x81)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r2, 0x1)

07:29:09 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100))
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:09 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0xffefffffff7f0000, @initdev}}}}, 0x0)

07:29:09 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x6, [0x8, 0x0, 0x1, 0x3, 0xfff, 0x7]}, &(0x7f0000000140)=0x10)
recvmsg(r0, &(0x7f0000000180)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x65, 0x0, 0x0, 0x0, 0x34f}, 0x100)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000080))

07:29:09 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000040)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

[  558.684431][T29933] binder: 29932:29933 unknown command 26449
[  558.692097][T29933] binder: 29932:29933 ioctl c0306201 200003c0 returned -22
07:29:09 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
r1 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2)
write$eventfd(r1, &(0x7f00000001c0)=0xffffffffffffff80, 0x8)
getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000040)={@broadcast, @loopback}, &(0x7f0000000080)=0x8)
write$P9_RRENAME(r1, &(0x7f0000000200)={0x7, 0x15, 0x2}, 0x7)
sendmsg(r0, &(0x7f0000000140)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0xfe21, &(0x7f0000000100)=[{&(0x7f00000000c0)='*', 0x1}], 0x1}, 0x100000)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000340)={'security\x00'}, &(0x7f0000000280)=0xfffffffffffffdbc)
shutdown(r0, 0x4)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000240)={'veth1\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}})
setsockopt$inet6_opts(r1, 0x29, 0x3f, &(0x7f00000002c0)=@routing={0x2f, 0xc, 0x0, 0x9, 0x0, [@local, @empty, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @local, @loopback, @mcast1]}, 0x68)

07:29:09 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100))
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:09 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfcaf45c78c63d650)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000, 0x24)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0)
r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x2, 0x200500)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x505500, 0x0)
openat(r1, &(0x7f0000000200)='./file0\x00', 0x402000, 0x22)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x581000, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0xa32ae8c, 0x1, 0x8, 'queue1\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

07:29:09 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:09 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0xffffffffff600000, @initdev}}}}, 0x0)

07:29:09 executing program 4:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0xc0800, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000100)={0x2b, 0x3, 0x0, {0x3, 0xa, 0x0, '/dev/ptmx\x00'}}, 0x2b)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
syz_open_pts(r1, 0x2100)
fcntl$dupfd(r0, 0x406, r1)
r2 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000040), &(0x7f0000000080))
sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r2, 0x1)

[  558.897913][T30037] binder: 30034:30037 unknown command 26449
[  558.917818][T30037] binder: 30034:30037 ioctl c0306201 200003c0 returned -22
[  559.081271][T30068] binder: 30066:30068 unknown command 26449
[  559.100790][T30068] binder: 30066:30068 ioctl c0306201 200003c0 returned -22
07:29:10 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x7fffffffefff}, 0x0)

07:29:10 executing program 0:
r0 = socket$inet(0x2, 0x100000005, 0x8000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f0000000080)="cbbace0302a3c8b31d40", 0xa}], 0x20000000000001e6}, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0)
ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000040)={0xfffffffffffffa67, 0x1})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000200)={0x16, 0x6, 0x1000, 'queue0\x00', 0xa9})
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:29:10 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:10 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
socket(0xa, 0x6, 0x1)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

07:29:10 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='autogroup\x00')
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x2000)
r1 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00')
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000440)={&(0x7f0000000140), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x302, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg(r1, &(0x7f00000004c0)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000480)=[{&(0x7f00000001c0)='*', 0x48}]}, 0x0)
shutdown(r1, 0x1)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast2, @in6=@mcast1}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d)

07:29:10 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1508}}}}}, 0x0)

[  559.569011][T30190] binder: 30184:30190 unknown command 26449
07:29:10 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:29:10 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:10 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 'client0\x00', 0x1, "1cf849c7b4cd9694", "0665fb8bc9c7c8e2655e800e0e6e2a3621d76177d705b265cd493bdee9d7f6b5", 0xa76a})
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)

[  559.613581][T30190] binder: 30184:30190 ioctl c0306201 200003c0 returned -22
[  559.713821][    C1] net_ratelimit: 16 callbacks suppressed
[  559.713830][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  559.725414][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  559.752121][T30257] binder: 30255:30257 unknown command 26449
07:29:10 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  559.770815][T30257] binder: 30255:30257 ioctl c0306201 200003c0 returned -22
07:29:10 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
r1 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x2, 0x8000)
ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000280)={0x10001, 0x8, 0x100, 0x7, 0x1a, 0x200, 0x8, 0x81, 0x20, 0x200, 0x5, 0x4f})
sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='0', 0x1}], 0x1, 0x0, 0xfffffffffffffd55}, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x280102, 0x0)
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x20000, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r3)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
r4 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xfffffffffffff454, 0x40)
ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000140)={0x7, 0x1, @stop_pts=0x1000})

07:29:10 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x3508}}}}}, 0x0)

[  560.343828][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  560.349728][    C0] protocol 88fb is buggy, dev hsr_slave_1
07:29:11 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x10120800000000}, 0x0)

07:29:11 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x3, @dev={[], 0x27}, 'hsr0\x00'}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="e97917cb0bac5d24fd552b987ffb169bfad1cfce603bbea970070d2e424436fe45010170e4d5e2699cf278f46a193c9c5ff489bde2a309e34553e92313b82e77822313491283be04557414864828d1f185c9684adbe324b9783a8ff608a34801902d71b0b731baf4ac3265f69379c5c738aca704079634601caa83a02cab3ddf9ccd06feaf209421a819b2b4fd2cb75cfd572f97ff64e11ba83756c5c40b6c15a34c369452ae5c2b", 0xa8}, {&(0x7f0000000200)="e63259d514849ca85b414ccdd77d749b27a62a5970513ace9dd6fe2566c94421a0f02944f16b6359acd2603f046947310120aa543d270c9707ae77372b1424918865ac354ee95dfa3ed27fe58f3c024b5c49804af7becf5ae72a4253a15fde07b31102a8c2b331062b4b36f5773f85c1fbee19909c2931584be7b78bc4988d05d6f1e8ffad2e0cb11785da4286a3d2c2bff31f", 0x93}], 0x2, &(0x7f00000002c0)=[{0xa0, 0x111, 0x7f, "e30a85d45714a164b1439152f40b1cf089ce439270b169aef479207d7a8a49dbdbf8c38aa9be75466a4554f6ca279113c271e828356843aecf3e6f60cc52ab91a9d22febf8e36a1049b9fef8a26f56df0142ef287389264604783bd825591d5cc9ec2cc6c298739cf3144b1de79f0b4c757f0837b1603457e18a11f7301a3d5213153e71ad8399e1a9ec4cba0f2b0a9346928c98"}, {0xbc, 0x1, 0xc8c9, "4700415c1ed61b249f636f8a11c309aa298d7ece0679f2889a34b225d021c7bc4fe54583889722c98fa1d3af6d4d32e932da0a398b36b991197f3055285cb7b07511328954857f4edba795117cca30dc5926e75c52de694006c224c130e7db77daf400f1fe4f2e82f161c16e6c36386660b36e4d6edfac110e678fa71fa49ceca06a3e633f7fc9e9b222908487b98b2011f6098caa2e5a1b4daff1e8431bfc2cff0e471dbe262552d821b4b4b576bf"}, {0x7c, 0x19f, 0x0, "b6f59e08d33474f1dcd302292932b412b450250012edbcf433482bcdae09f74f4d969fc53b4640e459653ced15ea2ea2b3ba69fe50f5db3eb38149023d0df4d3c2e008bffeef89f0b7917ec2318561ee71a61da41c5ca38d93b228ca81ca13a21df8f663803e121b7761ba3f56"}, {0x34, 0x12f, 0xffffffff, "6d21eff66a18d10e3d5b2e23456d92370819d01de978872a7d6205b3383e215b34f68606bc"}, {0x50, 0x1, 0x403, "5690b1e92595fe260d8d305bc1d2b3d04be67971d593c0a07620473b0e22669f549a2be30786a714691b93b57c3c9370bb8b67817577ba1e895eab741fbf24163dc2b434"}], 0x25c}, 0x40008c0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)

07:29:11 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:11 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x52002, 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000080)={0x100, 0x7ff, 0x20, @random="e654034f2f15", 'bcsf0\x00'})
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:29:11 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x5408}}}}}, 0x0)

07:29:11 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480)=ANY=[@ANYRES32=<r1=>0x0, @ANYBLOB="07000000abf34015f7"], &(0x7f00000004c0)=0xf)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000500)={r1, 0x50f}, &(0x7f0000000540)=0x8)
r2 = socket$kcm(0x11, 0x400000002, 0x300)
syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x4, 0x80)
r3 = syz_open_dev$mice(&(0x7f00000006c0)='/dev/input/mice\x00', 0x0, 0x200000)
r4 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x8000, 0x88880)
r5 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x101240)
r6 = syz_open_dev$sndpcmc(&(0x7f0000000340)='/dev/snd/pcmC#D#c\x00', 0xda, 0x40000)
ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, 0x0)
recvmsg$kcm(r2, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
r7 = getpgid(0xffffffffffffffff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r5, 0x50, &(0x7f00000005c0)={0x0, <r8=>0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r7, r0, 0x0, 0x11, &(0x7f0000000580)='/dev/vga_arbiter\x00', r8}, 0x30)
ioctl$VT_ACTIVATE(r0, 0x5606, 0x9)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8906, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000400)={0x1000, 0x6, 0x8000, 0x4}, 0x8)
r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x100, 0x0)
llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/204, 0xcc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='security-*\x00', r3}, 0x10)
getsockopt$packet_int(r9, 0x107, 0xf, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
ioctl$DRM_IOCTL_WAIT_VBLANK(r9, 0xc010643a, &(0x7f0000000040)={0x18000000, 0x2, 0x28})
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000700)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000800)={@ipv4={[], [], @local}, 0x0, r10})

07:29:11 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:11 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)

[  560.575547][T30463] QAT: Invalid ioctl
07:29:11 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)
socket$l2tp(0x18, 0x1, 0x1)

07:29:11 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:11 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
r1 = getpid()
sched_getscheduler(r1)
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000180)=0x5, 0x4)
r4 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xb36, 0x1)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000500)={0x7, [0x8, 0x8, 0x20, 0x7ff, 0x8b, 0x6, 0x101]}, &(0x7f0000000540)=0x12)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r5, 0x702, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x7, 0x4, @udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8094}, 0x8801)
r6 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
shmctl$IPC_RMID(r6, 0x0)
clock_nanosleep(0x0, 0x1, &(0x7f0000000080)={r2, r3+10000000}, &(0x7f0000000140))
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000200)={{0x33, @loopback, 0x4e23, 0x1, 'lblc\x00', 0x10, 0x7, 0x2c}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x4e22, 0x3, 0xd1a, 0x2, 0x979}}, 0x44)
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = getgid()
lchown(&(0x7f0000000280)='./file0\x00', r7, r8)
eventfd2(0x841, 0x1)

07:29:11 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x60ff}}}}}, 0x0)

[  560.825633][T30569] binder: 30568:30569 unknown command 26449
[  560.825903][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  560.837537][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  560.843384][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  560.849236][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  560.854400][T30569] binder: 30568:30569 ioctl c0306201 200003c0 returned -22
[  560.896042][T30576] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20003
[  560.978150][T30576] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20003
[  561.143875][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  561.149758][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  561.156933][T30443] QAT: Invalid ioctl
07:29:12 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x50c60900000000}, 0x0)

07:29:12 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0)
shutdown(r0, 0x1)
open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x1ce8, 0x2, 0x7, 0x6}, {0x7, 0x3, 0x46b3, 0x7ff}, {0x1, 0x1, 0x8b3, 0xcdd}, {0xbde, 0x7, 0x8001, 0x5}]}, 0x8)

07:29:12 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:12 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x101000)
write$P9_RREMOVE(r1, &(0x7f0000000080)={0x7, 0x7b, 0x1}, 0x7)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:29:12 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x101208}}}}}, 0x0)

07:29:12 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40000, 0x0)
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0xe)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

07:29:12 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  561.441722][T30691] binder: 30686:30691 unknown command 26449
[  561.464607][T30691] binder: 30686:30691 ioctl c0306201 200003c0 returned -22
07:29:12 executing program 4:
r0 = socket$inet(0x2, 0xa, 0x6)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000080)={{{@in=@empty, @in6=@local}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000200))
shutdown(r0, 0x1)

07:29:12 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x1d, @remote, 0x4e23, 0x1, 'dh\x00', 0x1, 0x4, 0x3a}, 0x2c)

07:29:12 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
creat(&(0x7f0000000640)='./file0\x00', 0x100)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  561.596672][T30767] binder: 30759:30767 unknown command 26449
[  561.624962][T30767] binder: 30759:30767 ioctl c0306201 200003c0 returned -22
07:29:12 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x800408}}}}}, 0x0)

07:29:12 executing program 4:
r0 = socket$inet(0x2, 0x80041, 0x7)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x9, 0x0, 0x363, 0x2})
shutdown(r0, 0x1)

[  561.709086][T30816] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20003
[  561.727311][T30817] binder: 30815:30817 unknown command 26449
[  561.744028][T30817] binder: 30815:30817 ioctl c0306201 200003c0 returned -22
[  561.760501][T30821] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20003
07:29:13 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)
fcntl$setstatus(r0, 0x4, 0x6000)

07:29:13 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:13 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x901208}}}}}, 0x0)

07:29:13 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x70c80900000000}, 0x0)

07:29:13 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'bpq0\x00', 0xfed})
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000200)=0x5179, 0x8)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:29:13 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001740)='/dev/vcs\x00', 0x2000, 0x0)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000001780), &(0x7f00000017c0)=0x4)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x101040, 0x0)
ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000040)=0x7)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

07:29:13 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x80284)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)

07:29:13 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  562.370777][T30940] binder: 30932:30940 unknown command 26449
[  562.402957][T30940] binder: 30932:30940 ioctl c0306201 200003c0 returned -22
07:29:13 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000940)='/proc/capi/capi20\x00', 0x20000, 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000a00)=@assoc_id=<r2=>0x0, &(0x7f0000000a40)=0x4)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000a80)=@assoc_id=r2, 0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3, 0x2, 0x4, 0x3, 0x100}})
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:29:13 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x230002, 0x0)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x5, 0x4)

[  562.515144][T31007] binder: 31005:31007 unknown command 26449
[  562.540327][T31007] binder: 31005:31007 ioctl c0306201 200003c0 returned -22
07:29:13 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0xe05108}}}}}, 0x0)

07:29:13 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:13 executing program 0:
r0 = syz_open_dev$media(&(0x7f0000001280)='/dev/media#\x00', 0x9, 0x10000)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000012c0)={0xff, {{0xa, 0x4e24, 0x8, @loopback, 0x6}}, {{0xa, 0x4e20, 0x0, @remote}}}, 0x104)
r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10, 0x80000)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000140)={0x3, 0xc55, 0x800a, 0x80000001, 0xbb, 0x7ff, 0x7fff, 0x6, <r2=>0x0}, &(0x7f0000000180)=0x20)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000200)={r2, 0x1000, "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"}, &(0x7f0000001240)=0x1008)
r3 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r3, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r3, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:29:13 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x40a482, 0x0)
ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)={0x1, 0x0, 0x100, 0x84000, r2})
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

[  562.748111][T31078] binder: 31077:31078 unknown command 26449
[  562.772371][T31078] binder: 31077:31078 ioctl c0306201 200003c0 returned -22
07:29:14 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)
ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000040)={0x6, 0x40})
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x80300, 0x0)

07:29:14 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:14 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x80040800000000}, 0x0)

[  563.263323][T31192] binder: 31191:31192 unknown command 26449
[  563.280447][T31192] binder: 31191:31192 ioctl c0306201 200003c0 returned -22
07:29:14 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2082, 0x0)
ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

07:29:14 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x8048000}}}}}, 0x0)

07:29:14 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite\x00')
ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40086410, &(0x7f0000000140)={0x32, &(0x7f0000000080)="a3029dba54ce09a9d90143664837de5b15704dbb634aa583cf381d4c884e26dbcbd877ea2e09ec74e15968602ede2c9b04db"})
r2 = msgget$private(0x0, 0x2)
openat$cgroup_ro(r1, &(0x7f0000000180)='cgroup.controllers\x00', 0x0, 0x0)
modify_ldt$read_default(0x2, &(0x7f00000002c0)=""/4096, 0x1000)
msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000200)=""/175)

07:29:14 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:14 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000040)=@in={0x2, 0x4e20, @loopback}, 0xffffffa3, &(0x7f0000007f80)=[{&(0x7f00000000c0)="03ff775697c14c79685d6fbecfff7b0028", 0x1}], 0x1, 0x0, 0xffffffffffffff36}, 0x0)
shutdown(r0, 0x1)

07:29:14 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0xefffffffffffffff)

07:29:14 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0xe20, @loopback}, 0x3)
sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000040)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80), 0x1, 0x0, 0xfffffcde}, 0x0)
r1 = msgget(0x1, 0x12)
msgctl$MSG_STAT(r1, 0xb, &(0x7f00000001c0)=""/242)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)={0x6, [0x4, 0x9, 0x8000, 0xffff, 0x6, 0xde]}, 0x10)

[  563.446579][T31224] binder: 31222:31224 unknown command 26449
[  563.477160][T31224] binder: 31222:31224 ioctl c0306201 200003c0 returned -22
07:29:14 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:14 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x8121000}}}}}, 0x0)

07:29:14 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)

07:29:14 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
r1 = fcntl$dupfd(r0, 0x406, r0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000400)={<r2=>0x0, @empty}, &(0x7f0000000440)=0xc)
connect$packet(r1, &(0x7f0000000480)={0x11, 0x11, r2, 0x1, 0x81, 0x6, @random="20e762f91add"}, 0x14)

[  563.707283][T31330] binder: 31329:31330 unknown command 26449
[  563.747011][T31330] binder: 31329:31330 ioctl c0306201 200003c0 returned -22
07:29:15 executing program 4:
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x3f, 0x0)
recvfrom$rxrpc(r0, &(0x7f0000000080)=""/107, 0x6b, 0x100, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x7, @remote, 0x3491}}, 0x24)
fcntl$setpipe(r0, 0x407, 0x7)
sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(0xffffffffffffffff, 0x1)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000008}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1ac, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdb}]}, @TIPC_NLA_LINK={0x94, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1817}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff00000001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x24d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0xc000}, 0x800)

07:29:15 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x800, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x13f, 0x1000}}, 0x20)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4000)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r1, r2}}, 0x18)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0x50, &(0x7f0000000200)={0x0, <r4=>0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x16, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', r4}, 0x30)
ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40086410, &(0x7f0000001300)={0x1000, &(0x7f0000000300)="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"})
r5 = socket$kcm(0x11, 0x400000002, 0x300)
recvmsg$kcm(r5, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000001340)=""/116)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8906, 0x0)

07:29:15 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x90120800000000}, 0x0)

07:29:15 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x8129000}}}}}, 0x0)

07:29:15 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:15 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:29:15 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f00000000c0)={0x6, [0x0, 0x0, 0x0, 0x0, <r1=>0x0, 0x0]}, &(0x7f0000000100)=0x1c)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r1, 0xcffc}, 0x8)
r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x20000)
ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000080))
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)

07:29:15 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:15 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x42080, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f0000000140)=0x4)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

[  564.307381][T31459] binder: 31452:31459 unknown command 26449
[  564.330929][T31459] binder: 31452:31459 ioctl c0306201 200003c0 returned -22
07:29:15 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:15 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f0000000080)="c7ed58acb62133a12fc104aed06f03113d965ec7cd89119de4bc5cb5ac6ddb9347482efa44897147cad5ebed705f412cc59dfaee8979b4ec1c0b7d88103a814390b17d01888b013e7c3bac938889fe205cd95e26fe9283d177f070b2992c0f8a5da2ad0a971aeeaa99b6b8a9cdfa061a54a02288b77ea0316ae4200a085fa1cef1d11f1f9e0e76d16cc4a7a68719b829e7397a2fe01d9b7429dd0591324d30b1547a7a6678fd41261d8b47459d90bb70709d42b0d410fd560e", 0xef5edc8e2fd33975}], 0xc7}, 0x0)
shutdown(r0, 0x2)

[  564.403498][T31505] binder: 31502:31505 unknown command 26449
[  564.426356][T31505] binder: 31502:31505 ioctl c0306201 200003c0 returned -22
07:29:15 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x200000, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x8000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
gettid()
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x1156}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x444}, {}], 0x4, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x6}, 0x8)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r2, 0x40000000af01, &(0x7f0000000140))
r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[])
close(r3)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3})
write$P9_RMKDIR(r1, &(0x7f0000000080)={0x14, 0x49, 0x1, {0x81, 0x0, 0x3}}, 0x14)
r4 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r4, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r4, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:29:15 executing program 4:
r0 = socket$inet(0x2, 0x100080001, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)

[  564.539026][T31584] binder: 31573:31584 unknown command 26449
[  564.572226][T31584] binder: 31573:31584 ioctl c0306201 200003c0 returned -22
[  564.983865][    C0] net_ratelimit: 16 callbacks suppressed
[  564.983871][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  564.995509][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  565.001411][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  565.007484][    C0] protocol 88fb is buggy, dev hsr_slave_1
07:29:16 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x4000c0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

07:29:16 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:16 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x8150000}}}}}, 0x0)

07:29:16 executing program 4:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x2e6, 0x2)
getsockopt$inet_dccp_buf(r0, 0x21, 0xcf, &(0x7f0000000080)=""/11, &(0x7f00000000c0)=0xb)
r1 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r1, 0x1)

07:29:16 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x58000, 0x0)
ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000004c0)={0x7fffffff, 0x32, 0x4, 0x9, 0x3, 0x2, 0x3ff, 0x2c88, 0x5, 0x800, 0x7fffffff, 0x7ff})
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
r2 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffffff, 0x101000)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4004240b, &(0x7f0000000400)={0x2, 0x70, 0x9, 0x4, 0x4, 0x4, 0x0, 0x5, 0x20, 0x0, 0x44e3, 0x1, 0x200, 0x2, 0x1, 0x8, 0xffff, 0xffffffff00000001, 0x7, 0x4000000, 0xfaae, 0x1, 0x101, 0xc8e, 0x100, 0x400, 0x6, 0x5, 0x0, 0x3, 0xa00, 0x0, 0x100000001, 0x2, 0x133c, 0x10000, 0x0, 0x1000, 0x0, 0x401, 0x4, @perf_config_ext={0xff, 0x40}, 0x10c, 0x1, 0x1ff, 0x5, 0xbe8, 0x1, 0x400})
ioctl$BLKBSZGET(r2, 0x80041270, &(0x7f0000000340))
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x5)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x105000, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond_slave_0\x00', <r4=>0x0})
connect$packet(r3, &(0x7f00000002c0)={0x11, 0x1, r4, 0x1, 0x5, 0x6, @remote}, 0xfffffffffffffebd)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000680)=ANY=[@ANYBLOB="060000000c000000050000000180ffff070000003f7adc2a276156f4ea8b7caf6b40b95f013d8c66c810e61b6369150a5847f300a19c3c0100000000000000ff24af4eb128b7a85a9e6cca621ebe2cfe8f53449e7fa9411841a3b63602666d7fa8302c19675864762cc9880aa7c645fcc15bde86110d93187f4bd040ffc79d48e8542fe1fec407e26a610b35239134a03287564c46c50000007f0000000000"])
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000200)={'filter\x00', 0x0, 0x3, 0x35, [], 0x4, &(0x7f0000000140)=[{}, {}, {}, {}], &(0x7f0000000180)=""/53}, &(0x7f0000000280)=0x50)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000005c0)={'HL\x00'}, &(0x7f0000000600)=0x1e)
perf_event_open$cgroup(&(0x7f0000000540)={0x1, 0x70, 0x9, 0xffff, 0xfffffffffffffffc, 0x1, 0x0, 0x4a, 0x1400, 0x1, 0x1198f5d, 0x3835, 0x0, 0x7, 0xfff, 0x1da, 0x9, 0x5, 0x1, 0x6, 0xfffffffffffffff8, 0x5, 0x5, 0xfff, 0xbdc8, 0x80, 0xfffffffffffffbff, 0x4, 0x800, 0x3ff, 0x5, 0xde39, 0x7, 0xc6d8, 0x0, 0x1ff, 0x20, 0xf9, 0x0, 0x376, 0x2, @perf_bp={&(0x7f0000000500), 0x2}, 0x20000, 0x81, 0x2, 0x3, 0x10001, 0x2, 0x7}, r3, 0x7, r2, 0x4)

07:29:16 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0xffefffffff7f0000}, 0x0)

07:29:16 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  565.194140][T31608] binder: 31607:31608 unknown command 26449
[  565.233083][T31608] binder: 31607:31608 ioctl c0306201 200003c0 returned -22
[  565.303846][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  565.309808][    C0] protocol 88fb is buggy, dev hsr_slave_1
07:29:16 executing program 0:
r0 = socket$inet(0x2, 0x804, 0x1008)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000200)={'mangle\x00', 0x1000, "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"}, &(0x7f0000000000)=0x1024)

[  565.350450][T31688] binder: 31686:31688 unknown command 26449
07:29:16 executing program 4:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x480, 0x0)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000180)={0x65, 0x3})
r1 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800202a4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x114, r2, 0x9, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xf4, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb6a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000810}, 0x1)
sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r1, 0x1)

07:29:16 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:16 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x2000, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', r1}, 0x10)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6c, 0x40000)

07:29:16 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x8350000}}}}}, 0x0)

[  565.430839][T31688] binder: 31686:31688 ioctl c0306201 200003c0 returned -22
07:29:16 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:16 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0x12)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000180)={&(0x7f00000002c0)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0xffffffffffffff12}], 0x1}, 0x0)
r3 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x101080)
ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000240))
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0xfffffef7, 0x0, 0x379}, 0x0)

07:29:16 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:16 executing program 4:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x5, 0x230a00)
dup(r0)
r1 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000000080)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r1, 0x1)

07:29:16 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x851e000}}}}}, 0x0)

[  565.943860][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  565.949734][    C1] protocol 88fb is buggy, dev hsr_slave_1
07:29:16 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x40)
socket$pptp(0x18, 0x1, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'})
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@can, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)='*', 0xffffffffffffff00}], 0x69, 0x0, 0x250}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:29:16 executing program 4:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000080))
r1 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x4}, 0x8)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r1, 0x1)
syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2)

07:29:16 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0xffffffffff600000}, 0x0)

07:29:16 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x8540000}}}}}, 0x0)

07:29:16 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  566.163391][T31979] binder: 31976:31979 unknown command 26449
[  566.173893][T31979] binder: 31976:31979 ioctl c0306201 200003c0 returned -22
07:29:17 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x0, 0x84)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e24, @loopback}, {0x1, @random="7648eb99695f"}, 0x20, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'nlmon0\x00'})
r1 = socket$kcm(0x11, 0x400000002, 0x300)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x401, 0x100)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr\x00')
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0)
recvmsg$kcm(r1, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x8001, 0x80000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8906, 0x0)

07:29:17 executing program 4:
socket$netlink(0x10, 0x3, 0xe)
syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x0, 0x20080)
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7ff, 0x420600)
timerfd_gettime(r1, &(0x7f0000000080))
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000200)=0x54, &(0x7f0000000240)=0x1)
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000000c0)={0x1f, {{0x2, 0x4e21, @local}}}, 0x84)
ioctl$TIOCSTI(r1, 0x5412, 0xb087)

07:29:17 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:17 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0xffffffffffffff9c, &(0x7f0000007f80), 0x1, 0x0, 0x23d}, 0x3)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000300)={0x9, 0xfffffffffffffffe, 0x5, 0x40, 0x8, [{0x1f, 0x80000000, 0x8}, {0x7, 0x9, 0x4000, 0x0, 0x0, 0x100}, {0xc56, 0xec97, 0x6, 0x0, 0x0, 0x280}, {0x7, 0x3, 0x3, 0x0, 0x0, 0x600}, {0x0, 0x20, 0x7ff, 0x0, 0x0, 0x2}, {0x6c2c00, 0x8, 0x7ff, 0x0, 0x0, 0xc00}, {0x20, 0xff, 0x40, 0x0, 0x0, 0x100}, {0x9, 0x1, 0x26fb, 0x0, 0x0, 0x1}]})
ioctl$FS_IOC_SETVERSION(r0, 0x40047602, &(0x7f0000000080)=0x6)
fdatasync(r0)
r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, &(0x7f0000000200)=0x1c, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000500)={0x6, {{0xa, 0x4e23, 0x100, @dev={0xfe, 0x80, [], 0x22}, 0x4}}, {{0xa, 0x4e20, 0xc, @mcast2, 0x8}}}, 0x104)

07:29:17 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0xff600000}}}}}, 0x0)

07:29:17 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040), 0x4)

[  566.458781][T32097] binder: 32094:32097 unknown command 26449
[  566.477094][T32097] binder: 32094:32097 ioctl c0306201 200003c0 returned -22
07:29:17 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:17 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x53e0, 0x8001, 0x81, 0x5}, {0x8, 0xffffffff, 0x0, 0x20}, {0x8000, 0x4, 0x50a, 0x80000000}]}, 0x8)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)="404d858c756860aa5b8f00", 0xb}], 0x1}, 0x0)
shutdown(r0, 0x1)

[  566.583858][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  566.589726][    C0] protocol 88fb is buggy, dev hsr_slave_1
07:29:17 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x150800000000}}}}}, 0x0)

[  566.679005][T32211] binder: 32205:32211 unknown command 26449
[  566.698167][T32211] binder: 32205:32211 ioctl c0306201 200003c0 returned -22
07:29:17 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1508}, 0x0)

07:29:17 executing program 0:
r0 = socket$inet(0x2, 0x800000000080001, 0x84)
r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x4, 0x101800)
connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000080))

07:29:17 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  567.009368][T32340] binder: 32339:32340 unknown command 26449
[  567.032544][T32340] binder: 32339:32340 ioctl c0306201 200003c0 returned -22
07:29:18 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)
io_setup(0xbdde, &(0x7f00000010c0)=<r1=>0x0)
io_cancel(r1, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x3, 0x1, r0, &(0x7f0000000040)="03fdfccb9b948793a072ffe73fa52b1eade2d52a7269c3098e62cc284d7142a47a8541fb25dcfeaefe8798067afdbf64b59ef2e49985b7bdabc4d36562af437e4cf8cd7f7c88ad49aea9d2bc4bd8ec1edf5cc2b1a810ac9de84114fa9dbf25af4a7e36019c65570c892b0afa2f367b2415eb09b3b2e4d41b59ed618cba2f9b45cd425e645aeb8e334bd428434a50fd0b4d076e19c285877fd3c3223f1cb7bd3c816b1d67fa92fdab1152568ebf0732022995199d16ca94b9ac1c5d46afc657f084f7667e374999b45aee4f71ff4f577ae7c49eaad08d4591d2bdca8651a968298d2f2d14497d781dd8e0f7e07f50b3ef1b02970181b4b6ad3fa98f4af750e9aa769b84864e47d89f4ff13b79a14902769ab0de812f65d282b5596829600066a61b7173587822e2ca29fbed87c19447a989f0155ba11f660a3a94d4139441237bda984b2f17c2acc25c86e7dda718c9f9d1ce6011249c26472dea93e0a39fa014683b8bce6aef9d992163acc0ec0c8aa4dd8ce349087eaf1d2afa38225fb46467b2b92c3a1f13b93fe43e5249048aa4074dc1422ce32ed39593af04b1e310d6711058820213403a4f96549a389fa6a613651dc0ab44a5f79dc448358382f9be9157f76846baf21b85d6c96afa111d774ab0f32794b72eee3bb06260d36cfa0484d724c343a5f950cf647dfcb534c8f0a690004a008e79dd64a2afe34130ec0dbe6d1b604e84f3fb6b292cdc3eba35110420be861ef0ad9016c87aff662537daa11da8f6d05f76f92674e3fa6adbde3bd6b5e75f4f415b5ba7269265f9291d4e4efeaddadc05c7aeb0ca1e4f0d8b57ff2a9e92c00ebba436d97451bdc9fdc207ccf6cd9afca5ab2fc7ba2dd1d286cebe4ef63d66fd382df92cfbee8cfa312fb1052a1e880825062cada5c300b2201e191a06a49ec6c0d6d16404b8a4b5f94708f0001a40beb49177813f666c4f89cf2fb6ced3092a12bfdd2391ab4f37f7c555f0929b1f5d119cb280c8cf4264bafe1ed47d60aa1b2a8f0d757337562529ad63448d0f57818046623910d9a5aa246906528c463e86c92c78239387bd196df1057212ad6745928c24efb6f83da24962ee365487b9761819aca78787738b05122695fc863dbe688962eb0418ecfeb67cb2c165bc52c65da507cce43e6a4c144307c905e3fca8ccba7833881d73e449dc0c6a5195ae5b90bc75ee5a5969475e750275c623180e56934386caafcb5f13ff38a17dd54ec962782ee420235631d3ec75d9bf6a96de201af82227e9754d8e78d83af53f7a29288b10664179d694f4449af4b251d4b6886c992eebeb954ccdc241d9bf602b655adbd8a56bd3460fef2ae397f25aa1741ab058ff863e6b3b44826a327d75e527dbc0badc7b01f2a2191e65d08da99bc92ee4cff2b3c6815aafcdb4b106cf3b3aaf53dbf5e9148a88bafadb16ab0f4851c6037c0f782dbf5dbf13056a90d359aceb8929e837ec7bc09c07f3452dbccd7369339f8270f28185a97c5cd789231bf5ec56c4134d65eb58f9ba0189e52900f7bfad756c4ae1f49f1405ea97c950e38a21aa1e1ae36b5fa3d0569b7985b1e3334f8b279f1b3697237d6f7922344d4208bce6a90c00ca16f096eda0564973a5ae3f5b9fa2c71b8e31100ec32ac01fb9d7397bc21fb58ce29f6addc7d7e7d01b80f1d73cda85918762ecf36f398672608f5abe460d7fa8b5930ed48f37a7595dd11189a293d23da5ccdeae78dad55857daa214dc54ed12389c6af5879451057e0b2e076e5fa07bb312c033386c752c705ba00048d3aa577b7aa1b8beb4cc478ef0cc27d41b5b55641458e9b0a9e9b5395b10a4260ebac765b72215049806af306a499d0af2b87a5036bebadc70a5d7d8f80277a812bac617ab320cc0e9e6e0a49b3b4e90d4ecf30f0fc1ff0d8ecf24b0c92438d108f307fa61911a77fd44319575174599d513210ea905be8cef013e28fc4cfb33af268ec19c35a40575a9720baa921fd2ae24edc8cc6d48ae06129c390354472883e13267a27517d7c80dbcc78592b2af4b3d28702c7b7747186c962cab3c67c69634eed9e5d7ee69355c9f81b6229e4511bd4b07c89246760c0df523bf4a3f6ec3b6286f79b9538738446b3777f49b36043e6260c71543307dd3cc2fa7973f6eafd8760fa8575b27ebbd4ae2f8c7392e34bf40a4483de3927e15f8ace9cca4cc40eea265543e3b81a2048b29540c69a3ad4c2503a9398c48820eebd60c2b037a85f3aa1c6a55248b691a41a106dcd2695cd83b21c779e7bec7b9221b54ee174479e9777cca0a9c16b99d187576cca0474a36b364ba75968407d09dde81fe402ed1c18fe1abb1f903b9accfb2912feb7ea4a1a8136a18927b8e99c567f70056321f130f45c1876ed194301293f9b0cab37264d5d17ca760afa119f047e92fb0cd92b79dcc408217f0cdca4fca7b376406e1cdcc12565450119e829ea73d9dccaa45dbd33b9eb5339cc07fb3a4621be9e235de44597f887c7e4857fd4371f3b7baec902101cba5dc1a184def4c217ed31af4415fd8fc9cc694ae5d1ed93cb70e47aedc75d3b21dcc1a39d873c9be736e389f7d946f4302b61656fb5b65cc68e9be90c085c26e9ec0219a878cf6051499621a00a7bcdd9d8e9000958b9c410725a513b453b6c37f389c8a0e4812e77cc3329fcf4d8bd4b3bb46006ed673861af3ae02129b6a87cf7a2f8bb60108271e0933e64c12c5a0658d6aa99184c7b508d8fe386ab9534577d97c626e3e60a346912b1f12231f06c195fca1b8e0dcb73182d2a7795f3762961e5df4d2af665e2ec986e0b4c546d1ff0e06f20cf24b16776a142c708e6947fb59c6ba118d493a5c6f7bcf33a39fa9e66439af5cb9b6f8aa436dc36745e7cf975f458c051e83d523a202f714014d7d42edf587ae799b8988456a4ee21a45afea05fbf14ddfd4fcdafc1f04f9e43d65f894d8282ffb3314fde132efc7ec0d29978aee5ac232d35a679fedfcf3204cd7b2cf3df566b7338d4483493b91104f1338c5794e4a7784647b35596553589cf3a611b6b282bb31de8c4904204234a1c910355e4a8c982b80f0bea0fb281544a41318fd3d778d0e332a998f2790697c1ac5f0f785ea328ba3877235d7748c80cc2d35a0368489934fba8a0a14968fed29a2d84e9ab92e57a85879cc095ade19adf91b262e92b030659f5d9b48709670f8ca02c8b3c1bf847b01f50eb6d583f982da76e85f7f798549918f8e8ede78652717b8f869c2efb267c25db6d19939c18e2f46015e7d4d07b386f035b994e042cf9433babfd778f4d2ee8e26371af4719900fca47e90f51d71c98542fad83582f398955458dbd35e4ffddf171033216c95a616d2455806a4c712218b7e1df5ecf1b3cce78be4b3d8b2615e778b9b690cebdacd74d76d24b43c72c3e336da260abac0c14b8f254c79a54dc4e882b4b278a380268b59a6f1649369ae4f6080ea84e36535b284ca6d9222cd8db38fce4d461aa856f18c10877492c92d85ea2a2a4fff04c9bfaf7e97710f13ed2ad9622263a1e5e9d8bc702db5729c077cdea4c565e92829a6dd309ad84f6ed343e75a3636d68535ac5a3888758d54002e796f28c9705b56d9569ee01ccbdabcafa1b1fe7e27bc1459b14a9ea7e4e995042f30d19c58ad8c3bd30ee3ac367d0dd1e97fdbb241de9b25c7b2238f6b3d02bb97c6833c6cf3c7b6b50bd92f7ae14454759e78de6857d245b11191cc08936ba37f561bf003f5eca2d864dcdbc76914199f806a732edfa85496047f3c60f7cbac59a5e019f7f1d5bec1b641218f3992c7dd1a188c034e98e97a8b596076867fb3af6fc2dc0f2d6f804e8c7a4ccc3256aa4281cdc236b2a32a193cfefbd7a616c845a01e617fdf21a53c0494ebefc82392d942c71ef511bb7b416ab076fd58170e6d0e04ec73d6433365549cada5303c02a4f4e969780125661d6a3ece02e8fdfad451d751fcc67cba978cc32cfcff8ad7a206eff5f6a6fc8d5ee0312fd756e5d146309f2821ff0aae13dfa147ff5eb69f5f0d4a7e9573d4bbcd843e484c9318554280efd37d44a74fe687369e91614cb8901abf0516e3dc26362e9123c00970d333ee049ff621503c07a1c3f88f66493c3cb818aa204af64b20256b8f62b89fcead80c23a086199682b0ff8522bef1e02c74e177a1af396534fb7d3b3ea147c8da0129c0b2599a3f1c44de9a85e569e90e7d1db57822600b5d95430415eedbdd5c7386dbf75039a2e0ecc14b05c351da164aead0a3b4d53f91260b9d05eb2ac596d004d82deb75c4aa18de356c4c24099c31f86a76c9a629dda56b92f16537f9d828f78cccfadb4aa308bfd619b909c8dc92198f1f952b809ca1e0156f62a847402cd55effabf66ab0bf5524042c480bf346894400d0ad8c71f419513e306da9443257233a7be1ab1eb685c8db61fd600b078b7c658b2f101876ffcc4f3918fc628b9e430616dbc33c4164b5dfe7db91185326c2b5b0b7b0186a548a8e2246b786d0d547058ad86ca5903d2a10c6f89894d89330419a487611b4e9e64902dabb5c84b8a846ee1aa4b5f28e64d942f69f22b18f00562f7de54025619f23bc9fa1de603c1df4d6ec9d819b530f8ab72075d5532ab9c9e1e5730328e0975a827e2774745c8a5fb110c15af54824809f17a8973858d51d077a0d6d5faee5add4476f00885fb96d5dc1bb02954a385626dfec21f5051af7f72d8cde62f86d407b258e12ee88218d11bf8f40e5e0af01f19bc5eb6c9eb4b01b53ba816bc6c4f985ad3edcd38540816503e3d1bbcee3a4420097f892c8feb35cc25381c29375f75b41aab5187c9b38dd56c888e4b9cf9c37d6832cc18aedad75efa1a13f64622b3e34fff42245a8e2b66ba8ee128ed480698c4ca86b78ceae42c68534f974b1e3525c5cc093d5cb049c1f36ee852ec2fc5dde63bd08851a1674a08e17af14ca75705029de030b8e726b234e5f5c64fa958840536d5ffade22943b9e9fe854592b04a41b5de186db3fe3887823f2be13464c729aac65ebfe29991655bcc82076c5d857e1b9c1090b2eb73686524bfa24cb07bd45ec1e4dd7ebcd691f4045a9501731f42c6fa8d0fc6b219a0e69afadfe30a2554bd90dbf2be6525140a55c72f68a3cb722a5e044bca025effdc36f9123012d9f3960d54e0c1a279ed1894d5eb058ec4be8c0e02f95e99ea7656c3198ad2ef1142e3ccea79c30645df37a68fa2932348f16b002207a89a3d0a0610663689e734a38467d7656799042dd9d0763cd14fe12d07f0f9eb33a9ffdd53bcac24023d0c267544c003b5633ac27bdee416e0c155a40ef5b4b9b20f247dcdf8c54e4a25101688cf4d5c13f2a1b4bb8b3d6e31cec3fd73442a6f058faf0e13ecd02752023ad48e3e111d86578599a2d0de8f72620f7cf2f550e22ec343ddc584b3d09c9cc677aa338d15f3aac9c86abc3eb1de15ab98bb6183c32aec85aeaaaa345240747a7c98f8a62aade5094ad275a470880aec9d9b025881edcf713ac45fd70f38591e55e6afeb561c41a335d5d72454ef7489c9fc1b09eab69ebd29176d385a4d738c86dedc5fb179d071b85d854aee928548f370cb4f024adffe3aed95b080c1ace0a6a835ec6e095ed6e520c37cb5cfe3ba2270bcbcdf7cb8d8424995bfb180f15860b6347fe42100cf37fa7df30c9ab757b777fd0e74908ad0c351c67bddd95e2a887026a48f90110a3f91c33fe8012e750f59ad29db877aac3096e3798675c9928e842ad1145432f8035daa38ee5c77c706decb9ac266474bf482f4", 0x1000, 0x8, 0x0, 0x1}, &(0x7f0000001080))

07:29:18 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x0)

07:29:18 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x350800000000}}}}}, 0x0)

07:29:18 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@caif, 0x39f, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:29:18 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:18 executing program 0:
r0 = socket$inet(0x2, 0xa, 0x84)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000080)=0x100000)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x20000, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

[  567.318768][T32357] binder: 32356:32357 unknown command 26449
[  567.357068][T32357] binder: 32356:32357 ioctl c0306201 200003c0 returned -22
07:29:18 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x80)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge0\x00', 0x1000})

07:29:18 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  567.506359][T32441] QAT: Invalid ioctl
07:29:18 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x540800000000}}}}}, 0x0)

[  567.572226][T32478] binder: 32477:32478 unknown command 26449
[  567.606461][T32478] binder: 32477:32478 ioctl c0306201 200003c0 returned -22
07:29:18 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3508}, 0x0)

07:29:18 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:18 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
prctl$PR_GET_CHILD_SUBREAPER(0x25)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0)
ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x20)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x2df)
shutdown(r0, 0x1)

07:29:18 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x4)

07:29:18 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x60ffffffffff}}}}}, 0x0)

07:29:18 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:18 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:19 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)

[  568.264980][T32721] QAT: Invalid ioctl
07:29:19 executing program 0:
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000080)={'HL\x00'}, &(0x7f0000000140)=0x1e)
r1 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000200)={0x100000001, 0x3, {0xffffffffffffffff, 0x3, 0x3f, 0x3, 0x2d}})
sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:29:19 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:29:19 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x7fffffffefff}}}}}, 0x0)

07:29:19 executing program 4:
r0 = socket$inet(0x2, 0x80002, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)
socket$tipc(0x1e, 0x2, 0x0)

[  568.408574][T32727] binder: 32725:32727 ioctl c0306201 0 returned -14
07:29:19 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x60ff}, 0x0)

07:29:19 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:29:19 executing program 0:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000080))
r1 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$NBD_CLEAR_SOCK(r0, 0xab04)
sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:29:19 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x3)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000000)={<r1=>0x0, 0x9}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r1, 0xaa}, 0xc)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
shutdown(r2, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x20, 0x2)
setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080)={0x914, 0x80000001, 0x80000001, 0x1000}, 0x8)

07:29:19 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x10120800000000}}}}}, 0x0)

07:29:19 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040))

07:29:19 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  568.869627][  T387] binder: 379:387 ioctl c0306201 0 returned -14
07:29:19 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x8, 0x0}, 0x40000000)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f00000000c0))
ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000080))
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000100)={0xd000})

07:29:19 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x20000fff})
syz_open_procfs$namespace(0x0, 0x0)

07:29:19 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  568.954883][  T437] binder: 434:437 ioctl c0306201 0 returned -14
07:29:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640)='/dev/fuse\x00', 0x2, 0x0)
dup3(r1, r0, 0x0)
rename(0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)

07:29:20 executing program 0:
r0 = gettid()
syz_open_procfs(r0, &(0x7f00000000c0)='sessionid\x00')
r1 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x80280)
ioctl$VIDIOC_S_EDID(r2, 0xc0245629, &(0x7f0000000140)={0x0, 0x82d0, 0x8000, [], &(0x7f0000000080)=0x5})
recvmsg(r1, &(0x7f0000000180)={&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0xfe5d, 0x0, 0x0, 0x0, 0xffffffffffffff83}, 0x0)

07:29:20 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x101208}, 0x0)

07:29:20 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

07:29:20 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x80040800000000}}}}}, 0x0)

07:29:20 executing program 4:
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0)
syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082)

07:29:20 executing program 0:
r0 = socket$inet(0x2, 0x0, 0x1000000000000084)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2)
getsockopt$inet_int(r1, 0x0, 0x23, &(0x7f0000000180), &(0x7f00000002c0)=0x4)
ioctl$VT_WAITACTIVE(r1, 0x5607)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0, 0x3a}, 0x0)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="e5a8d768efbdce1b5b82ba36965ce2c6fed19582fa585e3ade91863bfa3a316d1a62b6593dbd4a2531391c8e51bf4642292e826488a2e49cfdc8f9114f5aa84756f8ff7b1388b03aa1d73e29a834c5113dcba8fd4304d2927a791549bc49bd55933317901e4155efe2507c469db06bccad43bace0139104562b237bd5ee464ed57e67f80454e6028eeb21bb9af40449be10cd1495840f0", 0x97}], 0x1, &(0x7f0000000080)}, 0x4)
ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000300))

07:29:20 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xffffffffffffffa5)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x180)
ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8906, 0x0)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)

07:29:20 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

07:29:20 executing program 4:

07:29:20 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x7, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x800, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={<r2=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={r2, 0x100000001}, &(0x7f0000000100)=0x8)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

[  569.858056][  T557] cgroup: fork rejected by pids controller in /syz5
07:29:20 executing program 0:
socket$tipc(0x1e, 0x7, 0x0)
r0 = socket$inet(0x2, 0x80001, 0x84)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8)

07:29:20 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0})

07:29:20 executing program 4:

07:29:21 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x50c609}, 0x0)

07:29:21 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))

07:29:21 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0})

07:29:21 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x90120800000000}}}}}, 0x0)

07:29:21 executing program 4:

07:29:21 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x25, 0x0, 0x0, 0x0, 0xffffffffffffff07}, 0xfffffffffffffffe)

07:29:21 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0})

07:29:21 executing program 4:

[  570.743851][    C0] net_ratelimit: 18 callbacks suppressed
[  570.743859][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  570.755350][    C0] protocol 88fb is buggy, dev hsr_slave_1
07:29:21 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
r1 = geteuid()
r2 = getgid()
lchown(&(0x7f0000000080)='./file0\x00', r1, r2)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rfcomm\x00')
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x80000000, @empty, 0x401}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e22, 0x5, @loopback, 0x5}], 0x48)
recvmsg(r3, &(0x7f0000000280)={&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0, 0xfdac}, 0x0)

07:29:21 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})

[  570.833879][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  570.839759][    C1] protocol 88fb is buggy, dev hsr_slave_1
07:29:21 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0xe0510800000000}}}}}, 0x0)

07:29:21 executing program 4:

[  571.233880][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  571.239792][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  571.245702][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  571.251474][    C0] protocol 88fb is buggy, dev hsr_slave_1
07:29:22 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x70c809}, 0x0)

07:29:22 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})

07:29:22 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@broadcast, @multicast2, 0x1, 0x1, [@empty]}, 0x14)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:29:22 executing program 4:

07:29:22 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0xffefffffff7f0000}}}}}, 0x0)

07:29:22 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x7b)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x309800, 0x0)
r1 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r1, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={<r2=>0x0, 0xfffffffffffffffb}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={r2, 0x8001, 0xcf, "4f25a10ac6d2660a9dcfabf357410233fa026ff6991d1d041a8037b82733a5360066de5a9a3bfb9f3cb5ce608e26982a15f59c7bb95c7d5741c93c60446d6ccdecb1ae7f0e5c678ec93be4cc278cb4ddf0ff5e5dfa51ba1703e03336826d7e0c32480a5814c598465886b00305490da322742c3bda5c62c342af48e94d4b2796980b6ddd43cef7c8ed38e5557508dbcdacddd9a9b86867c5fd7342e206b9f1039df8149c338a3f6ec5225172d46c39af531c3e1ebc5e0f79cf37cccb8ec0cd6aa7adf0c3d4ab46029a4c449f6a07d3"}, 0xd7)
accept4$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000240)=0x1c, 0x80000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8906, 0x0)

07:29:22 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})

07:29:22 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0)

07:29:22 executing program 0:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x141400, 0x0)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000140)=0x4)
r1 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:29:22 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:22 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0xffffffffff600000}}}}}, 0x0)

07:29:22 executing program 4:
r0 = socket$inet6(0xa, 0x100800000000002, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00')
socketpair$unix(0x1, 0x800000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendfile(r0, r1, 0x0, 0x88001)

[  571.942844][ T1062] binder: 1059:1062 unknown command 26449
[  571.976869][ T1062] binder: 1059:1062 ioctl c0306201 200003c0 returned -22
[  572.183806][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  572.189706][    C1] protocol 88fb is buggy, dev hsr_slave_1
07:29:23 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800408}, 0x0)

07:29:23 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x343)
r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xffffffffffffff7c, 0x2)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000140)=0x9)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)}, 0x0)
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f00000000c0))
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/241, 0xf1}, {&(0x7f0000000040)}], 0x2)

07:29:23 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})

07:29:23 executing program 4:
r0 = socket(0xa, 0x3, 0x6)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'bridge0\x00\x00\x06\x01k\x00'})

07:29:23 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:29:23 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2)
ioctl$CAPI_INSTALLED(r0, 0x80024322)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe4f)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
r1 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r1, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8906, 0x0)

07:29:23 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})

[  572.608524][ T1195] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.615876][ T1195] bridge0: port 1(bridge_slave_0) entered disabled state
07:29:23 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f00000002c0)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f0000000280)='*', 0x1}], 0x1}, 0x0)
r1 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x89, 0x84303)
ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
pselect6(0x40, &(0x7f0000000040)={0x10001, 0x6, 0x1200000000000000, 0x9, 0x1, 0x2, 0x80000001, 0xff}, &(0x7f0000000080)={0x1, 0x3, 0x8001, 0x2, 0x6, 0x2, 0x100000001, 0x7}, &(0x7f0000000140)={0x8, 0x401, 0x7, 0x2a, 0x401, 0xfc, 0x6, 0x7}, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f0000000240)={&(0x7f0000000200)={0x99a}, 0x8})

07:29:23 executing program 0:
r0 = socket$inet(0x2, 0xfffffffffffffff9, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:29:23 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})

07:29:23 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:29:23 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x2, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg'], 0x0, 0x0, 0x0})

[  573.055259][ T1377] binder: 1371:1377 unknown command 26449
[  573.061424][ T1377] binder: 1371:1377 ioctl c0306201 200003c0 returned -22
07:29:24 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x901208}, 0x0)

07:29:24 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{}, {0x6}})

07:29:24 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000000c0)=""/246)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f0000000180))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x4}, 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0)
shutdown(r0, 0x1)

07:29:24 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x2, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg'], 0x0, 0x0, 0x0})

07:29:24 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:29:24 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20c0, 0x0)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={<r2=>0x0, 0x3, 0x5, [0xce, 0xa5, 0x7, 0x8000, 0x4]}, &(0x7f0000000080)=0x12)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000000c0)=r2, 0x4)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

07:29:24 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x80040800000000}}}}}, 0x0)

[  573.502320][ T1441] binder: 1440:1441 unknown command 26449
[  573.526819][ T1441] binder: 1440:1441 ioctl c0306201 200003c0 returned -22
07:29:24 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x2, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg'], 0x0, 0x0, 0x0})

07:29:24 executing program 4:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:29:24 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x851e000}}}}}, 0x0)

[  573.691383][ T1518] binder: 1516:1518 unknown command 26449
[  573.706929][ T1518] binder: 1516:1518 ioctl c0306201 200003c0 returned -22
07:29:24 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x3, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00'], 0x0, 0x0, 0x0})

07:29:24 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  573.777324][ T1580] binder: 1579:1580 ioctl c0306201 0 returned -14
[  573.886966][ T1588] binder: 1587:1588 unknown command 26449
[  573.914828][ T1588] binder: 1587:1588 ioctl c0306201 200003c0 returned -22
07:29:25 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8048000}, 0x0)

07:29:25 executing program 4:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:29:25 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x200000, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x8000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
gettid()
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x1156}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x444}, {}], 0x4, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x6}, 0x8)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r2, 0x40000000af01, &(0x7f0000000140))
r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[])
close(r3)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3})
write$P9_RMKDIR(r1, &(0x7f0000000080)={0x14, 0x49, 0x1, {0x81, 0x0, 0x3}}, 0x14)
r4 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r4, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r4, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)

07:29:25 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x3, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00'], 0x0, 0x0, 0x0})

07:29:25 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  574.453158][ T1701] binder: 1700:1701 unknown command 26449
[  574.460395][ T1699] binder: 1698:1699 ioctl c0306201 0 returned -14
[  574.466957][ T1701] binder: 1700:1701 ioctl c0306201 200003c0 returned -22
07:29:25 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xffffffffffffff81)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

07:29:25 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x3, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00'], 0x0, 0x0, 0x0})

07:29:25 executing program 4:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:29:25 executing program 4:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:29:25 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  574.630713][ T1798] binder: 1796:1798 unknown command 26449
[  574.637977][ T1794] binder: 1788:1794 ioctl c0306201 0 returned -14
[  574.658239][ T1798] binder: 1796:1798 ioctl c0306201 200003c0 returned -22
07:29:25 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:29:25 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  574.771962][ T1834] binder: 1831:1834 ioctl c0306201 0 returned -14
[  574.846524][ T1840] binder: 1837:1840 unknown command 26449
[  574.866300][ T1840] binder: 1837:1840 ioctl c0306201 200003c0 returned -22
07:29:26 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8121000}, 0x0)

07:29:26 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:26 executing program 4:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:29:26 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:26 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  575.407022][ T1954] binder: 1953:1954 ioctl c0306201 0 returned -14
[  575.417296][ T1949] binder: 1948:1949 unknown command 26449
[  575.434456][ T1956] binder: 1947:1956 unknown command 26449
[  575.448061][ T1949] binder: 1948:1949 ioctl c0306201 200003c0 returned -22
[  575.472165][ T1956] binder: 1947:1956 ioctl c0306201 200003c0 returned -22
07:29:26 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x800, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

07:29:26 executing program 4:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:29:26 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:26 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  575.595285][ T2067] binder: 2064:2067 ioctl c0306201 0 returned -14
07:29:26 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:29:26 executing program 4:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

07:29:26 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  575.674583][ T2073] binder: 2070:2073 unknown command 26449
[  575.680931][ T2075] binder: 2068:2075 unknown command 26449
[  575.701848][ T2073] binder: 2070:2073 ioctl c0306201 200003c0 returned -22
[  575.764485][ T2075] binder: 2068:2075 ioctl c0306201 200003c0 returned -22
[  575.929632][ T2089] binder: 2086:2089 unknown command 26449
[  575.944597][ T2089] binder: 2086:2089 ioctl c0306201 200003c0 returned -22
07:29:27 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8129000}, 0x0)

07:29:27 executing program 4:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

07:29:27 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:27 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
write$P9_RFLUSH(r1, &(0x7f0000000040)={0x7, 0x6d, 0x1}, 0x7)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

07:29:27 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100))
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:27 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  576.343872][    C1] net_ratelimit: 20 callbacks suppressed
[  576.343881][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  576.355918][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  576.378250][ T2203] binder: 2201:2203 unknown command 26449
07:29:27 executing program 4:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[  576.399679][ T2203] binder: 2201:2203 ioctl c0306201 200003c0 returned -22
[  576.432162][ T2206] binder: 2198:2206 unknown command 26449
07:29:27 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:29:27 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100))
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:27 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  576.472613][ T2206] binder: 2198:2206 ioctl c0306201 200003c0 returned -22
07:29:27 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  576.595610][ T2326] binder: 2322:2326 ioctl c0306201 0 returned -14
07:29:27 executing program 4:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  576.684268][ T2328] binder: 2325:2328 unknown command 26449
[  576.690228][ T2328] binder: 2325:2328 ioctl c0306201 200003c0 returned -22
[  576.722623][ T2401] binder: 2320:2401 unknown command 26449
[  576.729818][ T2401] binder: 2320:2401 ioctl c0306201 200003c0 returned -22
[  576.983856][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  576.989770][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  577.063881][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  577.069773][    C1] protocol 88fb is buggy, dev hsr_slave_1
07:29:28 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8150000}, 0x0)

07:29:28 executing program 4:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:29:28 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:29:28 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:28 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100))
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:28 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'rose0\x00', <r1=>0x0})
sendto(r0, &(0x7f0000000000)="b6c6e1cb30a5829f0d623385b7daebcda64b2c729f0ab4ce57aa7a767184dc880652", 0x22, 0x4000001, &(0x7f0000000080)=@hci={0x1f, r1, 0x3}, 0x80)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

07:29:28 executing program 4:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  577.319426][ T2447] binder: 2446:2447 unknown command 26449
[  577.358861][ T2447] binder: 2446:2447 ioctl c0306201 200003c0 returned -22
07:29:28 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:29:28 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  577.388921][ T2451] binder: 2448:2451 unknown command 26449
[  577.421454][ T2451] binder: 2448:2451 ioctl c0306201 200003c0 returned -22
07:29:28 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  577.463921][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  577.469795][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  577.475759][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  577.481582][    C0] protocol 88fb is buggy, dev hsr_slave_1
07:29:28 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  577.599338][ T2586] binder: 2545:2586 ioctl c0306201 0 returned -14
[  577.622313][ T2582] binder: BINDER_SET_CONTEXT_MGR already set
[  577.631948][ T2582] binder: 2581:2582 ioctl 40046207 0 returned -16
[  577.636531][ T2585] binder: BINDER_SET_CONTEXT_MGR already set
07:29:28 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  577.655280][ T2585] binder: 2584:2585 ioctl 40046207 0 returned -16
[  577.674168][ T2582] binder: 2581:2582 unknown command 26449
[  577.713549][ T2582] binder: 2581:2582 ioctl c0306201 200003c0 returned -22
[  577.741119][ T2585] binder: 2584:2585 unknown command 26449
[  577.755471][ T2585] binder: 2584:2585 ioctl c0306201 200003c0 returned -22
[  577.788093][ T2635] binder: 2626:2635 ioctl c0306201 0 returned -14
07:29:29 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:29:29 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:29 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8350000}, 0x0)

07:29:29 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:29:29 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:29 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video1\x00', 0x2, 0x0)
socket$kcm(0x11, 0x400000002, 0x300)
socket$kcm(0x29, 0x2, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x53e, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x4, 0x1, 0x3f, 0x9, 0x0, 0x6, 0x1000, 0x2, 0x6, 0x4249, 0x2, 0x4, 0x48, 0x8, 0x3, 0x3ff, 0x9, 0x1, 0xffffffff, 0x20, 0x623b, 0x100000000, 0xff, 0xff, 0x7fff, 0x181d, 0x1eec, 0x3c547c9, 0xb1b7, 0x3, 0x6, 0xffffffff931effcb, 0xffffffffffff3e02, 0x7fff, 0xfffffffffffeffff, 0x800, 0x0, 0xbc1, 0x0, @perf_config_ext={0x4, 0x2}, 0x88, 0x2, 0x7, 0x0, 0x100000000, 0x7fff, 0x1000}, 0x0, 0x8, 0xffffffffffffffff, 0x2)
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffff001, 0xc08dcadbdf77558f, 0x12, 0x4, "8edddf5854d63fc375680db7458f0ddc721bd6cda9976064a0d3b53b96765ea7cb33935a5a2733c1f511e40c351f1c30b90aea6e682d0cd4f866628df3022ea9", "9e336dfd8654ced0ee0b820894096c4dba1545880cf76b17d28c66f2cdea5309", [0xffff, 0x1f]})

[  578.275091][ T2717] binder: BINDER_SET_CONTEXT_MGR already set
[  578.282670][ T2718] binder: 2716:2718 ioctl c0306201 0 returned -14
[  578.284045][ T2717] binder: 2715:2717 ioctl 40046207 0 returned -16
[  578.311148][ T2723] binder: BINDER_SET_CONTEXT_MGR already set
07:29:29 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:29:29 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8040, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000240)={0x13c, r2, 0x604, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5796}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_LINK={0xac, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x72}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd9f}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8906, 0x0)

[  578.328369][ T2723] binder: 2712:2723 ioctl 40046207 0 returned -16
07:29:29 executing program 4:
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[  578.397308][ T2794] binder: 2790:2794 ioctl c0306201 0 returned -14
[  578.404866][ T2806] binder: 2712:2806 unknown command 26449
[  578.418011][ T2806] binder: 2712:2806 ioctl c0306201 200003c0 returned -22
07:29:29 executing program 4:
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

07:29:29 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:29:29 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000040)={0x18, 0x1, 0xe55})

07:29:29 executing program 5:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x60ffffffffff, @initdev}}}}, 0x0)

[  578.603612][   T22] binder: release 2715:2717 transaction 53 out, still active
[  578.619084][   T22] binder: unexpected work type, 4, not freed
[  578.658279][   T22] binder: undelivered TRANSACTION_COMPLETE
07:29:29 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  579.053956][ T7720] binder: release 2712:2723 transaction 50 out, still active
[  579.061501][ T7720] binder: unexpected work type, 4, not freed
[  579.068564][ T7720] binder: undelivered TRANSACTION_COMPLETE
07:29:30 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9c65000}, 0x0)

07:29:30 executing program 4:
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

07:29:30 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

07:29:30 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  579.130182][ T3064] binder: BINDER_SET_CONTEXT_MGR already set
[  579.138086][ T3064] binder: 3061:3064 ioctl 40046207 0 returned -16
07:29:30 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  579.245061][ T3067] binder: BINDER_SET_CONTEXT_MGR already set
[  579.255221][ T3160] binder: 3061:3160 unknown command 26449
[  579.269663][ T3160] binder: 3061:3160 ioctl c0306201 200003c0 returned -22
[  579.277704][ T3067] binder: 3065:3067 ioctl 40046207 0 returned -16
07:29:30 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:29:30 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  579.369388][ T3184] binder: BINDER_SET_CONTEXT_MGR already set
[  579.380087][ T3184] binder: 3177:3184 ioctl 40046207 0 returned -16
[  579.480994][ T3347] binder: 3177:3347 unknown command 26449
[  579.488013][ T3347] binder: 3177:3347 ioctl c0306201 200003c0 returned -22
07:29:30 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x1861a441c853dec7)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
pipe2(&(0x7f0000000000), 0x800)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

[  579.525878][ T3345] binder: BINDER_SET_CONTEXT_MGR already set
[  579.552874][ T3345] binder: 3344:3345 ioctl 40046207 0 returned -16
07:29:30 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:29:30 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000040), 0x0, 0x1}, 0x20)
r1 = creat(&(0x7f0000000640)='./file0\x00', 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000980), 0x4)
unlink(&(0x7f0000000940)='./file0\x00')
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100))
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  579.708430][ T7720] binder: release 3344:3345 transaction 62 out, still active
[  579.716840][ T7720] binder: unexpected work type, 4, not freed
[  579.734959][ T7720] binder: undelivered TRANSACTION_COMPLETE
07:29:30 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  579.773155][ T3608] binder: BINDER_SET_CONTEXT_MGR already set
[  579.780095][ T3608] binder: 3597:3608 ioctl 40046207 0 returned -16
07:29:30 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  579.903937][ T7720] binder: release 3061:3064 transaction 56 out, still active
[  579.911358][ T7720] binder: unexpected work type, 4, not freed
[  579.934050][ T7720] binder: undelivered TRANSACTION_COMPLETE
07:29:31 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9c87000}, 0x0)

07:29:31 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
ioctl$TCXONC(r1, 0x540a, 0xffffffffffffff2a)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x440200, 0x0)
ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000040)={0xc6e, 0x0, 0x8})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4)

07:29:31 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040)=0x5, 0x4)

[  580.093814][   T22] binder: release 3177:3184 transaction 59 out, still active
[  580.101264][   T22] binder: unexpected work type, 4, not freed
[  580.123354][   T22] binder: undelivered TRANSACTION_COMPLETE
07:29:31 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:29:31 executing program 5:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x2, 0x2)
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000140)={0x4, 0x0, [{0x1, 0x6, 0x4, 0x2, 0x4, 0x1, 0x1}, {0xc0000019, 0x9, 0x2, 0x9, 0x1, 0x3, 0x3ff}, {0x7, 0x1, 0x4, 0x6, 0x3, 0xffffffffffffffff, 0x4}, {0x80000007, 0x7, 0x2, 0x7ff, 0xd7d, 0x4, 0x5}]})

07:29:31 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  580.207785][   T22] binder: release 3597:3608 transaction 65 out, still active
[  580.236939][   T22] binder: unexpected work type, 4, not freed
07:29:31 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={<r1=>0x0, 0xfffffffffffffecd, "64dc42e264f1745f5bcc00000000000000a4c71da2ea665757024184e0746f6b6663f9e9ed3bf66c19146b8e52235353da8a9f001a7bfe"}, &(0x7f0000000080)=0x19)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r1, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f0000000140)=0x84)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x100fc)

[  580.282423][   T22] binder: undelivered TRANSACTION_COMPLETE
07:29:31 executing program 5:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7, 0x40800)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0))
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x3000})
shutdown(r0, 0x1)

07:29:31 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200000)
recvfrom$unix(r1, &(0x7f0000000080)=""/7, 0x7, 0x100, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)

07:29:31 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:29:31 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0}, 0x100000000000000)

07:29:31 executing program 5:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7, 0x40800)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0))
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x3000})
shutdown(r0, 0x1)

07:29:32 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xff600000}, 0x0)

07:29:32 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0)

07:29:32 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0, 0x0, 0x0, 0x3f000000}, 0x0)

07:29:32 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:29:32 executing program 5:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7, 0x40800)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0))
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x3000})
shutdown(r0, 0x1)

07:29:32 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
accept4(r0, &(0x7f0000000080)=@nl, &(0x7f0000000100)=0x80, 0x80800)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x289, 0x2000)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x16000, 0x4000})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

07:29:32 executing program 4:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001c40)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, 0x0, 0x0, 0x0, 0x1000000}, 0x0)

07:29:32 executing program 0 (fault-call:2 fault-nth:0):
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:29:32 executing program 5 (fault-call:3 fault-nth:0):
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  581.357873][ T4429] FAULT_INJECTION: forcing a failure.
[  581.357873][ T4429] name failslab, interval 1, probability 0, space 0, times 0
[  581.412904][ T4429] CPU: 1 PID: 4429 Comm: syz-executor.0 Not tainted 5.1.0-rc2+ #38
[  581.420896][ T4429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  581.420917][ T4429] Call Trace:
[  581.434318][ T4429]  dump_stack+0x172/0x1f0
[  581.434334][ T4450] FAULT_INJECTION: forcing a failure.
[  581.434334][ T4450] name failslab, interval 1, probability 0, space 0, times 0
[  581.451277][ T4429]  should_fail.cold+0xa/0x15
[  581.455898][ T4429]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  581.455922][ T4429]  ? ___might_sleep+0x163/0x280
[  581.455952][ T4429]  __should_failslab+0x121/0x190
[  581.471577][ T4429]  should_failslab+0x9/0x14
[  581.476105][ T4429]  kmem_cache_alloc_trace+0x2d1/0x760
[  581.481503][ T4429]  ? kasan_check_read+0x11/0x20
[  581.486414][ T4429]  ? do_raw_spin_unlock+0x57/0x270
[  581.491557][ T4429]  ? _raw_spin_unlock+0x2d/0x50
[  581.496466][ T4429]  binder_get_thread+0x1db/0x7c0
[  581.501433][ T4429]  ? __might_sleep+0x95/0x190
[  581.506136][ T4429]  binder_ioctl+0x1e5/0x183b
[  581.510759][ T4429]  ? binder_thread_write+0x2820/0x2820
[  581.516278][ T4429]  ? __fget+0x381/0x550
[  581.520466][ T4429]  ? ksys_dup3+0x3e0/0x3e0
[  581.524907][ T4429]  ? fput_many+0x12c/0x1a0
[  581.529358][ T4429]  ? tomoyo_file_ioctl+0x23/0x30
[  581.534360][ T4429]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  581.541671][ T4429]  ? security_file_ioctl+0x93/0xc0
[  581.546823][ T4429]  ? binder_thread_write+0x2820/0x2820
[  581.552315][ T4429]  __ia32_compat_sys_ioctl+0x197/0x620
[  581.557819][ T4429]  do_fast_syscall_32+0x281/0xc98
[  581.562879][ T4429]  entry_SYSENTER_compat+0x70/0x7f
[  581.568016][ T4429] RIP: 0023:0xf7fdf869
[  581.572124][ T4429] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  581.591958][ T4429] RSP: 002b:00000000f5ddb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  581.600401][ T4429] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201
07:29:32 executing program 4 (fault-call:1 fault-nth:0):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  581.608393][ T4429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  581.616384][ T4429] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  581.624400][ T4429] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  581.632484][ T4429] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  581.640502][ T4450] CPU: 0 PID: 4450 Comm: syz-executor.5 Not tainted 5.1.0-rc2+ #38
[  581.648436][ T4450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  581.651462][ T4454] FAULT_INJECTION: forcing a failure.
[  581.651462][ T4454] name failslab, interval 1, probability 0, space 0, times 0
[  581.658781][ T4450] Call Trace:
[  581.658809][ T4450]  dump_stack+0x172/0x1f0
[  581.658829][ T4450]  should_fail.cold+0xa/0x15
[  581.658846][ T4450]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  581.658865][ T4450]  ? ___might_sleep+0x163/0x280
[  581.658883][ T4450]  __should_failslab+0x121/0x190
[  581.658901][ T4450]  should_failslab+0x9/0x14
[  581.658927][ T4450]  kmem_cache_alloc_trace+0x2d1/0x760
[  581.709153][ T4450]  ? kasan_check_read+0x11/0x20
[  581.714018][ T4450]  ? do_raw_spin_unlock+0x57/0x270
[  581.719148][ T4450]  ? _raw_spin_unlock+0x2d/0x50
[  581.724013][ T4450]  binder_get_thread+0x1db/0x7c0
[  581.728980][ T4450]  ? __might_sleep+0x95/0x190
[  581.733677][ T4450]  binder_ioctl+0x1e5/0x183b
[  581.738291][ T4450]  ? binder_thread_write+0x2820/0x2820
[  581.743783][ T4450]  ? __fget+0x381/0x550
[  581.747979][ T4450]  ? ksys_dup3+0x3e0/0x3e0
[  581.752402][ T4450]  ? fput_many+0x12c/0x1a0
[  581.756852][ T4450]  ? tomoyo_file_ioctl+0x23/0x30
07:29:32 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  581.761808][ T4450]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  581.768063][ T4450]  ? security_file_ioctl+0x93/0xc0
[  581.768085][ T4450]  ? binder_thread_write+0x2820/0x2820
[  581.768111][ T4450]  __ia32_compat_sys_ioctl+0x197/0x620
[  581.784186][ T4450]  do_fast_syscall_32+0x281/0xc98
[  581.784209][ T4450]  entry_SYSENTER_compat+0x70/0x7f
[  581.784222][ T4450] RIP: 0023:0xf7eff869
[  581.784237][ T4450] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  581.784245][ T4450] RSP: 002b:00000000f5cfb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  581.784259][ T4450] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201
[  581.784268][ T4450] RDX: 00000000200003c0 RSI: 0000000000000000 RDI: 0000000000000000
[  581.784277][ T4450] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  581.784285][ T4450] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  581.784294][ T4450] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  581.784664][    C0] net_ratelimit: 12 callbacks suppressed
[  581.784672][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  581.800051][ T4454] CPU: 1 PID: 4454 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  581.818273][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  581.826577][ T4454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  581.826584][ T4454] Call Trace:
[  581.826609][ T4454]  dump_stack+0x172/0x1f0
[  581.826629][ T4454]  should_fail.cold+0xa/0x15
[  581.826653][ T4454]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  581.834812][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  581.842638][ T4454]  ? ___might_sleep+0x163/0x280
[  581.850806][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  581.858777][ T4454]  __should_failslab+0x121/0x190
[  581.858798][ T4454]  should_failslab+0x9/0x14
[  581.858820][ T4454]  __kmalloc_track_caller+0x2d8/0x740
[  581.889177][ T4450] binder: 4449:4450 ioctl c0306201 200003c0 returned -12
[  581.891774][ T4454]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
07:29:32 executing program 0 (fault-call:2 fault-nth:1):
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  581.891790][ T4454]  ? fput_many+0x12c/0x1a0
[  581.891807][ T4454]  ? strndup_user+0x77/0xd0
[  581.891828][ T4454]  memdup_user+0x26/0xb0
[  581.891847][ T4454]  strndup_user+0x77/0xd0
[  581.891866][ T4454]  copy_mount_string+0x2a/0x40
[  581.902374][ T4429] binder: 4412:4429 ioctl c0306201 0 returned -12
[  581.905239][ T4454]  __ia32_compat_sys_mount+0xcf/0x790
[  581.905258][ T4454]  ? trace_hardirqs_on+0x67/0x230
[  581.905282][ T4454]  do_fast_syscall_32+0x281/0xc98
[  581.905305][ T4454]  entry_SYSENTER_compat+0x70/0x7f
[  581.905317][ T4454] RIP: 0023:0xf7fca869
[  581.905333][ T4454] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  581.905341][ T4454] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  581.998642][ T4454] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  581.998652][ T4454] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
07:29:33 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x150800000000}, 0x0)

07:29:33 executing program 5 (fault-call:3 fault-nth:1):
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:33 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  581.998661][ T4454] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  581.998670][ T4454] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  581.998679][ T4454] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  582.003936][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  582.004003][    C0] protocol 88fb is buggy, dev hsr_slave_1
07:29:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:29:33 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  582.114883][ T4561] binder: 4560:4561 unknown command 26449
[  582.121031][ T4563] binder: 4559:4563 ioctl c0306201 0 returned -14
[  582.129258][ T4561] binder: 4560:4561 ioctl c0306201 200003c0 returned -22
07:29:33 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x20000008, 0x84)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=<r1=>0x0, @ANYBLOB="cb41246c1b473cc46f3020a646399b18f198ef1ddbfcb43be0f1edb6000000"], &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r1, 0x1000}, &(0x7f00000000c0)=0x8)
r2 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r2, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0xa40)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8906, 0x0)

07:29:33 executing program 4 (fault-call:1 fault-nth:1):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  582.213569][ T4584] binder: 4581:4584 unknown command 26449
[  582.249084][ T4584] binder: 4581:4584 ioctl c0306201 200003c0 returned -22
07:29:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0)

[  582.329134][ T4654] binder: 4638:4654 ioctl c0306201 0 returned -14
07:29:33 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:33 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  582.381434][ T4688] FAULT_INJECTION: forcing a failure.
[  582.381434][ T4688] name failslab, interval 1, probability 0, space 0, times 0
[  582.448975][ T4691] binder: 4690:4691 ioctl 2 200003c0 returned -22
[  582.469614][ T4695] binder: 4694:4695 ioctl 2 0 returned -22
[  582.470540][ T4688] CPU: 1 PID: 4688 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  582.483394][ T4688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  582.493453][ T4688] Call Trace:
[  582.496764][ T4688]  dump_stack+0x172/0x1f0
[  582.501116][ T4688]  should_fail.cold+0xa/0x15
[  582.501435][ T4723] binder: 4694:4723 ioctl 2 0 returned -22
[  582.505722][ T4688]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  582.505745][ T4688]  ? ___might_sleep+0x163/0x280
[  582.505766][ T4688]  __should_failslab+0x121/0x190
[  582.505786][ T4688]  should_failslab+0x9/0x14
[  582.505802][ T4688]  __kmalloc_track_caller+0x2d8/0x740
[  582.505823][ T4688]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  582.505847][ T4688]  ? strndup_user+0x77/0xd0
[  582.547847][ T4688]  memdup_user+0x26/0xb0
[  582.552102][ T4688]  strndup_user+0x77/0xd0
[  582.556441][ T4688]  copy_mount_string+0x2a/0x40
[  582.561258][ T4688]  __ia32_compat_sys_mount+0xfb/0x790
[  582.566665][ T4688]  ? trace_hardirqs_on+0x67/0x230
[  582.571705][ T4688]  do_fast_syscall_32+0x281/0xc98
[  582.571729][ T4688]  entry_SYSENTER_compat+0x70/0x7f
[  582.571748][ T4688] RIP: 0023:0xf7fca869
07:29:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x10, 0x0)

07:29:33 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x10, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  582.581900][ T4688] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  582.581910][ T4688] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  582.581925][ T4688] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  582.581935][ T4688] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  582.581944][ T4688] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  582.581952][ T4688] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  582.581969][ T4688] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  582.605963][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  582.660145][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  582.672098][ T4802] binder: 4801:4802 ioctl 10 200003c0 returned -22
[  582.750648][ T4836] binder: 4834:4836 ioctl 10 0 returned -22
[  582.762795][ T4900] binder: 4880:4900 ioctl 10 0 returned -22
07:29:33 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x350800000000}, 0x0)

07:29:33 executing program 4 (fault-call:1 fault-nth:2):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:29:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0)

07:29:33 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x541b, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:33 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  583.053465][ T5022] FAULT_INJECTION: forcing a failure.
[  583.053465][ T5022] name failslab, interval 1, probability 0, space 0, times 0
[  583.057158][ T5023] binder: 5018:5023 ioctl 541b 200003c0 returned -22
[  583.093003][ T5026] binder: 5017:5026 ioctl 541b 0 returned -22
[  583.096663][ T5022] CPU: 0 PID: 5022 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  583.107211][ T5022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  583.117278][ T5022] Call Trace:
[  583.120591][ T5022]  dump_stack+0x172/0x1f0
[  583.124939][ T5022]  should_fail.cold+0xa/0x15
[  583.129579][ T5022]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  583.135437][ T5022]  ? ___might_sleep+0x163/0x280
[  583.140330][ T5022]  __should_failslab+0x121/0x190
[  583.145318][ T5022]  should_failslab+0x9/0x14
[  583.145334][ T5022]  kmem_cache_alloc+0x2b2/0x6f0
[  583.145351][ T5022]  ? __might_fault+0x12b/0x1e0
[  583.145367][ T5022]  ? find_held_lock+0x35/0x130
[  583.145386][ T5022]  getname_flags+0xd6/0x5b0
[  583.145406][ T5022]  user_path_at_empty+0x2f/0x50
[  583.145424][ T5022]  do_mount+0x150/0x2c40
[  583.145446][ T5022]  ? copy_mount_string+0x40/0x40
[  583.145462][ T5022]  ? _copy_from_user+0xdd/0x150
[  583.145484][ T5022]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  583.154834][ T5022]  ? memdup_user+0x65/0xb0
[  583.154853][ T5022]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  583.154867][ T5022]  ? copy_mount_options+0x280/0x3a0
[  583.154890][ T5022]  __ia32_compat_sys_mount+0x664/0x790
[  583.154908][ T5022]  ? trace_hardirqs_on+0x67/0x230
[  583.154929][ T5022]  do_fast_syscall_32+0x281/0xc98
[  583.154951][ T5022]  entry_SYSENTER_compat+0x70/0x7f
[  583.154963][ T5022] RIP: 0023:0xf7fca869
[  583.154978][ T5022] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  583.154993][ T5022] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  583.263190][ T5022] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  583.271180][ T5022] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  583.279191][ T5022] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  583.287172][ T5022] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  583.295162][ T5022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:29:34 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200, 0x100)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x5)
r1 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r1, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8906, 0x0)
syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0xc0)
recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)}, {&(0x7f0000000080)=""/146, 0x92}, {&(0x7f0000000140)=""/208, 0xd0}, {&(0x7f0000000240)=""/21, 0x15}, {&(0x7f0000000280)=""/3, 0x3}, {&(0x7f00000002c0)=""/38, 0x26}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x7}, 0x20)

07:29:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x5421, 0x0)

07:29:34 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:34 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:29:34 executing program 4 (fault-call:1 fault-nth:3):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  583.407003][ T5243] FAULT_INJECTION: forcing a failure.
[  583.407003][ T5243] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  583.420262][ T5243] CPU: 1 PID: 5243 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  583.428163][ T5243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  583.438246][ T5243] Call Trace:
[  583.441564][ T5243]  dump_stack+0x172/0x1f0
[  583.445918][ T5243]  should_fail.cold+0xa/0x15
[  583.450557][ T5243]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  583.456384][ T5243]  ? __lock_acquire+0x548/0x3fb0
[  583.461360][ T5243]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  583.467635][ T5243]  should_fail_alloc_page+0x50/0x60
[  583.472846][ T5243]  __alloc_pages_nodemask+0x1a1/0x7e0
[  583.478269][ T5243]  ? __alloc_pages_slowpath+0x28b0/0x28b0
[  583.484000][ T5243]  ? find_held_lock+0x35/0x130
[  583.488783][ T5243]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  583.494603][ T5243]  cache_grow_begin+0x9c/0x860
[  583.499389][ T5243]  ? getname_flags+0xd6/0x5b0
[  583.504084][ T5243]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  583.510347][ T5243]  kmem_cache_alloc+0x62d/0x6f0
[  583.510366][ T5243]  ? __might_fault+0x12b/0x1e0
[  583.510389][ T5243]  getname_flags+0xd6/0x5b0
[  583.510410][ T5243]  user_path_at_empty+0x2f/0x50
[  583.524542][ T5243]  do_mount+0x150/0x2c40
[  583.524568][ T5243]  ? copy_mount_string+0x40/0x40
[  583.524586][ T5243]  ? _copy_from_user+0xdd/0x150
[  583.524606][ T5243]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  583.524622][ T5243]  ? memdup_user+0x65/0xb0
[  583.524648][ T5243]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  583.524670][ T5243]  ? copy_mount_options+0x280/0x3a0
[  583.565764][ T5243]  __ia32_compat_sys_mount+0x664/0x790
[  583.571269][ T5243]  ? trace_hardirqs_on+0x67/0x230
[  583.576315][ T5243]  do_fast_syscall_32+0x281/0xc98
[  583.581357][ T5243]  entry_SYSENTER_compat+0x70/0x7f
[  583.586475][ T5243] RIP: 0023:0xf7fca869
[  583.590554][ T5243] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  583.610324][ T5243] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  583.618745][ T5243] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  583.618754][ T5243] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  583.618762][ T5243] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  583.618770][ T5243] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
07:29:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x5450, 0x0)

07:29:34 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  583.618778][ T5243] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  583.873841][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  583.879791][    C0] protocol 88fb is buggy, dev hsr_slave_1
07:29:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x5452, 0x0)

07:29:34 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:34 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:29:34 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x60ffffffffff}, 0x0)

07:29:34 executing program 4 (fault-call:1 fault-nth:4):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  584.011071][ T5572] FAULT_INJECTION: forcing a failure.
[  584.011071][ T5572] name failslab, interval 1, probability 0, space 0, times 0
[  584.042194][ T5572] CPU: 0 PID: 5572 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  584.050188][ T5572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  584.060265][ T5572] Call Trace:
[  584.063605][ T5572]  dump_stack+0x172/0x1f0
[  584.067961][ T5572]  should_fail.cold+0xa/0x15
[  584.072606][ T5572]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  584.078440][ T5572]  ? ___might_sleep+0x163/0x280
[  584.083338][ T5572]  __should_failslab+0x121/0x190
[  584.088326][ T5572]  should_failslab+0x9/0x14
[  584.092842][ T5572]  kmem_cache_alloc_trace+0x2d1/0x760
[  584.098239][ T5572]  ? refcount_dec_and_mutex_lock+0x90/0x90
[  584.098255][ T5572]  ? rcu_read_lock_sched_held+0x110/0x130
[  584.098271][ T5572]  ? kmem_cache_alloc_trace+0x354/0x760
[  584.098295][ T5572]  legacy_init_fs_context+0x48/0xe0
[  584.098312][ T5572]  ? generic_parse_monolithic+0x200/0x200
[  584.098334][ T5572]  alloc_fs_context+0x365/0x640
[  584.131197][ T5572]  fs_context_for_mount+0x25/0x30
[  584.136242][ T5572]  do_mount+0x13d7/0x2c40
[  584.140596][ T5572]  ? copy_mount_string+0x40/0x40
[  584.145548][ T5572]  ? _copy_from_user+0xdd/0x150
[  584.150414][ T5572]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  584.156674][ T5572]  ? memdup_user+0x65/0xb0
[  584.161113][ T5572]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  584.167360][ T5572]  ? copy_mount_options+0x280/0x3a0
[  584.172661][ T5572]  __ia32_compat_sys_mount+0x664/0x790
[  584.172680][ T5572]  ? trace_hardirqs_on+0x67/0x230
[  584.172703][ T5572]  do_fast_syscall_32+0x281/0xc98
[  584.188215][ T5572]  entry_SYSENTER_compat+0x70/0x7f
[  584.193338][ T5572] RIP: 0023:0xf7fca869
[  584.197417][ T5572] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  584.217040][ T5572] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  584.225470][ T5572] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  584.233462][ T5572] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  584.241484][ T5572] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  584.249486][ T5572] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  584.249495][ T5572] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:29:35 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x13)
r1 = socket$kcm(0x11, 0x400000002, 0x300)
prctl$PR_GET_CHILD_SUBREAPER(0x25)
r2 = socket$inet(0x10, 0x4000000002, 0x0)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1b0000001e0007041dfffd946f610500070000005e000000000000", 0x1b}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1)
setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x4, 0x0, 0xfff, 0x8, 0x2, 0x8000, 0x6, 0x1ff, 0xfffffffffffffff8, 0x0, 0x2}, 0xb)
recvmsg$kcm(r1, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8906, 0x0)
r3 = semget(0x1, 0x2, 0x10a)
semctl$GETPID(r3, 0x3, 0xb, &(0x7f0000000180)=""/77)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000140)=0xe, 0x1)

07:29:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x5460, 0x0)

07:29:35 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:35 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:29:35 executing program 4 (fault-call:1 fault-nth:5):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  584.352732][ T5793] FAULT_INJECTION: forcing a failure.
[  584.352732][ T5793] name failslab, interval 1, probability 0, space 0, times 0
[  584.393188][ T5793] CPU: 0 PID: 5793 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  584.401141][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  584.411238][ T5793] Call Trace:
[  584.414554][ T5793]  dump_stack+0x172/0x1f0
[  584.418948][ T5793]  should_fail.cold+0xa/0x15
[  584.423567][ T5793]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  584.429392][ T5793]  ? ___might_sleep+0x163/0x280
[  584.434250][ T5793]  __should_failslab+0x121/0x190
[  584.434270][ T5793]  should_failslab+0x9/0x14
[  584.434286][ T5793]  kmem_cache_alloc_trace+0x2d1/0x760
[  584.434303][ T5793]  ? refcount_dec_and_mutex_lock+0x90/0x90
[  584.434325][ T5793]  ? rcu_read_lock_sched_held+0x110/0x130
[  584.460646][ T5793]  ? kmem_cache_alloc_trace+0x354/0x760
[  584.467543][ T5793]  legacy_init_fs_context+0x48/0xe0
[  584.472784][ T5793]  ? generic_parse_monolithic+0x200/0x200
[  584.478518][ T5793]  alloc_fs_context+0x365/0x640
[  584.483417][ T5793]  fs_context_for_mount+0x25/0x30
[  584.488449][ T5793]  do_mount+0x13d7/0x2c40
[  584.492790][ T5793]  ? copy_mount_string+0x40/0x40
[  584.497740][ T5793]  ? _copy_from_user+0xdd/0x150
[  584.502604][ T5793]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  584.508854][ T5793]  ? memdup_user+0x65/0xb0
[  584.513288][ T5793]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  584.519560][ T5793]  ? copy_mount_options+0x280/0x3a0
[  584.524801][ T5793]  __ia32_compat_sys_mount+0x664/0x790
[  584.530299][ T5793]  ? trace_hardirqs_on+0x67/0x230
[  584.530781][ T5920] binder: 5917:5920 ioctl 40046205 0 returned -22
[  584.535341][ T5793]  do_fast_syscall_32+0x281/0xc98
[  584.535366][ T5793]  entry_SYSENTER_compat+0x70/0x7f
[  584.535379][ T5793] RIP: 0023:0xf7fca869
[  584.535394][ T5793] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  584.535402][ T5793] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  584.584062][ T5793] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
07:29:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

07:29:35 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0)

07:29:35 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  584.592084][ T5793] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  584.600064][ T5793] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  584.608067][ T5793] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  584.616074][ T5793] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  584.631609][ T6026] binder: BINDER_SET_CONTEXT_MGR already set
07:29:35 executing program 4 (fault-call:1 fault-nth:6):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  584.691478][ T6026] binder: 6025:6026 ioctl 40046207 0 returned -16
[  584.795987][ T6214] FAULT_INJECTION: forcing a failure.
[  584.795987][ T6214] name failslab, interval 1, probability 0, space 0, times 0
[  584.818922][ T6214] CPU: 1 PID: 6214 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  584.828101][ T6214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  584.838169][ T6214] Call Trace:
[  584.841500][ T6214]  dump_stack+0x172/0x1f0
[  584.845881][ T6214]  should_fail.cold+0xa/0x15
[  584.850493][ T6214]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  584.856304][ T6214]  ? ___might_sleep+0x163/0x280
[  584.861181][ T6214]  __should_failslab+0x121/0x190
[  584.866132][ T6214]  should_failslab+0x9/0x14
[  584.870642][ T6214]  __kmalloc_track_caller+0x2d8/0x740
[  584.876023][ T6214]  ? vfs_parse_fs_string+0xe8/0x170
[  584.881258][ T6214]  kmemdup_nul+0x31/0xa0
[  584.885507][ T6214]  vfs_parse_fs_string+0xe8/0x170
[  584.890545][ T6214]  ? vfs_parse_fs_param+0x510/0x510
[  584.895765][ T6214]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  584.902023][ T6214]  ? alloc_fs_context+0x3bb/0x640
[  584.907073][ T6214]  do_mount+0x6e9/0x2c40
[  584.911339][ T6214]  ? copy_mount_string+0x40/0x40
[  584.916293][ T6214]  ? _copy_from_user+0xdd/0x150
[  584.921153][ T6214]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  584.927411][ T6214]  ? memdup_user+0x65/0xb0
[  584.931817][ T6214]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  584.938148][ T6214]  ? copy_mount_options+0x280/0x3a0
[  584.943345][ T6214]  __ia32_compat_sys_mount+0x664/0x790
[  584.948819][ T6214]  ? trace_hardirqs_on+0x67/0x230
[  584.953857][ T6214]  do_fast_syscall_32+0x281/0xc98
[  584.958905][ T6214]  entry_SYSENTER_compat+0x70/0x7f
[  584.964014][ T6214] RIP: 0023:0xf7fca869
[  584.968104][ T6214] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  584.987755][ T6214] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
07:29:35 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fffffffefff}, 0x0)

07:29:35 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:29:35 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x5, 0x300)
r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x400)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

07:29:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

[  584.996187][ T6214] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  585.004173][ T6214] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  585.012154][ T6214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  585.020115][ T6214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  585.028089][ T6214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:29:36 executing program 4 (fault-call:1 fault-nth:7):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:29:36 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:36 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000040)=@sack_info={<r1=>0x0, 0xffffffffffffff80, 0xfff}, &(0x7f0000000080)=0xc)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={r1, 0x1, 0xc1, "5f2225320cd8c24c432448a0672b67f4415c13fe3552abc889209b33c74d9f478e552329c71bc60874fea717c80062cd5b91f03ed274d59de17ff63c39a38e5ce46e9676af67d867bc235d91f999a0020c65507e8f7210d420084026cd7b02c37976e969f858c7c572d4fe6400572a20c536bf60f2ca60e3cc3f5874acf248bf79731d0cb2525c54566bf190423d12197657800d593c342e02b170bb154dd6fa8af3159a69740ca173e805179d2d935b06ed5384f7df516ba44e94b3357bad2ad4"}, 0xc9)
r2 = socket$kcm(0x11, 0x400000000, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r2, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8906, 0x0)

07:29:36 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x40049409, 0x0)

[  585.185993][ T6279] FAULT_INJECTION: forcing a failure.
[  585.185993][ T6279] name failslab, interval 1, probability 0, space 0, times 0
[  585.204452][ T6282] binder: BINDER_SET_CONTEXT_MGR already set
[  585.235169][ T6282] binder: 6275:6282 ioctl 40046207 200003c0 returned -16
[  585.248978][ T6279] CPU: 0 PID: 6279 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  585.256941][ T6279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  585.267038][ T6279] Call Trace:
[  585.270366][ T6279]  dump_stack+0x172/0x1f0
[  585.274728][ T6279]  should_fail.cold+0xa/0x15
[  585.279348][ T6279]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  585.285202][ T6279]  ? ___might_sleep+0x163/0x280
[  585.290091][ T6279]  __should_failslab+0x121/0x190
[  585.295045][ T6279]  should_failslab+0x9/0x14
[  585.299598][ T6279]  kmem_cache_alloc_trace+0x2d1/0x760
[  585.305000][ T6279]  ? vfs_parse_fs_string+0x111/0x170
[  585.310303][ T6279]  ? rcu_read_lock_sched_held+0x110/0x130
[  585.316066][ T6279]  ceph_mount+0xb0/0x1870
[  585.320438][ T6279]  ? vfs_parse_fs_param+0x510/0x510
[  585.325666][ T6279]  ? ceph_compare_super+0x510/0x510
[  585.330917][ T6279]  legacy_get_tree+0xf2/0x200
07:29:36 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  585.335612][ T6279]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  585.341907][ T6279]  vfs_get_tree+0x123/0x450
[  585.346430][ T6279]  do_mount+0x1436/0x2c40
[  585.350788][ T6279]  ? copy_mount_string+0x40/0x40
[  585.355740][ T6279]  ? _copy_from_user+0xdd/0x150
[  585.360611][ T6279]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  585.366902][ T6279]  ? memdup_user+0x65/0xb0
[  585.366921][ T6279]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  585.366936][ T6279]  ? copy_mount_options+0x280/0x3a0
07:29:36 executing program 2:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, <r1=>0x0})
stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0186405, &(0x7f0000000180)={0x7fff, 0x4, r1, 0x0, r2, 0x0, 0x100000001, 0x8001})
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000240)={0x10001, 0x20, [0x9, 0x8, 0x80000001, 0x3, 0x1, 0xffffffff7fffffff, 0x20, 0xffff]})
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x7ff)
ioctl$VIDIOC_EXPBUF(0xffffffffffffff9c, 0xc0405610, &(0x7f0000000000)={0x0, 0x6, 0x5, 0x80800, <r3=>0xffffffffffffffff})
fcntl$getflags(r0, 0x3)
fadvise64(r3, 0x0, 0x8, 0x3)
r4 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0)
recvmsg$kcm(r4, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8906, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video35\x00', 0x2, 0x0)

07:29:36 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  585.366960][ T6279]  __ia32_compat_sys_mount+0x664/0x790
[  585.366976][ T6279]  ? trace_hardirqs_on+0x67/0x230
[  585.366996][ T6279]  do_fast_syscall_32+0x281/0xc98
[  585.367022][ T6279]  entry_SYSENTER_compat+0x70/0x7f
[  585.377692][ T6279] RIP: 0023:0xf7fca869
[  585.377735][ T6279] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
07:29:36 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x4018620d, 0x0)

[  585.377744][ T6279] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  585.377758][ T6279] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  585.377767][ T6279] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  585.377775][ T6279] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  585.377783][ T6279] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  585.377790][ T6279] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  585.603321][ T6546] binder: 6544:6546 ioctl 4018620d 0 returned -22
[  585.627093][ T6610] binder: 6564:6610 ioctl 4018620d 0 returned -22
07:29:36 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x10120800000000}, 0x0)

07:29:36 executing program 4 (fault-call:1 fault-nth:8):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:29:36 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x4020940d, 0x0)

07:29:36 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:36 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  585.989345][ T6686] FAULT_INJECTION: forcing a failure.
[  585.989345][ T6686] name failslab, interval 1, probability 0, space 0, times 0
[  586.021991][ T6686] CPU: 0 PID: 6686 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  586.029953][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  586.040053][ T6686] Call Trace:
[  586.043361][ T6686]  dump_stack+0x172/0x1f0
[  586.047912][ T6686]  should_fail.cold+0xa/0x15
[  586.047935][ T6686]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  586.047961][ T6686]  ? ___might_sleep+0x163/0x280
[  586.047983][ T6686]  __should_failslab+0x121/0x190
[  586.068415][ T6686]  should_failslab+0x9/0x14
[  586.073049][ T6686]  __kmalloc_track_caller+0x2d8/0x740
[  586.078458][ T6686]  ? ceph_mount+0xb0/0x1870
[  586.083008][ T6686]  ? rcu_read_lock_sched_held+0x110/0x130
[  586.088756][ T6686]  ? kmem_cache_alloc_trace+0x354/0x760
[  586.094328][ T6686]  ? ceph_mount+0x1c5/0x1870
[  586.098946][ T6686]  kstrdup+0x3a/0x70
[  586.102858][ T6686]  ceph_mount+0x1c5/0x1870
[  586.107294][ T6686]  ? vfs_parse_fs_param+0x510/0x510
[  586.112517][ T6686]  ? ceph_compare_super+0x510/0x510
[  586.117739][ T6686]  legacy_get_tree+0xf2/0x200
[  586.122432][ T6686]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  586.128680][ T6686]  vfs_get_tree+0x123/0x450
[  586.128698][ T6686]  do_mount+0x1436/0x2c40
07:29:37 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x402c5828, 0x0)

07:29:37 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  586.128726][ T6686]  ? copy_mount_string+0x40/0x40
[  586.128741][ T6686]  ? _copy_from_user+0xdd/0x150
[  586.128759][ T6686]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  586.128782][ T6686]  ? memdup_user+0x65/0xb0
[  586.158064][ T6686]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  586.159651][ T6807] binder: BINDER_SET_CONTEXT_MGR already set
[  586.164317][ T6686]  ? copy_mount_options+0x280/0x3a0
[  586.164344][ T6686]  __ia32_compat_sys_mount+0x664/0x790
[  586.164361][ T6686]  ? trace_hardirqs_on+0x67/0x230
[  586.164383][ T6686]  do_fast_syscall_32+0x281/0xc98
[  586.164405][ T6686]  entry_SYSENTER_compat+0x70/0x7f
[  586.164426][ T6686] RIP: 0023:0xf7fca869
[  586.173491][ T6807] binder: 6806:6807 ioctl 4018620d 200003c0 returned -16
[  586.175607][ T6686] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  586.175616][ T6686] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
07:29:37 executing program 4 (fault-call:1 fault-nth:9):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  586.175640][ T6686] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  586.175649][ T6686] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  586.175658][ T6686] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  586.175667][ T6686] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  586.175676][ T6686] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:29:37 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  586.327488][ T6911] FAULT_INJECTION: forcing a failure.
[  586.327488][ T6911] name failslab, interval 1, probability 0, space 0, times 0
[  586.369720][ T6911] CPU: 0 PID: 6911 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  586.377677][ T6911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  586.387759][ T6911] Call Trace:
[  586.387788][ T6911]  dump_stack+0x172/0x1f0
[  586.387813][ T6911]  should_fail.cold+0xa/0x15
[  586.387835][ T6911]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  586.387859][ T6911]  ? ___might_sleep+0x163/0x280
[  586.387881][ T6911]  __should_failslab+0x121/0x190
[  586.387914][ T6911]  should_failslab+0x9/0x14
[  586.395558][ T6911]  __kmalloc_track_caller+0x2d8/0x740
[  586.395574][ T6911]  ? ceph_mount+0xb0/0x1870
[  586.395590][ T6911]  ? rcu_read_lock_sched_held+0x110/0x130
[  586.395608][ T6911]  ? kmem_cache_alloc_trace+0x354/0x760
[  586.395635][ T6911]  ? ceph_mount+0x827/0x1870
[  586.395665][ T6911]  kstrdup+0x3a/0x70
[  586.425715][ T6911]  ceph_mount+0x827/0x1870
[  586.425739][ T6911]  ? vfs_parse_fs_param+0x510/0x510
[  586.425758][ T6911]  ? ceph_compare_super+0x510/0x510
[  586.425773][ T6911]  legacy_get_tree+0xf2/0x200
[  586.425789][ T6911]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  586.425814][ T6911]  vfs_get_tree+0x123/0x450
[  586.436054][ T6911]  do_mount+0x1436/0x2c40
[  586.436085][ T6911]  ? copy_mount_string+0x40/0x40
[  586.489788][ T6911]  ? _copy_from_user+0xdd/0x150
[  586.494677][ T6911]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  586.500964][ T6911]  ? memdup_user+0x65/0xb0
[  586.505406][ T6911]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  586.511668][ T6911]  ? copy_mount_options+0x280/0x3a0
[  586.516897][ T6911]  __ia32_compat_sys_mount+0x664/0x790
[  586.522371][ T6911]  ? trace_hardirqs_on+0x67/0x230
[  586.527418][ T6911]  do_fast_syscall_32+0x281/0xc98
[  586.532456][ T6911]  entry_SYSENTER_compat+0x70/0x7f
[  586.537588][ T6911] RIP: 0023:0xf7fca869
[  586.541680][ T6911] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  586.561315][ T6911] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
07:29:37 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x454, 0x200)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x101080, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8906, 0x0)

07:29:37 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x402c582a, 0x0)

07:29:37 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0)

[  586.569745][ T6911] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  586.576174][ T7023] binder: 7022:7023 ioctl c0046209 0 returned -22
[  586.577727][ T6911] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  586.577737][ T6911] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  586.577746][ T6911] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  586.577755][ T6911] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  586.823902][    C1] net_ratelimit: 10 callbacks suppressed
[  586.823912][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  586.836270][    C1] protocol 88fb is buggy, dev hsr_slave_1
07:29:37 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x50c60900000000}, 0x0)

07:29:37 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:37 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0)

07:29:37 executing program 4 (fault-call:1 fault-nth:10):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:29:37 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  586.966615][ T7144] binder: 7143:7144 ioctl c018620b 0 returned -14
[  586.973426][ T7146] FAULT_INJECTION: forcing a failure.
[  586.973426][ T7146] name failslab, interval 1, probability 0, space 0, times 0
[  586.994186][ T7146] CPU: 0 PID: 7146 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  587.002124][ T7146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  587.012193][ T7146] Call Trace:
[  587.015499][ T7146]  dump_stack+0x172/0x1f0
[  587.019853][ T7146]  should_fail.cold+0xa/0x15
[  587.024470][ T7146]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  587.030297][ T7146]  ? ___might_sleep+0x163/0x280
[  587.035167][ T7146]  __should_failslab+0x121/0x190
[  587.040118][ T7146]  should_failslab+0x9/0x14
[  587.044651][ T7146]  kmem_cache_alloc_trace+0x2d1/0x760
[  587.050038][ T7146]  ? fs_reclaim_acquire.part.0+0x30/0x30
[  587.055698][ T7146]  ceph_parse_options+0xd2/0x1010
[  587.060774][ T7146]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  587.066635][ T7146]  ? ceph_sync_fs+0x110/0x110
[  587.071323][ T7146]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  587.077579][ T7146]  ? ceph_create_client+0x370/0x370
[  587.082793][ T7146]  ? rcu_read_lock_sched_held+0x110/0x130
[  587.088530][ T7146]  ? __kmalloc_track_caller+0x5d1/0x740
[  587.094083][ T7146]  ? ceph_mount+0xb0/0x1870
[  587.098600][ T7146]  ? rcu_read_lock_sched_held+0x110/0x130
[  587.104349][ T7146]  ? kmem_cache_alloc_trace+0x354/0x760
[  587.109907][ T7146]  ? memcpy+0x46/0x50
[  587.113903][ T7146]  ceph_mount+0x3fc/0x1870
[  587.118334][ T7146]  ? vfs_parse_fs_param+0x510/0x510
[  587.123544][ T7146]  ? ceph_compare_super+0x510/0x510
[  587.128759][ T7146]  legacy_get_tree+0xf2/0x200
[  587.133447][ T7146]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  587.139697][ T7146]  vfs_get_tree+0x123/0x450
[  587.144222][ T7146]  do_mount+0x1436/0x2c40
[  587.148570][ T7146]  ? copy_mount_string+0x40/0x40
[  587.153511][ T7146]  ? _copy_from_user+0xdd/0x150
[  587.158368][ T7146]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
07:29:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0)

07:29:38 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  587.164620][ T7146]  ? memdup_user+0x65/0xb0
[  587.169060][ T7146]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  587.175313][ T7146]  ? copy_mount_options+0x280/0x3a0
[  587.180534][ T7146]  __ia32_compat_sys_mount+0x664/0x790
[  587.185997][ T7146]  ? trace_hardirqs_on+0x67/0x230
[  587.186019][ T7146]  do_fast_syscall_32+0x281/0xc98
[  587.186041][ T7146]  entry_SYSENTER_compat+0x70/0x7f
[  587.186053][ T7146] RIP: 0023:0xf7fca869
[  587.186069][ T7146] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  587.186077][ T7146] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  587.186092][ T7146] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  587.186101][ T7146] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  587.186109][ T7146] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  587.186118][ T7146] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
07:29:38 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x402c5828, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0189436, 0x0)

[  587.186125][ T7146] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  587.279517][ T7371] binder: 7368:7371 ioctl c018620c 0 returned -14
[  587.287911][ T7380] binder: 7373:7380 ioctl c018620c 0 returned -14
[  587.383889][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  587.389827][    C0] protocol 88fb is buggy, dev hsr_slave_1
07:29:38 executing program 2:
socket$kcm(0x29, 0x5, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffdce)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

07:29:38 executing program 4 (fault-call:1 fault-nth:11):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:29:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc020660b, 0x0)

[  587.526290][ T7577] FAULT_INJECTION: forcing a failure.
[  587.526290][ T7577] name failslab, interval 1, probability 0, space 0, times 0
[  587.581480][ T7577] CPU: 1 PID: 7577 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  587.589605][ T7577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  587.599675][ T7577] Call Trace:
[  587.602981][ T7577]  dump_stack+0x172/0x1f0
[  587.607333][ T7577]  should_fail.cold+0xa/0x15
[  587.611934][ T7577]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  587.617742][ T7577]  ? ___might_sleep+0x163/0x280
[  587.622577][ T7577]  __should_failslab+0x121/0x190
[  587.627501][ T7577]  should_failslab+0x9/0x14
[  587.631986][ T7577]  kmem_cache_alloc_trace+0x2d1/0x760
[  587.637342][ T7577]  ? fs_reclaim_acquire.part.0+0x30/0x30
[  587.642961][ T7577]  ceph_parse_options+0x118/0x1010
[  587.648073][ T7577]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  587.653865][ T7577]  ? ceph_sync_fs+0x110/0x110
[  587.658539][ T7577]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  587.664765][ T7577]  ? ceph_create_client+0x370/0x370
[  587.670038][ T7577]  ? rcu_read_lock_sched_held+0x110/0x130
[  587.675743][ T7577]  ? __kmalloc_track_caller+0x5d1/0x740
[  587.681272][ T7577]  ? ceph_mount+0xb0/0x1870
[  587.685762][ T7577]  ? rcu_read_lock_sched_held+0x110/0x130
[  587.691464][ T7577]  ? kmem_cache_alloc_trace+0x354/0x760
[  587.696993][ T7577]  ? memcpy+0x46/0x50
[  587.701702][ T7577]  ceph_mount+0x3fc/0x1870
[  587.706108][ T7577]  ? vfs_parse_fs_param+0x510/0x510
[  587.711290][ T7577]  ? ceph_compare_super+0x510/0x510
[  587.716493][ T7577]  legacy_get_tree+0xf2/0x200
[  587.721156][ T7577]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  587.727380][ T7577]  vfs_get_tree+0x123/0x450
[  587.731868][ T7577]  do_mount+0x1436/0x2c40
[  587.736184][ T7577]  ? copy_mount_string+0x40/0x40
[  587.741108][ T7577]  ? _copy_from_user+0xdd/0x150
[  587.745946][ T7577]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  587.752170][ T7577]  ? memdup_user+0x65/0xb0
[  587.756571][ T7577]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  587.762799][ T7577]  ? copy_mount_options+0x280/0x3a0
[  587.767986][ T7577]  __ia32_compat_sys_mount+0x664/0x790
[  587.773801][ T7577]  ? trace_hardirqs_on+0x67/0x230
[  587.778854][ T7577]  do_fast_syscall_32+0x281/0xc98
[  587.783884][ T7577]  entry_SYSENTER_compat+0x70/0x7f
[  587.788976][ T7577] RIP: 0023:0xf7fca869
[  587.793027][ T7577] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  587.812623][ T7577] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  587.821044][ T7577] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  587.829026][ T7577] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  587.837146][ T7577] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  587.845168][ T7577] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  587.853141][ T7577] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:29:38 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x70c80900000000}, 0x0)

07:29:38 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x402c582a, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:38 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:29:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306202, 0x0)

07:29:38 executing program 4 (fault-call:1 fault-nth:12):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  587.966152][ T7601] binder: 7596:7601 ioctl c0306202 0 returned -22
[  588.004086][ T7637] binder: 7602:7637 ioctl c0306202 0 returned -22
07:29:38 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306204, 0x0)

[  588.023839][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  588.029768][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  588.035678][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  588.041494][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  588.054770][ T7750] FAULT_INJECTION: forcing a failure.
[  588.054770][ T7750] name failslab, interval 1, probability 0, space 0, times 0
[  588.085472][ T7750] CPU: 0 PID: 7750 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  588.093427][ T7750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  588.103503][ T7750] Call Trace:
[  588.106821][ T7750]  dump_stack+0x172/0x1f0
[  588.111175][ T7750]  should_fail.cold+0xa/0x15
[  588.115788][ T7750]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  588.121616][ T7750]  ? ___might_sleep+0x163/0x280
[  588.126487][ T7750]  __should_failslab+0x121/0x190
[  588.131440][ T7750]  should_failslab+0x9/0x14
[  588.135958][ T7750]  kmem_cache_alloc_trace+0x2d1/0x760
[  588.141343][ T7750]  ? memcpy+0x46/0x50
[  588.145338][ T7750]  ceph_mount+0x455/0x1870
[  588.149776][ T7750]  ? vfs_parse_fs_param+0x510/0x510
[  588.154988][ T7750]  ? ceph_compare_super+0x510/0x510
[  588.160198][ T7750]  legacy_get_tree+0xf2/0x200
[  588.164883][ T7750]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  588.171136][ T7750]  vfs_get_tree+0x123/0x450
[  588.175662][ T7750]  do_mount+0x1436/0x2c40
[  588.180015][ T7750]  ? copy_mount_string+0x40/0x40
[  588.184965][ T7750]  ? _copy_from_user+0xdd/0x150
[  588.189838][ T7750]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  588.196097][ T7750]  ? memdup_user+0x65/0xb0
[  588.200524][ T7750]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  588.206775][ T7750]  ? copy_mount_options+0x280/0x3a0
[  588.211989][ T7750]  __ia32_compat_sys_mount+0x664/0x790
[  588.217459][ T7750]  ? trace_hardirqs_on+0x67/0x230
[  588.222503][ T7750]  do_fast_syscall_32+0x281/0xc98
[  588.227547][ T7750]  entry_SYSENTER_compat+0x70/0x7f
07:29:39 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  588.232670][ T7750] RIP: 0023:0xf7fca869
[  588.236753][ T7750] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  588.256373][ T7750] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  588.256389][ T7750] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  588.256397][ T7750] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
07:29:39 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  588.256405][ T7750] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  588.256413][ T7750] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  588.256422][ T7750] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  588.256657][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  588.310915][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  588.326474][ T7905] binder: 7831:7905 ioctl c0306204 0 returned -22
07:29:39 executing program 4 (fault-call:1 fault-nth:13):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  588.337132][ T7962] binder: 7831:7962 ioctl c0306204 0 returned -22
07:29:39 executing program 2:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x6, 0x400000)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000280)={0x8, [0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x24)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000300)={r1, 0x7b10, 0x47c8}, 0x8)
r2 = socket$kcm(0x11, 0x400000002, 0x300)
r3 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x7, 0x0)
ioctl$PPPIOCSCOMPRESS(r3, 0x400c744d)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
getsockopt(r3, 0x10001, 0xa, &(0x7f0000001240)=""/4096, &(0x7f0000001200)=0x1000)
r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000040)={<r5=>0x0, 0x9b7, 0x4, 0x8}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000000c0)={r5, @in6={{0xa, 0x4e24, 0xfffffffffffffe01, @mcast1, 0x5}}, 0x7, 0x80, 0x0, 0x8, 0x6}, &(0x7f0000000180)=0x98)
ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000200))
recvmsg$kcm(r2, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8906, 0x2)

07:29:39 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:39 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306225, 0x0)

[  588.441428][ T8002] FAULT_INJECTION: forcing a failure.
[  588.441428][ T8002] name failslab, interval 1, probability 0, space 0, times 0
[  588.485835][ T8030] binder: 8026:8030 ioctl c0306225 0 returned -22
[  588.504297][ T8002] CPU: 0 PID: 8002 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  588.512254][ T8002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  588.522325][ T8002] Call Trace:
[  588.525651][ T8002]  dump_stack+0x172/0x1f0
[  588.530024][ T8002]  should_fail.cold+0xa/0x15
[  588.534650][ T8002]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  588.540477][ T8002]  ? ___might_sleep+0x163/0x280
[  588.545361][ T8002]  __should_failslab+0x121/0x190
[  588.550322][ T8002]  should_failslab+0x9/0x14
[  588.555016][ T8002]  kmem_cache_alloc_trace+0x2d1/0x760
[  588.560402][ T8002]  ? ceph_mount+0x455/0x1870
[  588.565008][ T8002]  ? rcu_read_lock_sched_held+0x110/0x130
[  588.570741][ T8002]  ? kmem_cache_alloc_trace+0x354/0x760
[  588.576314][ T8002]  ceph_create_client+0x6b/0x370
[  588.576335][ T8002]  ceph_mount+0x471/0x1870
[  588.576354][ T8002]  ? vfs_parse_fs_param+0x510/0x510
[  588.576372][ T8002]  ? ceph_compare_super+0x510/0x510
[  588.576388][ T8002]  legacy_get_tree+0xf2/0x200
[  588.576404][ T8002]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  588.576424][ T8002]  vfs_get_tree+0x123/0x450
[  588.611677][ T8002]  do_mount+0x1436/0x2c40
[  588.616043][ T8002]  ? copy_mount_string+0x40/0x40
[  588.621020][ T8002]  ? _copy_from_user+0xdd/0x150
[  588.625895][ T8002]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  588.632154][ T8002]  ? memdup_user+0x65/0xb0
[  588.636582][ T8002]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  588.642853][ T8002]  ? copy_mount_options+0x280/0x3a0
[  588.648069][ T8002]  __ia32_compat_sys_mount+0x664/0x790
[  588.653567][ T8002]  ? trace_hardirqs_on+0x67/0x230
[  588.658662][ T8002]  do_fast_syscall_32+0x281/0xc98
[  588.663738][ T8002]  entry_SYSENTER_compat+0x70/0x7f
[  588.668857][ T8002] RIP: 0023:0xf7fca869
[  588.672932][ T8002] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  588.692554][ T8002] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  588.692571][ T8002] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  588.692579][ T8002] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  588.692586][ T8002] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  588.692594][ T8002] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  588.692601][ T8002] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:29:39 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80040800000000}, 0x0)

07:29:39 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306247, 0x0)

07:29:39 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:39 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:29:39 executing program 4 (fault-call:1 fault-nth:14):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  588.892031][ T8198] FAULT_INJECTION: forcing a failure.
[  588.892031][ T8198] name failslab, interval 1, probability 0, space 0, times 0
[  588.918747][ T8200] binder: 8199:8200 ioctl c0306247 0 returned -22
[  588.922577][ T8202] binder: 8194 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero.
[  588.922590][ T8202] binder: 8194:8202 ioctl c018620c 200003c0 returned -22
[  588.943531][ T8198] CPU: 0 PID: 8198 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  588.951444][ T8198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  588.961604][ T8198] Call Trace:
[  588.964927][ T8198]  dump_stack+0x172/0x1f0
[  588.969360][ T8198]  should_fail.cold+0xa/0x15
[  588.973973][ T8198]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  588.979806][ T8198]  ? ___might_sleep+0x163/0x280
[  588.984682][ T8198]  __should_failslab+0x121/0x190
[  588.989652][ T8198]  should_failslab+0x9/0x14
[  588.994169][ T8198]  __kmalloc+0x2dc/0x740
[  588.994776][ T8231] binder: 8199:8231 ioctl c0306247 0 returned -22
[  588.998418][ T8198]  ? debug_mutex_init+0x2d/0x60
[  588.998436][ T8198]  ? ceph_monc_init+0x13c/0xc40
[  588.998456][ T8198]  ceph_monc_init+0x13c/0xc40
[  588.998472][ T8198]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  588.998497][ T8198]  ? refcount_inc_checked+0x2b/0x70
[  589.030847][ T8198]  ceph_create_client+0x278/0x370
[  589.035898][ T8198]  ceph_mount+0x471/0x1870
[  589.040337][ T8198]  ? vfs_parse_fs_param+0x510/0x510
[  589.045552][ T8198]  ? ceph_compare_super+0x510/0x510
[  589.050761][ T8198]  legacy_get_tree+0xf2/0x200
[  589.055455][ T8198]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  589.061724][ T8198]  vfs_get_tree+0x123/0x450
[  589.066249][ T8198]  do_mount+0x1436/0x2c40
[  589.070607][ T8198]  ? copy_mount_string+0x40/0x40
[  589.075561][ T8198]  ? _copy_from_user+0xdd/0x150
[  589.080428][ T8198]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  589.086677][ T8198]  ? memdup_user+0x65/0xb0
[  589.091116][ T8198]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  589.097362][ T8198]  ? copy_mount_options+0x280/0x3a0
[  589.102581][ T8198]  __ia32_compat_sys_mount+0x664/0x790
[  589.108052][ T8198]  ? trace_hardirqs_on+0x67/0x230
[  589.113090][ T8198]  do_fast_syscall_32+0x281/0xc98
[  589.118126][ T8198]  entry_SYSENTER_compat+0x70/0x7f
[  589.118140][ T8198] RIP: 0023:0xf7fca869
[  589.118157][ T8198] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  589.118165][ T8198] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  589.118179][ T8198] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  589.118188][ T8198] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  589.118204][ T8198] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  589.127546][ T8198] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
07:29:40 executing program 0:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x800, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000040)=""/51)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

07:29:40 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:29:40 executing program 4 (fault-call:1 fault-nth:15):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  589.127554][ T8198] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  589.221582][ T8414] binder: 8412:8414 ioctl c0306201 0 returned -14
07:29:40 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x80000000, 0x202000)
ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x100000001)

[  589.265988][ T8419] FAULT_INJECTION: forcing a failure.
[  589.265988][ T8419] name failslab, interval 1, probability 0, space 0, times 0
[  589.341127][ T8419] CPU: 1 PID: 8419 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  589.349104][ T8419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  589.349112][ T8419] Call Trace:
[  589.349140][ T8419]  dump_stack+0x172/0x1f0
[  589.349164][ T8419]  should_fail.cold+0xa/0x15
[  589.349183][ T8419]  ? fs_reclaim_acquire.part.0+0x30/0x30
[  589.349218][ T8419]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  589.365866][ T8429] binder: 8424:8429 ioctl c0306201 0 returned -14
[  589.366888][ T8419]  ? ___might_sleep+0x163/0x280
[  589.366911][ T8419]  __should_failslab+0x121/0x190
[  589.366935][ T8419]  should_failslab+0x9/0x14
[  589.375931][ T8429] cgroup: fork rejected by pids controller in /syz0
[  589.377152][ T8419]  kmem_cache_alloc_trace+0x2d1/0x760
[  589.377169][ T8419]  ? rcu_read_lock_sched_held+0x110/0x130
[  589.377185][ T8419]  ? __kmalloc+0x5d5/0x740
[  589.377218][ T8419]  ceph_auth_init+0x49/0x140
[  589.383962][ T8432] binder: 8424:8432 ioctl c0306201 0 returned -14
[  589.389421][ T8419]  ceph_monc_init+0x4a7/0xc40
[  589.389447][ T8419]  ceph_create_client+0x278/0x370
[  589.389469][ T8419]  ceph_mount+0x471/0x1870
[  589.399241][ T8419]  ? vfs_parse_fs_param+0x510/0x510
[  589.399262][ T8419]  ? ceph_compare_super+0x510/0x510
[  589.399279][ T8419]  legacy_get_tree+0xf2/0x200
[  589.399301][ T8419]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  589.472305][ T8419]  vfs_get_tree+0x123/0x450
[  589.476819][ T8419]  do_mount+0x1436/0x2c40
[  589.481139][ T8419]  ? copy_mount_string+0x40/0x40
[  589.486059][ T8419]  ? _copy_from_user+0xdd/0x150
[  589.490916][ T8419]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  589.497160][ T8419]  ? memdup_user+0x65/0xb0
[  589.501565][ T8419]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  589.507788][ T8419]  ? copy_mount_options+0x280/0x3a0
[  589.513001][ T8419]  __ia32_compat_sys_mount+0x664/0x790
[  589.518459][ T8419]  ? trace_hardirqs_on+0x67/0x230
[  589.523488][ T8419]  do_fast_syscall_32+0x281/0xc98
[  589.528499][ T8419]  entry_SYSENTER_compat+0x70/0x7f
[  589.533592][ T8419] RIP: 0023:0xf7fca869
[  589.537659][ T8419] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  589.557268][ T8419] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  589.565667][ T8419] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  589.573620][ T8419] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  589.581588][ T8419] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  589.589546][ T8419] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  589.597514][ T8419] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:29:40 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x10400)
r2 = geteuid()
getresgid(&(0x7f0000000040), &(0x7f0000000080)=<r3=>0x0, &(0x7f00000000c0))
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000100)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8)
lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
write$FUSE_DIRENTPLUS(r1, &(0x7f0000000300)={0x178, 0xfffffffffffffff5, 0x4, [{{0x1, 0x1, 0x66, 0x98, 0x427a3c67, 0x9, {0x6, 0x10001, 0x2, 0x2, 0x4, 0x40, 0x100, 0x40, 0xaeca, 0x1, 0x80, r2, r3, 0x5, 0x6d06}}, {0x2, 0x2, 0x0, 0x5}}, {{0x2, 0x1, 0x8001, 0xd2, 0x20, 0x5, {0x6, 0xb7b, 0x7, 0x8, 0x6, 0x9, 0x3ff, 0xfffffffffffffff8, 0x8, 0x5, 0x8df, r4, r5, 0x7, 0xc0a}}, {0x1, 0x64d, 0x36, 0xe6, 'em1wlan0trusted,trustedproc,{]{mime_type#-{proc@cpuset'}}]}, 0x178)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

07:29:40 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:40 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x90120800000000}, 0x0)

07:29:40 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x7ffffffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:29:40 executing program 4 (fault-call:1 fault-nth:16):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:29:40 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  589.725583][ T8540] binder: 8538:8540 ioctl c0306201 0 returned -14
[  589.766321][ T8581] FAULT_INJECTION: forcing a failure.
[  589.766321][ T8581] name failslab, interval 1, probability 0, space 0, times 0
[  589.783948][ T8605] binder: 8538:8605 ioctl c0306201 0 returned -14
[  589.814640][ T8581] CPU: 0 PID: 8581 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  589.822592][ T8581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  589.833075][ T8581] Call Trace:
[  589.836387][ T8581]  dump_stack+0x172/0x1f0
[  589.840777][ T8581]  should_fail.cold+0xa/0x15
[  589.845434][ T8581]  ? fs_reclaim_acquire.part.0+0x30/0x30
[  589.851118][ T8581]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  589.856970][ T8581]  ? ___might_sleep+0x163/0x280
[  589.861862][ T8581]  __should_failslab+0x121/0x190
[  589.866828][ T8581]  should_failslab+0x9/0x14
[  589.871390][ T8581]  kmem_cache_alloc_trace+0x2d1/0x760
[  589.876788][ T8581]  ? rcu_read_lock_sched_held+0x110/0x130
[  589.882538][ T8581]  ? __kmalloc+0x5d5/0x740
[  589.886988][ T8581]  ceph_auth_init+0x49/0x140
[  589.891601][ T8581]  ceph_monc_init+0x4a7/0xc40
[  589.896323][ T8581]  ceph_create_client+0x278/0x370
[  589.901385][ T8581]  ceph_mount+0x471/0x1870
[  589.905857][ T8581]  ? vfs_parse_fs_param+0x510/0x510
07:29:40 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  589.911078][ T8581]  ? ceph_compare_super+0x510/0x510
[  589.916299][ T8581]  legacy_get_tree+0xf2/0x200
[  589.921007][ T8581]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  589.927531][ T8581]  vfs_get_tree+0x123/0x450
[  589.932057][ T8581]  do_mount+0x1436/0x2c40
[  589.936409][ T8581]  ? copy_mount_string+0x40/0x40
[  589.936427][ T8581]  ? _copy_from_user+0xdd/0x150
[  589.936451][ T8581]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  589.946248][ T8581]  ? memdup_user+0x65/0xb0
[  589.946266][ T8581]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  589.946278][ T8581]  ? copy_mount_options+0x280/0x3a0
[  589.946299][ T8581]  __ia32_compat_sys_mount+0x664/0x790
[  589.946316][ T8581]  ? trace_hardirqs_on+0x67/0x230
[  589.946335][ T8581]  do_fast_syscall_32+0x281/0xc98
[  589.946356][ T8581]  entry_SYSENTER_compat+0x70/0x7f
[  589.946368][ T8581] RIP: 0023:0xf7fca869
[  589.946383][ T8581] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
07:29:40 executing program 4 (fault-call:1 fault-nth:17):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:29:40 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0)
write$UHID_CREATE(r1, &(0x7f00000000c0)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/114, 0x72, 0xabf, 0x6, 0x77d3, 0x3, 0xfff}, 0x11c)

07:29:40 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  589.946391][ T8581] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  589.946405][ T8581] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  589.946414][ T8581] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  589.946423][ T8581] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  589.946430][ T8581] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  589.946437][ T8581] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  590.094135][ T8789] binder: 8779:8789 ioctl c0306201 0 returned -14
[  590.102734][ T8798] FAULT_INJECTION: forcing a failure.
[  590.102734][ T8798] name failslab, interval 1, probability 0, space 0, times 0
[  590.114028][ T8813] binder: 8779:8813 ioctl c0306201 0 returned -14
07:29:41 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x8, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={'netdevsim0\x00', {0x2, 0x4e20, @local}})
setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88)
clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="e3000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=<r2=>0x0], &(0x7f0000000140)=0x14)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0xb5b, 0x3, 0x8000, 0x5, 0x3, 0x7fff, 0x1, 0x0, r2}, 0x20)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0xc000, 0x0)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f0000000040)={0x6, 0x2000})

[  590.216579][ T8798] CPU: 0 PID: 8798 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  590.224532][ T8798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  590.234595][ T8798] Call Trace:
[  590.237897][ T8798]  dump_stack+0x172/0x1f0
[  590.242242][ T8798]  should_fail.cold+0xa/0x15
[  590.246847][ T8798]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  590.250521][ T8941] binder: 8940:8941 ioctl c0306201 0 returned -14
[  590.252673][ T8798]  ? ___might_sleep+0x163/0x280
[  590.252695][ T8798]  __should_failslab+0x121/0x190
[  590.252724][ T8798]  should_failslab+0x9/0x14
[  590.252741][ T8798]  __kmalloc+0x2dc/0x740
[  590.252764][ T8798]  ? rcu_read_lock_sched_held+0x110/0x130
[  590.283458][ T8798]  ? kmem_cache_alloc+0x32e/0x6f0
[  590.288483][ T8798]  ? ceph_kvmalloc+0x41/0xb6
[  590.288504][ T8798]  ceph_kvmalloc+0x41/0xb6
[  590.288520][ T8798]  ceph_msg_new2+0x26c/0x440
[  590.288539][ T8798]  ceph_msg_new+0x2f/0x40
[  590.288561][ T8798]  ceph_monc_init+0x53c/0xc40
[  590.311123][ T8798]  ceph_create_client+0x278/0x370
07:29:41 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x1000000000000009, 0x9, 0xfffffffffffffff7})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  590.316162][ T8798]  ceph_mount+0x471/0x1870
[  590.320594][ T8798]  ? vfs_parse_fs_param+0x510/0x510
[  590.325821][ T8798]  ? ceph_compare_super+0x510/0x510
[  590.331030][ T8798]  legacy_get_tree+0xf2/0x200
[  590.335719][ T8798]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  590.341972][ T8798]  vfs_get_tree+0x123/0x450
[  590.346482][ T8798]  do_mount+0x1436/0x2c40
[  590.350829][ T8798]  ? copy_mount_string+0x40/0x40
[  590.355776][ T8798]  ? _copy_from_user+0xdd/0x150
[  590.360648][ T8798]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  590.360668][ T8798]  ? memdup_user+0x65/0xb0
[  590.360685][ T8798]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  590.360700][ T8798]  ? copy_mount_options+0x280/0x3a0
[  590.360732][ T8798]  __ia32_compat_sys_mount+0x664/0x790
[  590.371374][ T8798]  ? trace_hardirqs_on+0x67/0x230
[  590.371399][ T8798]  do_fast_syscall_32+0x281/0xc98
[  590.371423][ T8798]  entry_SYSENTER_compat+0x70/0x7f
[  590.371437][ T8798] RIP: 0023:0xf7fca869
[  590.371457][ T8798] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  590.402453][ T8978] binder: 8976:8978 ioctl c0306201 0 returned -14
[  590.403441][ T8798] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  590.403457][ T8798] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  590.403466][ T8798] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  590.403475][ T8798] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  590.403484][ T8798] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  590.403493][ T8798] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:29:41 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

07:29:41 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:29:41 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffefffffff7f0000}, 0x0)

07:29:41 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306202, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:41 executing program 0:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x61f892cdf4abbf25, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)={0x6, 0x0, [{0x7000, 0x77, &(0x7f0000000140)=""/119}, {0x0, 0x93, &(0x7f00000001c0)=""/147}, {0x4000, 0x57, &(0x7f0000000280)=""/87}, {0x3000, 0x2, &(0x7f0000000300)=""/2}, {0x1000, 0xd, &(0x7f0000000340)=""/13}, {0x0, 0x92, &(0x7f0000000440)=""/146}]})
r1 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0xcf9, 0x6, 0x852, 0x2, 0xffffffffffffff9c, 0x8}, 0x2c)
pwrite64(r1, &(0x7f0000000040)="cab3f3f3c3458678bd5ce6b79fe3198ebe4dcc1c6528dad1bce9f99a40a34bccd2e4374ca42269d76958961bcfab0556d7a6b888718c25a34b5af2921308531043a495b9d519e8892d072d4d12d7e95e75b0c402f75ad12e9a27891442518462c11a5ee5d26e72ea5f28d4288701286d330416f90d7d8a2286aa9cd7257b78109191b4da5d4a00362877b9cfa1755f4375c1ba8a279a7e7cd9ed89cea36445044377f587b643be2707cc3beb03399757c3689b2392", 0xb5, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)

[  590.616860][ T9052] binder: 9042:9052 ioctl c0306201 0 returned -14
[  590.625793][ T9057] binder: 9055:9057 ioctl c0306202 200003c0 returned -22
07:29:41 executing program 4 (fault-call:1 fault-nth:18):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:29:41 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  590.745170][ T9212] FAULT_INJECTION: forcing a failure.
[  590.745170][ T9212] name failslab, interval 1, probability 0, space 0, times 0
[  590.788062][ T9212] CPU: 1 PID: 9212 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  590.796011][ T9212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  590.806083][ T9212] Call Trace:
[  590.809395][ T9212]  dump_stack+0x172/0x1f0
[  590.813745][ T9212]  should_fail.cold+0xa/0x15
[  590.818360][ T9212]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  590.825197][ T9212]  ? ___might_sleep+0x163/0x280
[  590.830079][ T9212]  __should_failslab+0x121/0x190
07:29:41 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306225, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  590.835033][ T9212]  should_failslab+0x9/0x14
[  590.839551][ T9212]  kmem_cache_alloc+0x2b2/0x6f0
[  590.844417][ T9212]  ? lockdep_init_map+0x1be/0x6d0
[  590.849456][ T9212]  ceph_msg_new2+0x3a/0x440
[  590.853974][ T9212]  ceph_msg_new+0x2f/0x40
[  590.858316][ T9212]  ceph_monc_init+0x53c/0xc40
[  590.863012][ T9212]  ceph_create_client+0x278/0x370
[  590.868056][ T9212]  ceph_mount+0x471/0x1870
[  590.872483][ T9212]  ? vfs_parse_fs_param+0x510/0x510
[  590.877694][ T9212]  ? ceph_compare_super+0x510/0x510
[  590.882905][ T9212]  legacy_get_tree+0xf2/0x200
[  590.882925][ T9212]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  590.882943][ T9212]  vfs_get_tree+0x123/0x450
[  590.882961][ T9212]  do_mount+0x1436/0x2c40
[  590.882985][ T9212]  ? copy_mount_string+0x40/0x40
[  590.893897][ T9212]  ? _copy_from_user+0xdd/0x150
[  590.893919][ T9212]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  590.893937][ T9212]  ? memdup_user+0x65/0xb0
[  590.893954][ T9212]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  590.893969][ T9212]  ? copy_mount_options+0x280/0x3a0
[  590.893993][ T9212]  __ia32_compat_sys_mount+0x664/0x790
[  590.894010][ T9212]  ? trace_hardirqs_on+0x67/0x230
[  590.894033][ T9212]  do_fast_syscall_32+0x281/0xc98
[  590.911259][ T9340] binder: 9327:9340 ioctl c0306225 200003c0 returned -22
[  590.912609][ T9212]  entry_SYSENTER_compat+0x70/0x7f
[  590.912637][ T9212] RIP: 0023:0xf7fca869
[  590.912654][ T9212] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
07:29:41 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = msgget$private(0x0, 0x0)
msgsnd(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="03000011"], 0x8, 0x0)
pipe2(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4000)
ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000040)={0x2c, 0x3a, 0x7, 0x8, 0x0, 0x5, 0x4, 0x143})
openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x40, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f00000002c0)={0xa, 0x7, 0x63, 0x0, '\x00', 0x5})
msgrcv(r1, 0x0, 0x0, 0x3, 0xa4a3ad41a879dddc)
msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000100)=""/89)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
statx(r2, &(0x7f0000000180)='./file0\x00', 0x100, 0x7ff, &(0x7f00000001c0))

07:29:41 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  590.912662][ T9212] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  590.912685][ T9212] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  591.003287][ T9212] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  591.011270][ T9212] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  591.019247][ T9212] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  591.027233][ T9212] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:29:42 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc030624e, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:42 executing program 4 (fault-call:1 fault-nth:19):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  591.259646][ T9528] FAULT_INJECTION: forcing a failure.
[  591.259646][ T9528] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  591.272895][ T9528] CPU: 1 PID: 9528 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  591.280769][ T9528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  591.290829][ T9528] Call Trace:
[  591.294109][ T9528]  dump_stack+0x172/0x1f0
[  591.298438][ T9528]  should_fail.cold+0xa/0x15
[  591.303043][ T9528]  ? save_stack+0xa9/0xd0
[  591.307368][ T9528]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  591.313160][ T9528]  ? __lock_acquire+0x548/0x3fb0
[  591.318102][ T9528]  ? ceph_mount+0x471/0x1870
[  591.322735][ T9528]  ? legacy_get_tree+0xf2/0x200
[  591.327597][ T9528]  ? vfs_get_tree+0x123/0x450
[  591.332296][ T9528]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  591.338557][ T9528]  should_fail_alloc_page+0x50/0x60
[  591.343771][ T9528]  __alloc_pages_nodemask+0x1a1/0x7e0
[  591.349165][ T9528]  ? __alloc_pages_slowpath+0x28b0/0x28b0
[  591.354890][ T9528]  ? find_held_lock+0x35/0x130
[  591.359657][ T9528]  ? fs_reclaim_acquire.part.0+0x30/0x30
[  591.365396][ T9528]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  591.371193][ T9528]  cache_grow_begin+0x9c/0x860
[  591.375957][ T9528]  ? ceph_msg_new2+0x3a/0x440
[  591.380648][ T9528]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  591.386890][ T9528]  kmem_cache_alloc+0x62d/0x6f0
[  591.391749][ T9528]  ceph_msg_new2+0x3a/0x440
[  591.396239][ T9528]  ceph_msg_new+0x2f/0x40
[  591.400552][ T9528]  ceph_monc_init+0x53c/0xc40
[  591.405234][ T9528]  ceph_create_client+0x278/0x370
[  591.410255][ T9528]  ceph_mount+0x471/0x1870
[  591.414686][ T9528]  ? vfs_parse_fs_param+0x510/0x510
[  591.419884][ T9528]  ? ceph_compare_super+0x510/0x510
[  591.425066][ T9528]  legacy_get_tree+0xf2/0x200
[  591.429732][ T9528]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  591.435972][ T9528]  vfs_get_tree+0x123/0x450
[  591.440469][ T9528]  do_mount+0x1436/0x2c40
[  591.444801][ T9528]  ? copy_mount_string+0x40/0x40
[  591.449735][ T9528]  ? _copy_from_user+0xdd/0x150
[  591.454586][ T9528]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  591.460818][ T9528]  ? memdup_user+0x65/0xb0
[  591.465232][ T9528]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  591.471468][ T9528]  ? copy_mount_options+0x280/0x3a0
[  591.476673][ T9528]  __ia32_compat_sys_mount+0x664/0x790
[  591.482147][ T9528]  ? trace_hardirqs_on+0x67/0x230
[  591.487176][ T9528]  do_fast_syscall_32+0x281/0xc98
[  591.492186][ T9528]  entry_SYSENTER_compat+0x70/0x7f
[  591.497288][ T9528] RIP: 0023:0xf7fca869
[  591.501340][ T9528] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  591.520943][ T9528] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  591.529374][ T9528] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  591.537359][ T9528] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  591.545364][ T9528] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  591.553341][ T9528] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  591.553351][ T9528] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  591.572077][ T9522] binder: 9521:9522 ioctl c0306201 0 returned -14
07:29:42 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r1 = geteuid()
r2 = request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0xfffffffffffffff9)
keyctl$get_persistent(0x16, r1, r2)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

07:29:42 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x2, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:42 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffff600000}, 0x0)

07:29:42 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  591.692045][ T9674] binder: 9671:9674 unknown command 26449
[  591.713915][ T9674] binder: 9671:9674 ioctl c0306201 200003c0 returned -22
07:29:42 executing program 4 (fault-call:1 fault-nth:20):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:29:42 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x3, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  591.872865][ T9911] FAULT_INJECTION: forcing a failure.
[  591.872865][ T9911] name failslab, interval 1, probability 0, space 0, times 0
[  591.911722][ T9911] CPU: 0 PID: 9911 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
07:29:42 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  591.919680][ T9911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  591.930029][ T9911] Call Trace:
[  591.933345][ T9911]  dump_stack+0x172/0x1f0
[  591.937700][ T9911]  should_fail.cold+0xa/0x15
[  591.942324][ T9911]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  591.948152][ T9911]  ? ___might_sleep+0x163/0x280
[  591.953051][ T9911]  __should_failslab+0x121/0x190
[  591.958013][ T9911]  should_failslab+0x9/0x14
[  591.962650][ T9911]  kmem_cache_alloc+0x2b2/0x6f0
[  591.962670][ T9911]  ? ceph_kvmalloc+0x41/0xb6
[  591.962693][ T9911]  ceph_msg_new2+0x3a/0x440
[  591.962719][ T9911]  ceph_msg_new+0x2f/0x40
[  591.976676][ T9911]  ceph_monc_init+0x5dc/0xc40
[  591.976711][ T9911]  ceph_create_client+0x278/0x370
[  591.976734][ T9911]  ceph_mount+0x471/0x1870
[  591.995162][ T9911]  ? vfs_parse_fs_param+0x510/0x510
[  592.000375][ T9911]  ? ceph_compare_super+0x510/0x510
[  592.005592][ T9911]  legacy_get_tree+0xf2/0x200
[  592.010294][ T9911]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  592.016555][ T9911]  vfs_get_tree+0x123/0x450
[  592.021081][ T9911]  do_mount+0x1436/0x2c40
[  592.025433][ T9911]  ? copy_mount_string+0x40/0x40
[  592.030380][ T9911]  ? _copy_from_user+0xdd/0x150
[  592.035253][ T9911]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  592.041507][ T9911]  ? memdup_user+0x65/0xb0
[  592.045936][ T9911]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  592.052191][ T9911]  ? copy_mount_options+0x280/0x3a0
[  592.057410][ T9911]  __ia32_compat_sys_mount+0x664/0x790
[  592.062883][ T9911]  ? trace_hardirqs_on+0x67/0x230
[  592.068023][ T9911]  do_fast_syscall_32+0x281/0xc98
07:29:43 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x5, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  592.073067][ T9911]  entry_SYSENTER_compat+0x70/0x7f
[  592.078180][ T9911] RIP: 0023:0xf7fca869
[  592.082268][ T9911] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  592.101934][ T9911] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  592.101950][ T9911] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
07:29:43 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket(0x11, 0x6, 0x8)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000100)={'icmp\x00'}, &(0x7f0000000140)=0x1e)
getpid()
fcntl$getownex(r1, 0x10, &(0x7f0000000240)={0x0, <r2=>0x0})
r3 = syz_open_procfs(r2, &(0x7f0000000440)='fdinfo/4\x00')
ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000000c0))
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000040)={{0xfffffffffffffffb, 0x8000}, {0x30, 0x80000000}, 0x1f, 0x1, 0x7})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  592.101959][ T9911] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  592.101968][ T9911] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  592.101977][ T9911] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  592.101985][ T9911] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  592.138527][T10124] binder: 10123:10124 unknown command 26449
[  592.176890][T10124] binder: 10123:10124 ioctl c0306201 200003c0 returned -22
[  592.184350][    C0] net_ratelimit: 10 callbacks suppressed
[  592.184358][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  592.184408][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  592.184500][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  592.184539][    C0] protocol 88fb is buggy, dev hsr_slave_1
07:29:43 executing program 4 (fault-call:1 fault-nth:21):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:29:43 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  592.235357][T10155] binder: 10141:10155 ioctl c0306201 0 returned -14
[  592.300867][T10235] FAULT_INJECTION: forcing a failure.
[  592.300867][T10235] name failslab, interval 1, probability 0, space 0, times 0
[  592.355982][T10235] CPU: 0 PID: 10235 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  592.364006][T10235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  592.374065][T10235] Call Trace:
[  592.377370][T10235]  dump_stack+0x172/0x1f0
[  592.381727][T10235]  should_fail.cold+0xa/0x15
[  592.386339][T10235]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  592.392159][T10235]  ? ___might_sleep+0x163/0x280
[  592.397029][T10235]  __should_failslab+0x121/0x190
[  592.401982][T10235]  should_failslab+0x9/0x14
[  592.406495][T10235]  __kmalloc+0x2dc/0x740
[  592.410758][T10235]  ? rcu_read_lock_sched_held+0x110/0x130
[  592.416492][T10235]  ? kmem_cache_alloc+0x32e/0x6f0
[  592.421526][T10235]  ? ceph_kvmalloc+0x41/0xb6
[  592.426147][T10235]  ceph_kvmalloc+0x41/0xb6
[  592.430571][T10235]  ceph_msg_new2+0x26c/0x440
[  592.435177][T10235]  ceph_msg_new+0x2f/0x40
[  592.439522][T10235]  ceph_monc_init+0x58c/0xc40
[  592.444219][T10235]  ceph_create_client+0x278/0x370
[  592.449254][T10235]  ceph_mount+0x471/0x1870
[  592.453682][T10235]  ? vfs_parse_fs_param+0x510/0x510
[  592.458901][T10235]  ? ceph_compare_super+0x510/0x510
[  592.464113][T10235]  legacy_get_tree+0xf2/0x200
[  592.468797][T10235]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  592.475045][T10235]  vfs_get_tree+0x123/0x450
[  592.479558][T10235]  do_mount+0x1436/0x2c40
[  592.483906][T10235]  ? copy_mount_string+0x40/0x40
[  592.488854][T10235]  ? _copy_from_user+0xdd/0x150
[  592.493719][T10235]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  592.499964][T10235]  ? memdup_user+0x65/0xb0
[  592.504388][T10235]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  592.510642][T10235]  ? copy_mount_options+0x280/0x3a0
[  592.515857][T10235]  __ia32_compat_sys_mount+0x664/0x790
[  592.521325][T10235]  ? trace_hardirqs_on+0x67/0x230
[  592.526360][T10235]  do_fast_syscall_32+0x281/0xc98
[  592.531391][T10235]  entry_SYSENTER_compat+0x70/0x7f
[  592.536488][T10235] RIP: 0023:0xf7fca869
[  592.540549][T10235] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  592.560145][T10235] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  592.568569][T10235] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  592.576536][T10235] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  592.584519][T10235] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  592.592578][T10235] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
07:29:43 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  592.600548][T10235] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  592.608875][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  592.614733][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  592.650583][T10477] binder: 10475:10477 ioctl c0306201 0 returned -14
07:29:43 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xffffffffffffff83)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
getdents64(r1, &(0x7f0000000040)=""/219, 0xdb)

07:29:43 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:29:43 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x6, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:43 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1508}, 0x0)

[  592.780732][T10547] binder: 10536:10547 unknown command 26449
[  592.809195][T10547] binder: 10536:10547 ioctl c0306201 200003c0 returned -22
07:29:43 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2140, 0x0)
io_setup(0x6, &(0x7f00000000c0)=<r2=>0x0)
io_getevents(r2, 0x5, 0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}], &(0x7f00000001c0)={0x77359400})
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, &(0x7f0000000040)={0x54, <r3=>0x0, 0x10001, 0x4})
ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40106435, &(0x7f0000000080)={0xfd, r3, 0x2, 0x2cbe46ab})

07:29:43 executing program 4 (fault-call:1 fault-nth:22):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  592.943578][T10690] binder: 10684:10690 ioctl c0306201 0 returned -14
[  592.966062][T10769] FAULT_INJECTION: forcing a failure.
[  592.966062][T10769] name failslab, interval 1, probability 0, space 0, times 0
[  593.006701][T10769] CPU: 0 PID: 10769 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  593.014738][T10769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  593.024793][T10769] Call Trace:
[  593.028095][T10769]  dump_stack+0x172/0x1f0
[  593.032425][T10769]  should_fail.cold+0xa/0x15
[  593.037005][T10769]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  593.042827][T10769]  ? ___might_sleep+0x163/0x280
[  593.047682][T10769]  __should_failslab+0x121/0x190
[  593.052656][T10769]  should_failslab+0x9/0x14
[  593.057144][T10769]  kmem_cache_alloc+0x2b2/0x6f0
[  593.061981][T10769]  ? ceph_kvmalloc+0x41/0xb6
[  593.063848][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  593.066570][T10769]  ceph_msg_new2+0x3a/0x440
[  593.066591][T10769]  ceph_msg_new+0x2f/0x40
[  593.066611][T10769]  ceph_monc_init+0x5dc/0xc40
[  593.066648][T10769]  ceph_create_client+0x278/0x370
[  593.072395][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  593.076850][T10769]  ceph_mount+0x471/0x1870
[  593.076869][T10769]  ? vfs_parse_fs_param+0x510/0x510
07:29:44 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x7, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  593.076887][T10769]  ? ceph_compare_super+0x510/0x510
[  593.076903][T10769]  legacy_get_tree+0xf2/0x200
[  593.076924][T10769]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  593.096608][T10769]  vfs_get_tree+0x123/0x450
[  593.106291][T10769]  do_mount+0x1436/0x2c40
[  593.106314][T10769]  ? copy_mount_string+0x40/0x40
[  593.106330][T10769]  ? _copy_from_user+0xdd/0x150
[  593.106349][T10769]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  593.106364][T10769]  ? memdup_user+0x65/0xb0
[  593.106381][T10769]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  593.106394][T10769]  ? copy_mount_options+0x280/0x3a0
[  593.106425][T10769]  __ia32_compat_sys_mount+0x664/0x790
[  593.168590][T10769]  ? trace_hardirqs_on+0x67/0x230
[  593.173662][T10769]  do_fast_syscall_32+0x281/0xc98
[  593.180003][T10769]  entry_SYSENTER_compat+0x70/0x7f
[  593.185118][T10769] RIP: 0023:0xf7fca869
[  593.189193][T10769] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  593.208820][T10769] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  593.210619][T10805] binder: 10803:10805 unknown command 26449
[  593.217240][T10769] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  593.217250][T10769] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  593.217259][T10769] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  593.217268][T10769] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
07:29:44 executing program 4 (fault-call:1 fault-nth:23):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:29:44 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  593.217277][T10769] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  593.283952][T10805] binder: 10803:10805 ioctl c0306201 200003c0 returned -22
[  593.338999][T10893] FAULT_INJECTION: forcing a failure.
[  593.338999][T10893] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  593.352265][T10893] CPU: 1 PID: 10893 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  593.360250][T10893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  593.370317][T10893] Call Trace:
[  593.373642][T10893]  dump_stack+0x172/0x1f0
[  593.378001][T10893]  should_fail.cold+0xa/0x15
[  593.382638][T10893]  ? do_mount+0x1436/0x2c40
[  593.387158][T10893]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  593.392979][T10893]  ? __lock_acquire+0x548/0x3fb0
[  593.397938][T10893]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  593.404193][T10893]  should_fail_alloc_page+0x50/0x60
[  593.409409][T10893]  __alloc_pages_nodemask+0x1a1/0x7e0
[  593.414799][T10893]  ? __alloc_pages_slowpath+0x28b0/0x28b0
[  593.420530][T10893]  ? find_held_lock+0x35/0x130
[  593.425318][T10893]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  593.431140][T10893]  cache_grow_begin+0x9c/0x860
[  593.435921][T10893]  ? ceph_msg_new2+0x3a/0x440
[  593.440612][T10893]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  593.446881][T10893]  kmem_cache_alloc+0x62d/0x6f0
[  593.451755][T10893]  ? ceph_kvmalloc+0x41/0xb6
[  593.456366][T10893]  ceph_msg_new2+0x3a/0x440
[  593.460890][T10893]  ceph_msg_new+0x2f/0x40
[  593.465271][T10893]  ceph_monc_init+0x5dc/0xc40
[  593.469971][T10893]  ceph_create_client+0x278/0x370
[  593.475011][T10893]  ceph_mount+0x471/0x1870
[  593.479469][T10893]  ? vfs_parse_fs_param+0x510/0x510
[  593.484683][T10893]  ? ceph_compare_super+0x510/0x510
[  593.489895][T10893]  legacy_get_tree+0xf2/0x200
[  593.494581][T10893]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  593.500838][T10893]  vfs_get_tree+0x123/0x450
[  593.505451][T10893]  do_mount+0x1436/0x2c40
[  593.509805][T10893]  ? copy_mount_string+0x40/0x40
[  593.514773][T10893]  ? _copy_from_user+0xdd/0x150
[  593.519673][T10893]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  593.525924][T10893]  ? memdup_user+0x65/0xb0
[  593.530354][T10893]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  593.536614][T10893]  ? copy_mount_options+0x280/0x3a0
[  593.541847][T10893]  __ia32_compat_sys_mount+0x664/0x790
[  593.547337][T10893]  ? trace_hardirqs_on+0x67/0x230
[  593.552385][T10893]  do_fast_syscall_32+0x281/0xc98
[  593.557469][T10893]  entry_SYSENTER_compat+0x70/0x7f
[  593.562578][T10893] RIP: 0023:0xf7fca869
[  593.566658][T10893] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
07:29:44 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x12, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:44 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  593.586262][T10893] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  593.594698][T10893] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  593.602676][T10893] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  593.610660][T10893] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  593.618668][T10893] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  593.626652][T10893] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  593.633995][T11118] binder: 11101:11118 unknown command 26449
07:29:44 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3508}, 0x0)

[  593.647101][T11118] binder: 11101:11118 ioctl c0306201 200003c0 returned -22
07:29:44 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40200, 0x0)
ioctl$CAPI_SET_FLAGS(r1, 0x80044324, &(0x7f0000000040))

07:29:44 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, r1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000040)={0xcd2, 0x5, 0x50bd, 0x20, 0xfe, 0x3, 0x8})
syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00')

07:29:44 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4e, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:44 executing program 4 (fault-call:1 fault-nth:24):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:29:44 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  593.931194][T11353] binder: 11350:11353 unknown command 26449
[  593.963145][T11353] binder: 11350:11353 ioctl c0306201 200003c0 returned -22
[  593.977542][T11386] FAULT_INJECTION: forcing a failure.
[  593.977542][T11386] name failslab, interval 1, probability 0, space 0, times 0
[  594.008158][T11386] CPU: 1 PID: 11386 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  594.016221][T11386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  594.026303][T11386] Call Trace:
[  594.029648][T11386]  dump_stack+0x172/0x1f0
[  594.034005][T11386]  should_fail.cold+0xa/0x15
[  594.038639][T11386]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  594.044477][T11386]  ? ___might_sleep+0x163/0x280
[  594.049375][T11386]  __should_failslab+0x121/0x190
[  594.054336][T11386]  should_failslab+0x9/0x14
[  594.058861][T11386]  __kmalloc+0x2dc/0x740
[  594.063121][T11386]  ? rcu_read_lock_sched_held+0x110/0x130
[  594.068878][T11386]  ? kmem_cache_alloc+0x32e/0x6f0
[  594.073946][T11386]  ? ceph_kvmalloc+0x41/0xb6
[  594.078553][T11386]  ceph_kvmalloc+0x41/0xb6
[  594.082987][T11386]  ceph_msg_new2+0x26c/0x440
[  594.087595][T11386]  ceph_msg_new+0x2f/0x40
[  594.091957][T11386]  ceph_monc_init+0x625/0xc40
[  594.096666][T11386]  ceph_create_client+0x278/0x370
[  594.101713][T11386]  ceph_mount+0x471/0x1870
[  594.106185][T11386]  ? vfs_parse_fs_param+0x510/0x510
[  594.111410][T11386]  ? ceph_compare_super+0x510/0x510
[  594.116634][T11386]  legacy_get_tree+0xf2/0x200
[  594.116655][T11386]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  594.116673][T11386]  vfs_get_tree+0x123/0x450
[  594.116691][T11386]  do_mount+0x1436/0x2c40
[  594.116714][T11386]  ? copy_mount_string+0x40/0x40
[  594.127655][T11386]  ? _copy_from_user+0xdd/0x150
[  594.127675][T11386]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  594.127690][T11386]  ? memdup_user+0x65/0xb0
[  594.127705][T11386]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  594.127718][T11386]  ? copy_mount_options+0x280/0x3a0
[  594.127742][T11386]  __ia32_compat_sys_mount+0x664/0x790
[  594.127763][T11386]  ? trace_hardirqs_on+0x67/0x230
07:29:45 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x3f00, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  594.179005][T11386]  do_fast_syscall_32+0x281/0xc98
[  594.180171][T11602] binder: 11598:11602 unknown command 26449
[  594.184043][T11386]  entry_SYSENTER_compat+0x70/0x7f
[  594.184057][T11386] RIP: 0023:0xf7fca869
[  594.184073][T11386] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  594.184082][T11386] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  594.184096][T11386] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  594.184105][T11386] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  594.184120][T11386] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  594.195835][T11602] binder: 11598:11602 ioctl c0306201 200003c0 returned -22
[  594.199200][T11386] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  594.199216][T11386] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  594.267213][    C0] protocol 88fb is buggy, dev hsr_slave_0
07:29:45 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0)
clone(0x10000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:29:45 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  594.267268][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  594.372679][T11669] binder: 11667:11669 ioctl c0306201 0 returned -14
07:29:45 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4e00, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:45 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

[  594.503364][T11920] binder: 11918:11920 unknown command 26449
[  594.510608][T11920] binder: 11918:11920 ioctl c0306201 200003c0 returned -22
07:29:45 executing program 4 (fault-call:1 fault-nth:25):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:29:45 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x60ff}, 0x0)

07:29:45 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x80)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8906, 0xfb)

07:29:45 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102002000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x4000, 0x80)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000080))

07:29:45 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  594.665249][T12065] FAULT_INJECTION: forcing a failure.
[  594.665249][T12065] name failslab, interval 1, probability 0, space 0, times 0
[  594.776302][T12115] binder: 12114:12115 unknown command 0
[  594.804556][T12065] CPU: 0 PID: 12065 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  594.812627][T12065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  594.813926][T12115] binder: 12114:12115 ioctl c0306201 200003c0 returned -22
[  594.822684][T12065] Call Trace:
[  594.822723][T12065]  dump_stack+0x172/0x1f0
[  594.822748][T12065]  should_fail.cold+0xa/0x15
[  594.822771][T12065]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  594.822797][T12065]  ? ___might_sleep+0x163/0x280
[  594.822822][T12065]  __should_failslab+0x121/0x190
[  594.858992][T12065]  should_failslab+0x9/0x14
[  594.863496][T12065]  __kmalloc+0x2dc/0x740
[  594.867754][T12065]  ? rcu_read_lock_sched_held+0x110/0x130
[  594.873489][T12065]  ? kmem_cache_alloc+0x32e/0x6f0
[  594.878532][T12065]  ? ceph_kvmalloc+0x41/0xb6
[  594.883143][T12065]  ceph_kvmalloc+0x41/0xb6
[  594.887573][T12065]  ceph_msg_new2+0x26c/0x440
[  594.892206][T12065]  ceph_msg_new+0x2f/0x40
[  594.896551][T12065]  ceph_monc_init+0x625/0xc40
[  594.901246][T12065]  ceph_create_client+0x278/0x370
[  594.906290][T12065]  ceph_mount+0x471/0x1870
[  594.910735][T12065]  ? vfs_parse_fs_param+0x510/0x510
[  594.915962][T12065]  ? ceph_compare_super+0x510/0x510
[  594.921180][T12065]  legacy_get_tree+0xf2/0x200
[  594.925877][T12065]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  594.932956][T12065]  vfs_get_tree+0x123/0x450
[  594.937483][T12065]  do_mount+0x1436/0x2c40
[  594.941836][T12065]  ? copy_mount_string+0x40/0x40
[  594.946782][T12065]  ? _copy_from_user+0xdd/0x150
[  594.951660][T12065]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  594.957953][T12065]  ? memdup_user+0x65/0xb0
[  594.962385][T12065]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  594.968646][T12065]  ? copy_mount_options+0x280/0x3a0
[  594.973864][T12065]  __ia32_compat_sys_mount+0x664/0x790
[  594.979338][T12065]  ? trace_hardirqs_on+0x67/0x230
[  594.984377][T12065]  do_fast_syscall_32+0x281/0xc98
[  594.989422][T12065]  entry_SYSENTER_compat+0x70/0x7f
[  594.994546][T12065] RIP: 0023:0xf7fca869
[  594.998618][T12065] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  595.018265][T12065] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
07:29:45 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
fsetxattr$security_smack_transmute(r0, &(0x7f0000000480)='security.SMACK64TRANSMUTE\x00', &(0x7f00000004c0)='TRUE', 0x4, 0x3)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=<r2=>0x0)
perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x7, 0x8, 0x5, 0x100000000, 0x0, 0x2, 0x80000, 0x1, 0xbb, 0x0, 0x0, 0x2, 0x7fff, 0x7, 0x8, 0x0, 0x400, 0x0, 0x5af, 0x5, 0x1, 0x7, 0x8000, 0x8000, 0x7fff, 0x4, 0x10001, 0x1, 0x6, 0x1, 0x0, 0x6, 0x100000001, 0x5, 0x2, 0x2, 0x0, 0x9, 0x4, @perf_bp, 0x802, 0x3, 0x7, 0x2, 0x80, 0x5, 0x1}, r2, 0x1, 0xffffffffffffff9c, 0x2)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000380)='/dev/snd/pcmC#D#p\x00', 0x1f, 0xa2000)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f00000003c0)=0x5, 0x1)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x10000, 0x0)
getresuid(&(0x7f0000000180), &(0x7f00000001c0)=<r5=>0x0, &(0x7f0000000200))
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000280)=0xc)
write$P9_RGETATTR(r4, &(0x7f00000002c0)={0xa0, 0x19, 0x1, {0x20, {0x0, 0x2, 0x5}, 0x1, r5, r6, 0x1, 0x69, 0x80, 0x100000000, 0x0, 0x81, 0x7266, 0x6, 0x6000000000, 0x6d9d, 0x6, 0x3ff, 0x3, 0x1, 0x8000}}, 0xa0)
ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000140)=0x2)

[  595.026715][T12065] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  595.034721][T12065] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  595.042719][T12065] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  595.050745][T12065] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  595.058744][T12065] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:29:46 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}}}, 0x0)

07:29:46 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  595.154436][T12331] binder: 12239:12331 ioctl c0306201 0 returned -14
[  595.254454][T12431] binder: 12426:12431 unknown command 0
[  595.268566][T12431] binder: 12426:12431 ioctl c0306201 200003c0 returned -22
07:29:46 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
signalfd4(r0, &(0x7f0000000000)={0x3}, 0x8, 0x800)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:29:46 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:46 executing program 4 (fault-call:1 fault-nth:26):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  595.390566][T12675] binder: 12661:12675 ioctl c0306201 0 returned -14
07:29:46 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x1508}}, 0x0)

[  595.500168][T12788] FAULT_INJECTION: forcing a failure.
[  595.500168][T12788] name failslab, interval 1, probability 0, space 0, times 0
07:29:46 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = getpgrp(0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/uts\x00')
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  595.568464][T12788] CPU: 0 PID: 12788 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  595.576533][T12788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  595.586785][T12788] Call Trace:
[  595.590101][T12788]  dump_stack+0x172/0x1f0
[  595.594469][T12788]  should_fail.cold+0xa/0x15
[  595.599616][T12788]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  595.599653][T12788]  ? ___might_sleep+0x163/0x280
[  595.599678][T12788]  __should_failslab+0x121/0x190
[  595.615295][T12788]  should_failslab+0x9/0x14
[  595.615316][T12788]  kmem_cache_alloc_node_trace+0x270/0x720
[  595.615345][T12788]  ? mempool_free+0x380/0x380
[  595.615361][T12788]  mempool_create_node+0xa3/0x140
[  595.615375][T12788]  ? mempool_alloc+0x380/0x380
[  595.615392][T12788]  ? mempool_alloc+0x380/0x380
[  595.615406][T12788]  ? mempool_free+0x380/0x380
[  595.615421][T12788]  mempool_create+0x3a/0x50
[  595.615439][T12788]  ceph_osdc_init+0x45d/0x9a0
[  595.615462][T12788]  ceph_create_client+0x29c/0x370
[  595.664410][T12788]  ceph_mount+0x471/0x1870
[  595.668851][T12788]  ? vfs_parse_fs_param+0x510/0x510
[  595.674068][T12788]  ? ceph_compare_super+0x510/0x510
[  595.674353][T12926] binder: 12911:12926 ioctl c0306201 0 returned -14
[  595.679279][T12788]  legacy_get_tree+0xf2/0x200
[  595.679297][T12788]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  595.679315][T12788]  vfs_get_tree+0x123/0x450
[  595.679333][T12788]  do_mount+0x1436/0x2c40
[  595.679357][T12788]  ? copy_mount_string+0x40/0x40
[  595.711899][T12788]  ? _copy_from_user+0xdd/0x150
[  595.716772][T12788]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  595.723037][T12788]  ? memdup_user+0x65/0xb0
[  595.727474][T12788]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  595.733749][T12788]  ? copy_mount_options+0x280/0x3a0
[  595.738980][T12788]  __ia32_compat_sys_mount+0x664/0x790
[  595.744558][T12788]  ? trace_hardirqs_on+0x67/0x230
[  595.749611][T12788]  do_fast_syscall_32+0x281/0xc98
[  595.754684][T12788]  entry_SYSENTER_compat+0x70/0x7f
[  595.759935][T12788] RIP: 0023:0xf7fca869
[  595.764018][T12788] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  595.783670][T12788] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  595.792199][T12788] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  595.800215][T12788] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  595.808301][T12788] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
07:29:46 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x101208}, 0x0)

[  595.816337][T12788] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  595.824330][T12788] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:29:46 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x4, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x4, 0x2)
getsockopt$inet6_int(r1, 0x29, 0xc9, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0xfffffffffffffffd)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x4, 0x0, "c74ea9f95141ababd1de000bbe8d194c0ebb867848db0e2198858861c314a255fe25b65e2b180548ab4a0b1af3e1ab8f11f4bb70c82220e480f34c2fc7d5823256e70c2a85b2fef0e211877199933f2c"}, 0xd8)
ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000040)={0x80000000, "0777dde1c9a7d741887ac98f8a081741287846d7fbb4abe7757d13fea15373aa", 0x2, 0x1})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

07:29:46 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:46 executing program 4 (fault-call:1 fault-nth:27):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:29:46 executing program 0:
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x40, 0x420600)
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, &(0x7f0000000140)={0x8d, <r2=>0x0, 0x10001, 0x800})
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000380)={0x20000, <r3=>r2, 0x10000, 0xfffffffffffffeff})
ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40086436, &(0x7f0000000280)={r3, 0x1})
r4 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='ip6gre0\x00', 0x10)
ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000000c0)={'gretap0\x00', {0x2, 0x4e22, @remote}})
getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="e7546e617400000000000000000000000000000000000000000000200000000000006400000016c08eb87cf305ce8a6374be8a59a7865e448ade49a1cc5c1056fe3797859b6f32ff2a4ba0f9302a8c1aa0ad828197a2893a1ddce0eff970696a6cee59a781fc82451186957d891fb210f21dd4c566072debc713c227a3e5e37a94ebd3c2d3ae02bb3a00000000000000"], &(0x7f00000001c0)=0x88)

07:29:46 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x3508}}, 0x0)

[  595.970281][T13141] FAULT_INJECTION: forcing a failure.
[  595.970281][T13141] name failslab, interval 1, probability 0, space 0, times 0
[  596.064111][T13141] CPU: 1 PID: 13141 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  596.072257][T13141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  596.082358][T13141] Call Trace:
[  596.085685][T13141]  dump_stack+0x172/0x1f0
[  596.090049][T13141]  should_fail.cold+0xa/0x15
[  596.094681][T13141]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  596.100516][T13141]  ? ___might_sleep+0x163/0x280
[  596.105399][T13141]  __should_failslab+0x121/0x190
[  596.110603][T13141]  should_failslab+0x9/0x14
[  596.115134][T13141]  kmem_cache_alloc_trace+0x2d1/0x760
[  596.120695][T13141]  ? lockdep_init_map+0x1be/0x6d0
[  596.125743][T13141]  ceph_osdmap_alloc+0x40/0x1c0
[  596.126077][T13202] binder: 13183:13202 ioctl c0306201 0 returned -14
[  596.130615][T13141]  ceph_osdc_init+0x411/0x9a0
[  596.142018][T13141]  ceph_create_client+0x29c/0x370
[  596.147417][T13141]  ceph_mount+0x471/0x1870
[  596.151891][T13141]  ? vfs_parse_fs_param+0x510/0x510
[  596.157139][T13141]  ? ceph_compare_super+0x510/0x510
[  596.162361][T13141]  legacy_get_tree+0xf2/0x200
[  596.167057][T13141]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  596.173580][T13141]  vfs_get_tree+0x123/0x450
[  596.178118][T13141]  do_mount+0x1436/0x2c40
[  596.182470][T13141]  ? copy_mount_string+0x40/0x40
[  596.187421][T13141]  ? _copy_from_user+0xdd/0x150
[  596.192311][T13141]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  596.198607][T13141]  ? memdup_user+0x65/0xb0
[  596.203073][T13141]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  596.209327][T13141]  ? copy_mount_options+0x280/0x3a0
[  596.214556][T13141]  __ia32_compat_sys_mount+0x664/0x790
[  596.220577][T13141]  ? trace_hardirqs_on+0x67/0x230
[  596.225651][T13141]  do_fast_syscall_32+0x281/0xc98
[  596.225675][T13141]  entry_SYSENTER_compat+0x70/0x7f
[  596.225688][T13141] RIP: 0023:0xf7fca869
[  596.225702][T13141] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
07:29:47 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:47 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40, 0x0)
getpeername$unix(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x6e)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

[  596.225710][T13141] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  596.225726][T13141] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  596.225742][T13141] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  596.284404][T13141] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  596.284414][T13141] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  596.284422][T13141] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:29:47 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:29:47 executing program 4 (fault-call:1 fault-nth:28):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  596.435600][T13498] binder: 13489:13498 ioctl c0306201 0 returned -14
[  596.469560][T13551] FAULT_INJECTION: forcing a failure.
[  596.469560][T13551] name failslab, interval 1, probability 0, space 0, times 0
[  596.493887][T13551] CPU: 0 PID: 13551 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  596.501913][T13551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  596.511978][T13551] Call Trace:
[  596.515290][T13551]  dump_stack+0x172/0x1f0
[  596.519635][T13551]  should_fail.cold+0xa/0x15
[  596.524251][T13551]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  596.530071][T13551]  ? ___might_sleep+0x163/0x280
[  596.535022][T13551]  __should_failslab+0x121/0x190
[  596.539973][T13551]  should_failslab+0x9/0x14
[  596.544487][T13551]  kmem_cache_alloc+0x2b2/0x6f0
[  596.549352][T13551]  ? __kasan_kmalloc.constprop.0+0xcf/0xe0
[  596.555179][T13551]  ? mempool_free+0x380/0x380
[  596.559897][T13551]  mempool_alloc_slab+0x47/0x60
[  596.564766][T13551]  ? mempool_alloc+0x380/0x380
[  596.569547][T13551]  mempool_init_node+0x2e1/0x560
[  596.574511][T13551]  ? mempool_free+0x380/0x380
[  596.579227][T13551]  mempool_create_node+0xca/0x140
[  596.584269][T13551]  ? mempool_alloc+0x380/0x380
[  596.589053][T13551]  ? mempool_alloc+0x380/0x380
07:29:47 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x161200, 0x0)
ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000040)=0x4)

[  596.593831][T13551]  ? mempool_free+0x380/0x380
[  596.598543][T13551]  mempool_create+0x3a/0x50
[  596.603150][T13551]  ceph_osdc_init+0x45d/0x9a0
[  596.607851][T13551]  ceph_create_client+0x29c/0x370
[  596.612892][T13551]  ceph_mount+0x471/0x1870
[  596.617346][T13551]  ? vfs_parse_fs_param+0x510/0x510
[  596.622576][T13551]  ? ceph_compare_super+0x510/0x510
[  596.627804][T13551]  legacy_get_tree+0xf2/0x200
[  596.632512][T13551]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  596.638769][T13551]  vfs_get_tree+0x123/0x450
[  596.643291][T13551]  do_mount+0x1436/0x2c40
[  596.647661][T13551]  ? copy_mount_string+0x40/0x40
[  596.652611][T13551]  ? _copy_from_user+0xdd/0x150
[  596.657491][T13551]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  596.663761][T13551]  ? memdup_user+0x65/0xb0
[  596.668309][T13551]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  596.674561][T13551]  ? copy_mount_options+0x280/0x3a0
[  596.674584][T13551]  __ia32_compat_sys_mount+0x664/0x790
[  596.674600][T13551]  ? trace_hardirqs_on+0x67/0x230
[  596.674633][T13551]  do_fast_syscall_32+0x281/0xc98
[  596.674656][T13551]  entry_SYSENTER_compat+0x70/0x7f
[  596.674668][T13551] RIP: 0023:0xf7fca869
[  596.674684][T13551] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  596.674692][T13551] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  596.685372][T13551] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
07:29:47 executing program 4 (fault-call:1 fault-nth:29):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  596.685382][T13551] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  596.685390][T13551] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  596.685398][T13551] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  596.685406][T13551] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  596.819868][T13702] FAULT_INJECTION: forcing a failure.
[  596.819868][T13702] name failslab, interval 1, probability 0, space 0, times 0
[  596.840338][T13702] CPU: 1 PID: 13702 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  596.848387][T13702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  596.858482][T13702] Call Trace:
[  596.861803][T13702]  dump_stack+0x172/0x1f0
[  596.866172][T13702]  should_fail.cold+0xa/0x15
[  596.870806][T13702]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  596.876677][T13702]  ? ___might_sleep+0x163/0x280
[  596.881550][T13702]  __should_failslab+0x121/0x190
[  596.886509][T13702]  should_failslab+0x9/0x14
[  596.891031][T13702]  kmem_cache_alloc_trace+0x2d1/0x760
[  596.896856][T13702]  ? lockdep_init_map+0x1be/0x6d0
[  596.902026][T13702]  ceph_osdmap_alloc+0x40/0x1c0
[  596.906895][T13702]  ceph_osdc_init+0x411/0x9a0
[  596.911605][T13702]  ceph_create_client+0x29c/0x370
[  596.916673][T13702]  ceph_mount+0x471/0x1870
[  596.921124][T13702]  ? vfs_parse_fs_param+0x510/0x510
[  596.926370][T13702]  ? ceph_compare_super+0x510/0x510
[  596.932640][T13702]  legacy_get_tree+0xf2/0x200
[  596.937386][T13702]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  596.943659][T13702]  vfs_get_tree+0x123/0x450
[  596.948186][T13702]  do_mount+0x1436/0x2c40
[  596.952549][T13702]  ? copy_mount_string+0x40/0x40
[  596.957536][T13702]  ? _copy_from_user+0xdd/0x150
[  596.962416][T13702]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  596.968881][T13702]  ? memdup_user+0x65/0xb0
[  596.973319][T13702]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  596.979584][T13702]  ? copy_mount_options+0x280/0x3a0
[  596.984838][T13702]  __ia32_compat_sys_mount+0x664/0x790
[  596.990336][T13702]  ? trace_hardirqs_on+0x67/0x230
[  596.995390][T13702]  do_fast_syscall_32+0x281/0xc98
[  597.000445][T13702]  entry_SYSENTER_compat+0x70/0x7f
[  597.005571][T13702] RIP: 0023:0xf7fca869
[  597.009902][T13702] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  597.029524][T13702] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  597.037951][T13702] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  597.045974][T13702] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  597.053969][T13702] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  597.061962][T13702] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
07:29:47 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x50c609}, 0x0)

07:29:47 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x5408}}, 0x0)

07:29:47 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:47 executing program 2:
utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x3, 0x5})
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xd1)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)

07:29:48 executing program 0:
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2002, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000040))
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

[  597.069999][T13702] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:29:48 executing program 4 (fault-call:1 fault-nth:30):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  597.192991][T13957] binder: 13954:13957 ioctl c0306201 0 returned -14
[  597.223850][    C1] net_ratelimit: 14 callbacks suppressed
[  597.223858][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  597.235426][    C1] protocol 88fb is buggy, dev hsr_slave_1
07:29:48 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x60ff}}, 0x0)

[  597.241992][T13999] FAULT_INJECTION: forcing a failure.
[  597.241992][T13999] name failslab, interval 1, probability 0, space 0, times 0
[  597.256175][T13999] CPU: 1 PID: 13999 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  597.264546][T13999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  597.274603][T13999] Call Trace:
[  597.277955][T13999]  dump_stack+0x172/0x1f0
[  597.282352][T13999]  should_fail.cold+0xa/0x15
[  597.286964][T13999]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  597.292817][T13999]  ? ___might_sleep+0x163/0x280
[  597.297719][T13999]  __should_failslab+0x121/0x190
[  597.302679][T13999]  should_failslab+0x9/0x14
[  597.307225][T13999]  kmem_cache_alloc+0x2b2/0x6f0
[  597.307244][T13999]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  597.307261][T13999]  ? __phys_addr+0xa4/0x120
[  597.307279][T13999]  ? mempool_create_node+0xca/0x140
[  597.307301][T13999]  mempool_alloc_slab+0x47/0x60
[  597.318382][T13999]  ? mempool_alloc+0x380/0x380
[  597.318399][T13999]  mempool_init_node+0x2e1/0x560
[  597.318425][T13999]  ? mempool_free+0x380/0x380
[  597.318442][T13999]  mempool_create_node+0xca/0x140
[  597.318458][T13999]  ? mempool_alloc+0x380/0x380
[  597.318484][T13999]  ? mempool_alloc+0x380/0x380
[  597.362047][T13999]  ? mempool_free+0x380/0x380
[  597.366768][T13999]  mempool_create+0x3a/0x50
[  597.371289][T13999]  ceph_osdc_init+0x45d/0x9a0
[  597.375992][T13999]  ceph_create_client+0x29c/0x370
[  597.381032][T13999]  ceph_mount+0x471/0x1870
[  597.385473][T13999]  ? vfs_parse_fs_param+0x510/0x510
[  597.390776][T13999]  ? ceph_compare_super+0x510/0x510
[  597.395985][T13999]  legacy_get_tree+0xf2/0x200
[  597.400674][T13999]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  597.406955][T13999]  vfs_get_tree+0x123/0x450
[  597.411478][T13999]  do_mount+0x1436/0x2c40
[  597.415851][T13999]  ? copy_mount_string+0x40/0x40
[  597.420805][T13999]  ? _copy_from_user+0xdd/0x150
[  597.425863][T13999]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  597.432133][T13999]  ? memdup_user+0x65/0xb0
[  597.436608][T13999]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
07:29:48 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x48, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  597.442887][T13999]  ? copy_mount_options+0x280/0x3a0
[  597.448121][T13999]  __ia32_compat_sys_mount+0x664/0x790
[  597.453632][T13999]  ? trace_hardirqs_on+0x67/0x230
[  597.458693][T13999]  do_fast_syscall_32+0x281/0xc98
[  597.463745][T13999]  entry_SYSENTER_compat+0x70/0x7f
[  597.468877][T13999] RIP: 0023:0xf7fca869
[  597.472973][T13999] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
07:29:48 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x4c, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  597.492941][T13999] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  597.501477][T13999] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  597.509455][T13999] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  597.509472][T13999] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  597.525428][T13999] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  597.533407][T13999] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:29:48 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x101208}}, 0x0)

07:29:48 executing program 4 (fault-call:1 fault-nth:31):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  597.667198][T14340] FAULT_INJECTION: forcing a failure.
[  597.667198][T14340] name failslab, interval 1, probability 0, space 0, times 0
[  597.703726][T14340] CPU: 0 PID: 14340 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  597.711761][T14340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  597.721931][T14340] Call Trace:
[  597.725244][T14340]  dump_stack+0x172/0x1f0
[  597.729593][T14340]  should_fail.cold+0xa/0x15
[  597.734211][T14340]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  597.740073][T14340]  ? ___might_sleep+0x163/0x280
[  597.744942][T14340]  __should_failslab+0x121/0x190
[  597.749901][T14340]  should_failslab+0x9/0x14
[  597.754428][T14340]  kmem_cache_alloc+0x2b2/0x6f0
[  597.759408][T14340]  ? __kasan_kmalloc.constprop.0+0xcf/0xe0
[  597.765239][T14340]  ? mempool_free+0x380/0x380
[  597.769931][T14340]  mempool_alloc_slab+0x47/0x60
[  597.774805][T14340]  ? mempool_alloc+0x380/0x380
[  597.779607][T14340]  mempool_init_node+0x2e1/0x560
[  597.784577][T14340]  ? mempool_free+0x380/0x380
[  597.789278][T14340]  mempool_create_node+0xca/0x140
[  597.794314][T14340]  ? mempool_alloc+0x380/0x380
[  597.799094][T14340]  ? mempool_alloc+0x380/0x380
[  597.803874][T14340]  ? mempool_free+0x380/0x380
[  597.808725][T14340]  mempool_create+0x3a/0x50
[  597.813234][T14340]  ceph_osdc_init+0x45d/0x9a0
[  597.818077][T14340]  ceph_create_client+0x29c/0x370
[  597.823109][T14340]  ceph_mount+0x471/0x1870
[  597.827531][T14340]  ? vfs_parse_fs_param+0x510/0x510
[  597.832738][T14340]  ? ceph_compare_super+0x510/0x510
[  597.837950][T14340]  legacy_get_tree+0xf2/0x200
[  597.842617][T14340]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  597.848890][T14340]  vfs_get_tree+0x123/0x450
[  597.853440][T14340]  do_mount+0x1436/0x2c40
[  597.857763][T14340]  ? copy_mount_string+0x40/0x40
[  597.862798][T14340]  ? _copy_from_user+0xdd/0x150
[  597.863834][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  597.867662][T14340]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  597.867680][T14340]  ? memdup_user+0x65/0xb0
[  597.867700][T14340]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  597.873466][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  597.879662][T14340]  ? copy_mount_options+0x280/0x3a0
[  597.879685][T14340]  __ia32_compat_sys_mount+0x664/0x790
[  597.879701][T14340]  ? trace_hardirqs_on+0x67/0x230
[  597.879729][T14340]  do_fast_syscall_32+0x281/0xc98
[  597.879751][T14340]  entry_SYSENTER_compat+0x70/0x7f
[  597.921927][T14340] RIP: 0023:0xf7fca869
[  597.925987][T14340] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  597.945842][T14340] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  597.954360][T14340] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
07:29:48 executing program 0:
r0 = syz_open_dev$binder(0x0, 0x0, 0x2)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xfff, 0x80)
setsockopt$sock_int(r1, 0x1, 0x3f, &(0x7f0000000040)=0x8, 0x4)

[  597.962323][T14340] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  597.970289][T14340] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  597.978344][T14340] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  597.986328][T14340] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  597.994756][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  598.000537][    C0] protocol 88fb is buggy, dev hsr_slave_1
07:29:49 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x70c809}, 0x0)

07:29:49 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x60, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:49 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x800408}}, 0x0)

07:29:49 executing program 4 (fault-call:1 fault-nth:32):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:29:49 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x200000, 0x0)
ioctl$KDGETLED(r1, 0x4b31, &(0x7f00000000c0))
r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x800)
ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000040))

[  598.243134][T14684] FAULT_INJECTION: forcing a failure.
[  598.243134][T14684] name failslab, interval 1, probability 0, space 0, times 0
[  598.282188][T14684] CPU: 1 PID: 14684 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  598.290235][T14684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  598.300302][T14684] Call Trace:
[  598.300331][T14684]  dump_stack+0x172/0x1f0
[  598.300358][T14684]  should_fail.cold+0xa/0x15
[  598.300381][T14684]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  598.300403][T14684]  ? ___might_sleep+0x163/0x280
[  598.300425][T14684]  __should_failslab+0x121/0x190
[  598.300448][T14684]  should_failslab+0x9/0x14
[  598.300471][T14684]  kmem_cache_alloc+0x2b2/0x6f0
07:29:49 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x1118000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0)
ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000040))

[  598.312693][T14684]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  598.312711][T14684]  ? __phys_addr+0xa4/0x120
[  598.312730][T14684]  ? mempool_create_node+0xca/0x140
[  598.312753][T14684]  mempool_alloc_slab+0x47/0x60
[  598.312769][T14684]  ? mempool_alloc+0x380/0x380
[  598.312790][T14684]  mempool_init_node+0x2e1/0x560
[  598.368737][T14684]  ? mempool_free+0x380/0x380
[  598.373429][T14684]  mempool_create_node+0xca/0x140
[  598.378482][T14684]  ? mempool_alloc+0x380/0x380
[  598.383263][T14684]  ? mempool_alloc+0x380/0x380
[  598.388065][T14684]  ? mempool_free+0x380/0x380
[  598.392757][T14684]  mempool_create+0x3a/0x50
[  598.397277][T14684]  ceph_osdc_init+0x45d/0x9a0
[  598.401983][T14684]  ceph_create_client+0x29c/0x370
[  598.407024][T14684]  ceph_mount+0x471/0x1870
[  598.411470][T14684]  ? vfs_parse_fs_param+0x510/0x510
[  598.412998][T14830] binder: 14765:14830 ioctl c0306201 0 returned -14
[  598.416689][T14684]  ? ceph_compare_super+0x510/0x510
[  598.416707][T14684]  legacy_get_tree+0xf2/0x200
[  598.416724][T14684]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  598.416743][T14684]  vfs_get_tree+0x123/0x450
07:29:49 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x901208}}, 0x0)

[  598.416761][T14684]  do_mount+0x1436/0x2c40
[  598.416784][T14684]  ? copy_mount_string+0x40/0x40
[  598.416808][T14684]  ? _copy_from_user+0xdd/0x150
[  598.458156][T14684]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  598.464410][T14684]  ? memdup_user+0x65/0xb0
[  598.468844][T14684]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  598.475100][T14684]  ? copy_mount_options+0x280/0x3a0
[  598.480318][T14684]  __ia32_compat_sys_mount+0x664/0x790
[  598.485791][T14684]  ? trace_hardirqs_on+0x67/0x230
[  598.490851][T14684]  do_fast_syscall_32+0x281/0xc98
[  598.495897][T14684]  entry_SYSENTER_compat+0x70/0x7f
[  598.501032][T14684] RIP: 0023:0xf7fca869
[  598.505135][T14684] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  598.524756][T14684] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  598.533270][T14684] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  598.541256][T14684] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  598.549251][T14684] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  598.557243][T14684] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  598.565244][T14684] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  598.574118][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  598.579950][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  598.585815][    C0] protocol 88fb is buggy, dev hsr_slave_0
07:29:49 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x68, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  598.591593][    C0] protocol 88fb is buggy, dev hsr_slave_1
07:29:49 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x800, 0x0)
ioctl$TIOCSBRK(r1, 0x5427)

07:29:49 executing program 4 (fault-call:1 fault-nth:33):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  598.746334][T15105] FAULT_INJECTION: forcing a failure.
[  598.746334][T15105] name failslab, interval 1, probability 0, space 0, times 0
[  598.747889][T15099] binder: 15095:15099 ioctl c0306201 0 returned -14
[  598.773994][T15105] CPU: 1 PID: 15105 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  598.782014][T15105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
07:29:49 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0xe05108}}, 0x0)

[  598.792084][T15105] Call Trace:
[  598.799645][T15105]  dump_stack+0x172/0x1f0
[  598.804004][T15105]  should_fail.cold+0xa/0x15
[  598.808643][T15105]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  598.814495][T15105]  ? ___might_sleep+0x163/0x280
[  598.819369][T15105]  __should_failslab+0x121/0x190
[  598.825348][T15105]  should_failslab+0x9/0x14
[  598.829868][T15105]  kmem_cache_alloc+0x2b2/0x6f0
[  598.834734][T15105]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  598.841005][T15105]  ? __phys_addr+0xa4/0x120
[  598.845531][T15105]  ? mempool_create_node+0xca/0x140
[  598.850772][T15105]  mempool_alloc_slab+0x47/0x60
[  598.855646][T15105]  ? mempool_alloc+0x380/0x380
[  598.860427][T15105]  mempool_init_node+0x2e1/0x560
[  598.865385][T15105]  ? mempool_free+0x380/0x380
[  598.870072][T15105]  mempool_create_node+0xca/0x140
[  598.875109][T15105]  ? mempool_alloc+0x380/0x380
[  598.879889][T15105]  ? mempool_alloc+0x380/0x380
[  598.884664][T15105]  ? mempool_free+0x380/0x380
[  598.889358][T15105]  mempool_create+0x3a/0x50
[  598.893876][T15105]  ceph_osdc_init+0x45d/0x9a0
07:29:49 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x8048000}}, 0x0)

[  598.898573][T15105]  ceph_create_client+0x29c/0x370
[  598.903641][T15105]  ceph_mount+0x471/0x1870
[  598.908078][T15105]  ? vfs_parse_fs_param+0x510/0x510
[  598.913306][T15105]  ? ceph_compare_super+0x510/0x510
[  598.918562][T15105]  legacy_get_tree+0xf2/0x200
[  598.923258][T15105]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  598.929583][T15105]  vfs_get_tree+0x123/0x450
[  598.935097][T15105]  do_mount+0x1436/0x2c40
[  598.939449][T15105]  ? copy_mount_string+0x40/0x40
[  598.944401][T15105]  ? _copy_from_user+0xdd/0x150
[  598.949270][T15105]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  598.955531][T15105]  ? memdup_user+0x65/0xb0
[  598.959963][T15105]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  598.966217][T15105]  ? copy_mount_options+0x280/0x3a0
[  598.971430][T15105]  __ia32_compat_sys_mount+0x664/0x790
[  598.976920][T15105]  ? trace_hardirqs_on+0x67/0x230
[  598.981993][T15105]  do_fast_syscall_32+0x281/0xc98
[  598.987035][T15105]  entry_SYSENTER_compat+0x70/0x7f
[  598.992180][T15105] RIP: 0023:0xf7fca869
[  598.996268][T15105] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  599.015901][T15105] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  599.015918][T15105] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  599.015925][T15105] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  599.015932][T15105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
07:29:50 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x800408}, 0x0)

07:29:50 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x6c, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  599.015939][T15105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  599.015947][T15105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:29:50 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x31a, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

07:29:50 executing program 4 (fault-call:1 fault-nth:34):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:29:50 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x8121000}}, 0x0)

07:29:50 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x74, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  599.276130][T15583] FAULT_INJECTION: forcing a failure.
[  599.276130][T15583] name failslab, interval 1, probability 0, space 0, times 0
[  599.293979][T15583] CPU: 0 PID: 15583 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  599.301997][T15583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  599.302005][T15583] Call Trace:
[  599.302032][T15583]  dump_stack+0x172/0x1f0
[  599.302057][T15583]  should_fail.cold+0xa/0x15
[  599.302080][T15583]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  599.302105][T15583]  ? ___might_sleep+0x163/0x280
[  599.330254][T15583]  __should_failslab+0x121/0x190
[  599.330276][T15583]  should_failslab+0x9/0x14
[  599.330294][T15583]  kmem_cache_alloc+0x2b2/0x6f0
[  599.330310][T15583]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  599.330332][T15583]  ? __phys_addr+0xa4/0x120
[  599.360381][T15583]  ? mempool_create_node+0xca/0x140
[  599.365867][T15583]  mempool_alloc_slab+0x47/0x60
[  599.370761][T15583]  ? mempool_alloc+0x380/0x380
[  599.375538][T15583]  mempool_init_node+0x2e1/0x560
[  599.375561][T15583]  ? mempool_free+0x380/0x380
[  599.375578][T15583]  mempool_create_node+0xca/0x140
[  599.375593][T15583]  ? mempool_alloc+0x380/0x380
[  599.375611][T15583]  ? mempool_alloc+0x380/0x380
[  599.375637][T15583]  ? mempool_free+0x380/0x380
[  599.375654][T15583]  mempool_create+0x3a/0x50
[  599.375671][T15583]  ceph_osdc_init+0x45d/0x9a0
[  599.375695][T15583]  ceph_create_client+0x29c/0x370
[  599.375722][T15583]  ceph_mount+0x471/0x1870
[  599.385359][T15583]  ? vfs_parse_fs_param+0x510/0x510
[  599.385382][T15583]  ? ceph_compare_super+0x510/0x510
[  599.385399][T15583]  legacy_get_tree+0xf2/0x200
[  599.385415][T15583]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  599.385431][T15583]  vfs_get_tree+0x123/0x450
[  599.385447][T15583]  do_mount+0x1436/0x2c40
[  599.385478][T15583]  ? copy_mount_string+0x40/0x40
[  599.458412][T15583]  ? _copy_from_user+0xdd/0x150
[  599.463300][T15583]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  599.469558][T15583]  ? memdup_user+0x65/0xb0
[  599.473991][T15583]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  599.480249][T15583]  ? copy_mount_options+0x280/0x3a0
[  599.485473][T15583]  __ia32_compat_sys_mount+0x664/0x790
[  599.490941][T15583]  ? trace_hardirqs_on+0x67/0x230
[  599.495986][T15583]  do_fast_syscall_32+0x281/0xc98
[  599.501048][T15583]  entry_SYSENTER_compat+0x70/0x7f
[  599.506169][T15583] RIP: 0023:0xf7fca869
[  599.510246][T15583] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  599.529998][T15583] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  599.538432][T15583] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  599.546508][T15583] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  599.554516][T15583] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  599.562504][T15583] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
07:29:50 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x20100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:29:50 executing program 4 (fault-call:1 fault-nth:35):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  599.570484][T15583] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  599.653726][T15734] FAULT_INJECTION: forcing a failure.
[  599.653726][T15734] name failslab, interval 1, probability 0, space 0, times 0
[  599.671126][T15734] CPU: 0 PID: 15734 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  599.679162][T15734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  599.689229][T15734] Call Trace:
[  599.692553][T15734]  dump_stack+0x172/0x1f0
[  599.696921][T15734]  should_fail.cold+0xa/0x15
[  599.701537][T15734]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  599.707371][T15734]  ? ___might_sleep+0x163/0x280
[  599.712241][T15734]  __should_failslab+0x121/0x190
[  599.717216][T15734]  should_failslab+0x9/0x14
[  599.721755][T15734]  kmem_cache_alloc+0x2b2/0x6f0
[  599.726661][T15734]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  599.732935][T15734]  ? __phys_addr+0xa4/0x120
[  599.737457][T15734]  ? mempool_create_node+0xca/0x140
[  599.742682][T15734]  mempool_alloc_slab+0x47/0x60
[  599.747553][T15734]  ? mempool_alloc+0x380/0x380
[  599.752337][T15734]  mempool_init_node+0x2e1/0x560
[  599.757292][T15734]  ? mempool_free+0x380/0x380
[  599.762079][T15734]  mempool_create_node+0xca/0x140
[  599.767149][T15734]  ? mempool_alloc+0x380/0x380
[  599.771924][T15734]  ? mempool_alloc+0x380/0x380
[  599.771941][T15734]  ? mempool_free+0x380/0x380
[  599.771959][T15734]  mempool_create+0x3a/0x50
[  599.771977][T15734]  ceph_osdc_init+0x45d/0x9a0
[  599.772010][T15734]  ceph_create_client+0x29c/0x370
[  599.790659][T15734]  ceph_mount+0x471/0x1870
07:29:50 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x8129000}}, 0x0)

[  599.790680][T15734]  ? vfs_parse_fs_param+0x510/0x510
[  599.790700][T15734]  ? ceph_compare_super+0x510/0x510
[  599.790725][T15734]  legacy_get_tree+0xf2/0x200
[  599.790747][T15734]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  599.821573][T15734]  vfs_get_tree+0x123/0x450
[  599.826095][T15734]  do_mount+0x1436/0x2c40
[  599.830441][T15734]  ? copy_mount_string+0x40/0x40
[  599.835394][T15734]  ? _copy_from_user+0xdd/0x150
[  599.840261][T15734]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  599.846608][T15734]  ? memdup_user+0x65/0xb0
07:29:50 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x7a, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  599.851053][T15734]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  599.857302][T15734]  ? copy_mount_options+0x280/0x3a0
[  599.862518][T15734]  __ia32_compat_sys_mount+0x664/0x790
[  599.867998][T15734]  ? trace_hardirqs_on+0x67/0x230
[  599.873046][T15734]  do_fast_syscall_32+0x281/0xc98
[  599.878148][T15734]  entry_SYSENTER_compat+0x70/0x7f
[  599.883293][T15734] RIP: 0023:0xf7fca869
[  599.887377][T15734] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  599.906996][T15734] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  599.907012][T15734] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  599.907019][T15734] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  599.907026][T15734] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  599.907034][T15734] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  599.907043][T15734] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:29:51 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x200000, 0x0)
getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:29:51 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x8150000}}, 0x0)

07:29:51 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x901208}, 0x0)

07:29:51 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x40000, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000700)=0xe8)
r3 = getuid()
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@rand_addr="d3de736ebc8ad72818f39b5977a8461e", @in6=@mcast1, 0x4e22, 0xa3, 0x4e21, 0x400, 0x0, 0x80, 0x80, 0xff, r2, r3}, {0x0, 0x8, 0x4, 0x6, 0x100000001, 0x7ff, 0x0, 0x100}, {0xff, 0x1ff, 0x4}, 0x8, 0x6e6bb2, 0x0, 0x1, 0x2, 0x3}, {{@in6=@ipv4={[], [], @rand_addr=0x200}, 0x4d4, 0x32}, 0x2, @in6=@remote, 0x0, 0x4, 0x3, 0x8001, 0x7, 0xffffffffffffffff, 0x8}}, 0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8)
r5 = getuid()
sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10006}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)=@updpolicy={0x254, 0x19, 0x300, 0x70bd28, 0x25dfdbfc, {{@in6=@loopback, @in=@loopback, 0x4e24, 0x2, 0x4e21, 0x0, 0x2, 0x80, 0x20, 0x0, r4, r5}, {0x200, 0x1, 0x3, 0xfffffffffffffc00, 0x0, 0x401, 0xbe7, 0xe439}, {0x3, 0x6, 0x4, 0x6}, 0x401, 0x6e6bb0, 0x0, 0x1, 0x0, 0x3}, [@migrate={0x190, 0x11, [{@in=@remote, @in=@multicast2, 0x3c, 0x0, 0x0, 0x34ff, 0x2, 0x2}, {@in=@empty, @in=@loopback, 0xff, 0x4, 0x0, 0x3500, 0x0, 0xa}, {@in6=@mcast2, @in6=@dev={0xfe, 0x80, [], 0x17}, 0xd3e106850b9d5ef1, 0x4, 0x0, 0x3503, 0xa, 0xa}, {@in=@empty, @in6=@rand_addr="9876df9bcda975087a350fbd46c131b3", 0x0, 0x1, 0x0, 0x3505, 0x2, 0x2}, {@in=@local, @in6=@rand_addr="cb62b77cda2582619922ba993bcaab0c", 0x32, 0x2, 0x0, 0x3504, 0xa, 0x2}, {@in6=@remote, @in6=@local, 0x33, 0x0, 0x0, 0x3503, 0xa, 0xa}, {@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x27}}, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x33, 0x1, 0x0, 0x3501, 0xa, 0xa}, {@in6=@empty, @in=@loopback, 0x2b, 0x3, 0x0, 0x0, 0x2, 0x2}, {@in6=@ipv4={[], [], @rand_addr=0xb8}, @in=@loopback, 0x32, 0x4, 0x0, 0x3506, 0xa, 0xa}]}, @mark={0xc, 0x15, {0x35075c, 0x5}}]}, 0x254}, 0x1, 0x0, 0x0, 0x80}, 0x2400c054)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)
ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000840))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000000)="1da1a8a0b5173173cb1bbc3112520ff638822f36f17a42c48619142297f7e23fc4658d93aaf7f942f4ee9fcd96dab6beceaa00e3f319b5172180d42b8ecd83a48dde4802521119fe66fc549a5d07a0e1701490284d099eaf6ace02fe02a339907043682f6bf3b16135043acf40a0b26f3982a86e76be1980e60b2dbceeac207c166de22c7da21c810906002f475c609d7df1a44096aa3c19ea9d7de6bdccc65b95863f6d771b87e0ecbc2af1c681", 0xae, r0}, 0x68)

07:29:51 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x300, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:51 executing program 4 (fault-call:1 fault-nth:36):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  600.208849][T16117] binder: 16116:16117 ioctl c0306201 0 returned -14
[  600.251666][T16136] FAULT_INJECTION: forcing a failure.
[  600.251666][T16136] name failslab, interval 1, probability 0, space 0, times 0
[  600.268653][T16136] CPU: 0 PID: 16136 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  600.276675][T16136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  600.286744][T16136] Call Trace:
[  600.290052][T16136]  dump_stack+0x172/0x1f0
[  600.294404][T16136]  should_fail.cold+0xa/0x15
[  600.299015][T16136]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  600.304842][T16136]  ? ___might_sleep+0x163/0x280
[  600.309716][T16136]  __should_failslab+0x121/0x190
[  600.314710][T16136]  should_failslab+0x9/0x14
[  600.319246][T16136]  kmem_cache_alloc+0x2b2/0x6f0
[  600.324111][T16136]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  600.330366][T16136]  ? __phys_addr+0xa4/0x120
[  600.334885][T16136]  ? mempool_create_node+0xca/0x140
[  600.340104][T16136]  mempool_alloc_slab+0x47/0x60
[  600.344993][T16136]  ? mempool_alloc+0x380/0x380
[  600.349769][T16136]  mempool_init_node+0x2e1/0x560
[  600.354730][T16136]  ? mempool_free+0x380/0x380
[  600.359422][T16136]  mempool_create_node+0xca/0x140
[  600.365000][T16136]  ? mempool_alloc+0x380/0x380
[  600.369779][T16136]  ? mempool_alloc+0x380/0x380
[  600.374556][T16136]  ? mempool_free+0x380/0x380
[  600.379266][T16136]  mempool_create+0x3a/0x50
[  600.383781][T16136]  ceph_osdc_init+0x45d/0x9a0
[  600.388505][T16136]  ceph_create_client+0x29c/0x370
[  600.393546][T16136]  ceph_mount+0x471/0x1870
[  600.397977][T16136]  ? vfs_parse_fs_param+0x510/0x510
[  600.403183][T16136]  ? ceph_compare_super+0x510/0x510
[  600.408565][T16136]  legacy_get_tree+0xf2/0x200
[  600.413252][T16136]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  600.419591][T16136]  vfs_get_tree+0x123/0x450
[  600.424148][T16136]  do_mount+0x1436/0x2c40
[  600.428490][T16136]  ? copy_mount_string+0x40/0x40
[  600.433429][T16136]  ? _copy_from_user+0xdd/0x150
[  600.438265][T16136]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  600.444601][T16136]  ? memdup_user+0x65/0xb0
[  600.449026][T16136]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  600.455261][T16136]  ? copy_mount_options+0x280/0x3a0
[  600.460486][T16136]  __ia32_compat_sys_mount+0x664/0x790
[  600.465945][T16136]  ? trace_hardirqs_on+0x67/0x230
[  600.471012][T16136]  do_fast_syscall_32+0x281/0xc98
[  600.476051][T16136]  entry_SYSENTER_compat+0x70/0x7f
[  600.481168][T16136] RIP: 0023:0xf7fca869
[  600.485247][T16136] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  600.505055][T16136] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  600.513496][T16136] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  600.521458][T16136] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  600.529443][T16136] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  600.537413][T16136] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
07:29:51 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x500, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:51 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x204002, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000040)={0x1, 0x6})
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000100)={0x4, 0x4000, 0x2d, 0xf2, 0x5})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  600.545408][T16136] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:29:51 executing program 4 (fault-call:1 fault-nth:37):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  600.646449][T16377] binder: 16376:16377 ioctl c0306201 0 returned -14
[  600.678905][T16477] FAULT_INJECTION: forcing a failure.
[  600.678905][T16477] name failslab, interval 1, probability 0, space 0, times 0
07:29:51 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x8350000}}, 0x0)

[  600.742576][T16477] CPU: 1 PID: 16477 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  600.750660][T16477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  600.760734][T16477] Call Trace:
[  600.764050][T16477]  dump_stack+0x172/0x1f0
[  600.768410][T16477]  should_fail.cold+0xa/0x15
[  600.773048][T16477]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  600.778878][T16477]  ? ___might_sleep+0x163/0x280
[  600.783771][T16477]  __should_failslab+0x121/0x190
[  600.788730][T16477]  should_failslab+0x9/0x14
[  600.793244][T16477]  kmem_cache_alloc+0x2b2/0x6f0
[  600.798133][T16477]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  600.804397][T16477]  ? __phys_addr+0xa4/0x120
[  600.808927][T16477]  ? mempool_create_node+0xca/0x140
[  600.814153][T16477]  mempool_alloc_slab+0x47/0x60
[  600.819059][T16477]  ? mempool_alloc+0x380/0x380
[  600.824937][T16477]  mempool_init_node+0x2e1/0x560
[  600.829921][T16477]  ? mempool_free+0x380/0x380
[  600.834647][T16477]  mempool_create_node+0xca/0x140
[  600.839696][T16477]  ? mempool_alloc+0x380/0x380
[  600.844479][T16477]  ? mempool_alloc+0x380/0x380
[  600.849260][T16477]  ? mempool_free+0x380/0x380
[  600.853959][T16477]  mempool_create+0x3a/0x50
[  600.858487][T16477]  ceph_osdc_init+0x45d/0x9a0
[  600.863187][T16477]  ceph_create_client+0x29c/0x370
[  600.868272][T16477]  ceph_mount+0x471/0x1870
[  600.872711][T16477]  ? vfs_parse_fs_param+0x510/0x510
[  600.877927][T16477]  ? ceph_compare_super+0x510/0x510
[  600.883154][T16477]  legacy_get_tree+0xf2/0x200
[  600.887846][T16477]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  600.894133][T16477]  vfs_get_tree+0x123/0x450
[  600.898669][T16477]  do_mount+0x1436/0x2c40
[  600.903023][T16477]  ? copy_mount_string+0x40/0x40
[  600.907985][T16477]  ? _copy_from_user+0xdd/0x150
[  600.912859][T16477]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  600.919178][T16477]  ? memdup_user+0x65/0xb0
[  600.923631][T16477]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  600.929887][T16477]  ? copy_mount_options+0x280/0x3a0
[  600.929920][T16477]  __ia32_compat_sys_mount+0x664/0x790
07:29:51 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x600, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:51 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  600.929947][T16477]  ? trace_hardirqs_on+0x67/0x230
[  600.946320][T16477]  do_fast_syscall_32+0x281/0xc98
[  600.951370][T16477]  entry_SYSENTER_compat+0x70/0x7f
[  600.951385][T16477] RIP: 0023:0xf7fca869
[  600.951401][T16477] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  600.951410][T16477] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  600.951425][T16477] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  600.951435][T16477] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  600.951444][T16477] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  600.951453][T16477] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  600.951461][T16477] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:29:52 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2b2000, 0x0)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000040)=""/255, &(0x7f0000000140)=0xff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

07:29:52 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x851e000}}, 0x0)

07:29:52 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8048000}, 0x0)

07:29:52 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x700, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:52 executing program 4 (fault-call:1 fault-nth:38):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  601.095564][T16832] binder: 16730:16832 ioctl c0306201 0 returned -14
[  601.241159][T16949] FAULT_INJECTION: forcing a failure.
[  601.241159][T16949] name failslab, interval 1, probability 0, space 0, times 0
[  601.273902][T16949] CPU: 1 PID: 16949 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  601.281940][T16949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  601.292102][T16949] Call Trace:
[  601.295413][T16949]  dump_stack+0x172/0x1f0
[  601.299789][T16949]  should_fail.cold+0xa/0x15
[  601.304402][T16949]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  601.310264][T16949]  ? ___might_sleep+0x163/0x280
[  601.315119][T16949]  __should_failslab+0x121/0x190
[  601.320076][T16949]  should_failslab+0x9/0x14
[  601.324600][T16949]  kmem_cache_alloc+0x2b2/0x6f0
[  601.329479][T16949]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  601.335750][T16949]  ? __phys_addr+0xa4/0x120
[  601.340270][T16949]  ? mempool_create_node+0xca/0x140
[  601.345488][T16949]  mempool_alloc_slab+0x47/0x60
[  601.350358][T16949]  ? mempool_alloc+0x380/0x380
[  601.355139][T16949]  mempool_init_node+0x2e1/0x560
[  601.360100][T16949]  ? mempool_free+0x380/0x380
[  601.364795][T16949]  mempool_create_node+0xca/0x140
[  601.369835][T16949]  ? mempool_alloc+0x380/0x380
[  601.374611][T16949]  ? mempool_alloc+0x380/0x380
[  601.379399][T16949]  ? mempool_free+0x380/0x380
[  601.384095][T16949]  mempool_create+0x3a/0x50
[  601.388586][T16949]  ceph_osdc_init+0x45d/0x9a0
[  601.393270][T16949]  ceph_create_client+0x29c/0x370
[  601.398313][T16949]  ceph_mount+0x471/0x1870
[  601.402753][T16949]  ? vfs_parse_fs_param+0x510/0x510
[  601.407970][T16949]  ? ceph_compare_super+0x510/0x510
[  601.413181][T16949]  legacy_get_tree+0xf2/0x200
[  601.417875][T16949]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  601.424132][T16949]  vfs_get_tree+0x123/0x450
[  601.428653][T16949]  do_mount+0x1436/0x2c40
[  601.432978][T16949]  ? copy_mount_string+0x40/0x40
[  601.437920][T16949]  ? _copy_from_user+0xdd/0x150
[  601.442778][T16949]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  601.449005][T16949]  ? memdup_user+0x65/0xb0
[  601.453435][T16949]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  601.459666][T16949]  ? copy_mount_options+0x280/0x3a0
[  601.464865][T16949]  __ia32_compat_sys_mount+0x664/0x790
[  601.470358][T16949]  ? trace_hardirqs_on+0x67/0x230
[  601.475400][T16949]  do_fast_syscall_32+0x281/0xc98
[  601.480425][T16949]  entry_SYSENTER_compat+0x70/0x7f
[  601.485673][T16949] RIP: 0023:0xf7fca869
[  601.489758][T16949] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  601.509369][T16949] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  601.517792][T16949] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  601.525768][T16949] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  601.533769][T16949] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
07:29:52 executing program 0:
r0 = shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x2000)
shmdt(r0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

07:29:52 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x8540000}}, 0x0)

[  601.541735][T16949] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  601.549700][T16949] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  601.577742][T17196] binder: 17195:17196 ioctl c0306201 0 returned -14
07:29:52 executing program 4 (fault-call:1 fault-nth:39):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:29:52 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x2000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  601.741673][T17322] FAULT_INJECTION: forcing a failure.
[  601.741673][T17322] name failslab, interval 1, probability 0, space 0, times 0
[  601.762501][T17322] CPU: 0 PID: 17322 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  601.770613][T17322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  601.780688][T17322] Call Trace:
[  601.784118][T17322]  dump_stack+0x172/0x1f0
[  601.788473][T17322]  should_fail.cold+0xa/0x15
[  601.793087][T17322]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  601.798916][T17322]  ? ___might_sleep+0x163/0x280
[  601.803792][T17322]  __should_failslab+0x121/0x190
[  601.808779][T17322]  should_failslab+0x9/0x14
[  601.813383][T17322]  kmem_cache_alloc+0x2b2/0x6f0
[  601.818246][T17322]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  601.824500][T17322]  ? __phys_addr+0xa4/0x120
[  601.829047][T17322]  ? mempool_create_node+0xca/0x140
[  601.834268][T17322]  mempool_alloc_slab+0x47/0x60
07:29:52 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x3, 0xf, 0x1, "3204d2c4a241931ca9c8405fe7d1e9de994d8d4a444a0736b1a174d31cdb698a", 0x36334d5e})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  601.839135][T17322]  ? mempool_alloc+0x380/0x380
[  601.843939][T17322]  mempool_init_node+0x2e1/0x560
[  601.848917][T17322]  ? mempool_free+0x380/0x380
[  601.853610][T17322]  mempool_create_node+0xca/0x140
[  601.858667][T17322]  ? mempool_alloc+0x380/0x380
[  601.863451][T17322]  ? mempool_alloc+0x380/0x380
[  601.868224][T17322]  ? mempool_free+0x380/0x380
[  601.872918][T17322]  mempool_create+0x3a/0x50
[  601.877450][T17322]  ceph_osdc_init+0x45d/0x9a0
[  601.882160][T17322]  ceph_create_client+0x29c/0x370
[  601.887301][T17322]  ceph_mount+0x471/0x1870
07:29:52 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0xff600000}}, 0x0)

[  601.891775][T17322]  ? vfs_parse_fs_param+0x510/0x510
[  601.897003][T17322]  ? ceph_compare_super+0x510/0x510
[  601.902318][T17322]  legacy_get_tree+0xf2/0x200
[  601.907030][T17322]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  601.913303][T17322]  vfs_get_tree+0x123/0x450
[  601.917838][T17322]  do_mount+0x1436/0x2c40
[  601.922202][T17322]  ? copy_mount_string+0x40/0x40
[  601.927200][T17322]  ? _copy_from_user+0xdd/0x150
[  601.932084][T17322]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  601.938356][T17322]  ? memdup_user+0x65/0xb0
[  601.942795][T17322]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  601.949063][T17322]  ? copy_mount_options+0x280/0x3a0
[  601.954298][T17322]  __ia32_compat_sys_mount+0x664/0x790
[  601.959795][T17322]  ? trace_hardirqs_on+0x67/0x230
[  601.964847][T17322]  do_fast_syscall_32+0x281/0xc98
[  601.964872][T17322]  entry_SYSENTER_compat+0x70/0x7f
[  601.964885][T17322] RIP: 0023:0xf7fca869
[  601.964901][T17322] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  601.964910][T17322] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  601.964923][T17322] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  601.964932][T17322] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  601.964940][T17322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  601.964949][T17322] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
07:29:52 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x3f00, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  601.964957][T17322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  602.046240][T17411] binder: 17410:17411 ioctl c0405602 20000000 returned -22
07:29:53 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x124, 0x0, 0x69b72d31b6db025a, 0x0, 0xffffffffffffff60}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

07:29:53 executing program 4 (fault-call:1 fault-nth:40):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:29:53 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8121000}, 0x0)

[  602.259258][T17760] FAULT_INJECTION: forcing a failure.
[  602.259258][T17760] name failslab, interval 1, probability 0, space 0, times 0
[  602.293459][T17760] CPU: 0 PID: 17760 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  602.301487][T17760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  602.311559][T17760] Call Trace:
[  602.314892][T17760]  dump_stack+0x172/0x1f0
[  602.319268][T17760]  should_fail.cold+0xa/0x15
[  602.323882][T17760]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  602.329713][T17760]  ? ___might_sleep+0x163/0x280
[  602.334597][T17760]  __should_failslab+0x121/0x190
[  602.334630][T17760]  should_failslab+0x9/0x14
[  602.334649][T17760]  kmem_cache_alloc+0x2b2/0x6f0
[  602.334666][T17760]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  602.334682][T17760]  ? __phys_addr+0xa4/0x120
[  602.334700][T17760]  ? mempool_create_node+0xca/0x140
[  602.334730][T17760]  mempool_alloc_slab+0x47/0x60
[  602.334751][T17760]  ? mempool_alloc+0x380/0x380
[  602.344194][T17760]  mempool_init_node+0x2e1/0x560
[  602.344218][T17760]  ? mempool_free+0x380/0x380
[  602.344236][T17760]  mempool_create_node+0xca/0x140
[  602.344251][T17760]  ? mempool_alloc+0x380/0x380
[  602.344269][T17760]  ? mempool_alloc+0x380/0x380
[  602.344283][T17760]  ? mempool_free+0x380/0x380
[  602.344298][T17760]  mempool_create+0x3a/0x50
07:29:53 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x150800000000}}, 0x0)

[  602.344315][T17760]  ceph_osdc_init+0x45d/0x9a0
[  602.344339][T17760]  ceph_create_client+0x29c/0x370
[  602.344358][T17760]  ceph_mount+0x471/0x1870
[  602.344381][T17760]  ? vfs_parse_fs_param+0x510/0x510
[  602.427526][T17760]  ? ceph_compare_super+0x510/0x510
[  602.432744][T17760]  legacy_get_tree+0xf2/0x200
[  602.437441][T17760]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  602.443696][T17760]  vfs_get_tree+0x123/0x450
[  602.448226][T17760]  do_mount+0x1436/0x2c40
[  602.452580][T17760]  ? copy_mount_string+0x40/0x40
[  602.457543][T17760]  ? _copy_from_user+0xdd/0x150
[  602.462590][T17760]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  602.468871][T17760]  ? memdup_user+0x65/0xb0
[  602.473301][T17760]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  602.479584][T17760]  ? copy_mount_options+0x280/0x3a0
[  602.484816][T17760]  __ia32_compat_sys_mount+0x664/0x790
[  602.490312][T17760]  ? trace_hardirqs_on+0x67/0x230
[  602.495353][T17760]  do_fast_syscall_32+0x281/0xc98
[  602.500396][T17760]  entry_SYSENTER_compat+0x70/0x7f
[  602.505516][T17760] RIP: 0023:0xf7fca869
[  602.509631][T17760] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  602.529253][T17760] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  602.537679][T17760] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  602.545717][T17760] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
07:29:53 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x350800000000}}, 0x0)

07:29:53 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x4800, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:53 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = dup3(r0, r0, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)={@loopback, <r2=>0x0}, &(0x7f0000000180)=0x14)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @remote}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  602.553698][T17760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  602.561690][T17760] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  602.569707][T17760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:29:53 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x400000002, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80000, 0x0)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000080)={0x1, 0x1, 0x200, 0x8, 0x100000000, 0xd0})
sendmsg$tipc(r1, &(0x7f0000000180)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10, &(0x7f0000000080), 0x0, &(0x7f00000000c0)="8c3cb8abc24353fa92c06208ad8be1ddd66619366f58fcde1d7db19c458089af96d0c1c9e47b6c0e76cb791d5367b34cd8a0af1116b177771275f508b17a63bc3572be136c8474d8b54447aa7a37a97b076ade4d852edf6ec690e51d5fa2af82767674dfa8ae9ccdddf804452e1fc8b124fa96885a396030d3ddd337d2478ad47c2937dd01a8cb68d8b3c76372416f77ba5a787f204f9a7d80c8b6ada308c480a7f5ec016af3f57b9aabd6335a01ef9aa9546e56d6d269fd5f0fc3254113", 0xbe, 0x20008004}, 0xc040)

07:29:53 executing program 4 (fault-call:1 fault-nth:41):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  602.655221][T17941] binder: 17939:17941 ioctl c0306201 0 returned -14
[  602.758540][T18049] FAULT_INJECTION: forcing a failure.
[  602.758540][T18049] name failslab, interval 1, probability 0, space 0, times 0
[  602.773258][T18049] CPU: 0 PID: 18049 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  602.781268][T18049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  602.791341][T18049] Call Trace:
[  602.794676][T18049]  dump_stack+0x172/0x1f0
[  602.799041][T18049]  should_fail.cold+0xa/0x15
[  602.803677][T18049]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  602.809507][T18049]  ? ___might_sleep+0x163/0x280
[  602.814380][T18049]  __should_failslab+0x121/0x190
[  602.819431][T18049]  should_failslab+0x9/0x14
[  602.825422][T18049]  kmem_cache_alloc_node_trace+0x270/0x720
[  602.831235][T18049]  ? lockdep_init_map+0x1be/0x6d0
[  602.836279][T18049]  __kmalloc_node+0x3d/0x70
[  602.840795][T18049]  ? msgpool_free+0x50/0x50
[  602.845317][T18049]  ? ceph_con_workfn.cold+0x269/0x269
[  602.850697][T18049]  mempool_init_node+0x138/0x560
07:29:53 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x4c00, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  602.855662][T18049]  ? kasan_poison_kfree+0x74/0x130
[  602.860882][T18049]  ? ceph_con_workfn.cold+0x269/0x269
[  602.866265][T18049]  mempool_create_node+0xca/0x140
[  602.871295][T18049]  ? msgpool_free+0x50/0x50
[  602.875805][T18049]  ? msgpool_free+0x50/0x50
[  602.880313][T18049]  ? ceph_con_workfn.cold+0x269/0x269
[  602.885695][T18049]  mempool_create+0x3a/0x50
[  602.885724][T18049]  ceph_msgpool_init+0xc6/0x180
[  602.885744][T18049]  ceph_osdc_init+0x4c4/0x9a0
[  602.885768][T18049]  ceph_create_client+0x29c/0x370
[  602.895112][T18049]  ceph_mount+0x471/0x1870
[  602.895132][T18049]  ? vfs_parse_fs_param+0x510/0x510
[  602.895150][T18049]  ? ceph_compare_super+0x510/0x510
[  602.895166][T18049]  legacy_get_tree+0xf2/0x200
[  602.895183][T18049]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  602.895199][T18049]  vfs_get_tree+0x123/0x450
[  602.895215][T18049]  do_mount+0x1436/0x2c40
[  602.895238][T18049]  ? copy_mount_string+0x40/0x40
[  602.895254][T18049]  ? _copy_from_user+0xdd/0x150
[  602.895275][T18049]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  602.956372][T18049]  ? memdup_user+0x65/0xb0
[  602.960807][T18049]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  602.967055][T18049]  ? copy_mount_options+0x280/0x3a0
[  602.972275][T18049]  __ia32_compat_sys_mount+0x664/0x790
[  602.977752][T18049]  ? trace_hardirqs_on+0x67/0x230
[  602.982797][T18049]  do_fast_syscall_32+0x281/0xc98
[  602.987843][T18049]  entry_SYSENTER_compat+0x70/0x7f
[  602.992961][T18049] RIP: 0023:0xf7fca869
[  602.997042][T18049] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  603.016663][T18049] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  603.025090][T18049] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  603.033074][T18049] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  603.041062][T18049] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  603.049072][T18049] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
07:29:53 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x200002, 0x4)
ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r2 = accept4$tipc(0xffffffffffffff9c, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x800)
ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000080)={'ip6gre0\x00', {0x2, 0x4e21, @loopback}})

07:29:54 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x6000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  603.057055][T18049] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:29:54 executing program 4 (fault-call:1 fault-nth:42):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:29:54 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8129000}, 0x0)

[  603.140930][T18339] binder: 18318:18339 ioctl c0306201 0 returned -14
[  603.153868][    C0] net_ratelimit: 14 callbacks suppressed
[  603.153876][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  603.165377][    C0] protocol 88fb is buggy, dev hsr_slave_1
07:29:54 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x540800000000}}, 0x0)

[  603.248977][T18420] FAULT_INJECTION: forcing a failure.
[  603.248977][T18420] name failslab, interval 1, probability 0, space 0, times 0
[  603.276988][T18420] CPU: 1 PID: 18420 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  603.285030][T18420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  603.295104][T18420] Call Trace:
[  603.298424][T18420]  dump_stack+0x172/0x1f0
[  603.302789][T18420]  should_fail.cold+0xa/0x15
[  603.307408][T18420]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  603.313239][T18420]  ? ___might_sleep+0x163/0x280
[  603.318112][T18420]  __should_failslab+0x121/0x190
[  603.323064][T18420]  should_failslab+0x9/0x14
[  603.327585][T18420]  __kmalloc+0x2dc/0x740
[  603.331855][T18420]  ? rcu_read_lock_sched_held+0x110/0x130
[  603.337593][T18420]  ? kmem_cache_alloc+0x32e/0x6f0
[  603.342658][T18420]  ? ceph_kvmalloc+0x41/0xb6
[  603.347269][T18420]  ceph_kvmalloc+0x41/0xb6
[  603.351695][T18420]  ceph_msg_new2+0x26c/0x440
[  603.356300][T18420]  ? msgpool_free+0x50/0x50
[  603.360818][T18420]  msgpool_alloc+0xa1/0x120
[  603.365336][T18420]  mempool_init_node+0x2e1/0x560
[  603.370313][T18420]  ? ceph_con_workfn.cold+0x269/0x269
[  603.377632][T18420]  mempool_create_node+0xca/0x140
[  603.383230][T18420]  ? msgpool_free+0x50/0x50
[  603.387751][T18420]  ? msgpool_free+0x50/0x50
[  603.392271][T18420]  ? ceph_con_workfn.cold+0x269/0x269
[  603.397677][T18420]  mempool_create+0x3a/0x50
[  603.402230][T18420]  ceph_msgpool_init+0xc6/0x180
[  603.407106][T18420]  ceph_osdc_init+0x4c4/0x9a0
[  603.411806][T18420]  ceph_create_client+0x29c/0x370
[  603.416850][T18420]  ceph_mount+0x471/0x1870
[  603.421281][T18420]  ? vfs_parse_fs_param+0x510/0x510
[  603.426493][T18420]  ? ceph_compare_super+0x510/0x510
[  603.431710][T18420]  legacy_get_tree+0xf2/0x200
[  603.436401][T18420]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  603.442668][T18420]  vfs_get_tree+0x123/0x450
[  603.447191][T18420]  do_mount+0x1436/0x2c40
[  603.451557][T18420]  ? copy_mount_string+0x40/0x40
[  603.456507][T18420]  ? _copy_from_user+0xdd/0x150
[  603.461378][T18420]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  603.467638][T18420]  ? memdup_user+0x65/0xb0
[  603.472076][T18420]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  603.478330][T18420]  ? copy_mount_options+0x280/0x3a0
[  603.483551][T18420]  __ia32_compat_sys_mount+0x664/0x790
[  603.489024][T18420]  ? trace_hardirqs_on+0x67/0x230
[  603.494068][T18420]  do_fast_syscall_32+0x281/0xc98
[  603.499112][T18420]  entry_SYSENTER_compat+0x70/0x7f
[  603.504229][T18420] RIP: 0023:0xf7fca869
[  603.508306][T18420] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  603.528444][T18420] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  603.536866][T18420] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
07:29:54 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x60ffffffffff}}, 0x0)

07:29:54 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x0, 0x9, 0x3, 0x6})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:29:54 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x6800, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:54 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x1fff, 0x300)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r0, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000140)={<r1=>0x0, 0x80000})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r1, 0x80000})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000040)={0xce05, 0x7})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8906, 0x0)

[  603.544844][T18420] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  603.552825][T18420] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  603.560811][T18420] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  603.568782][T18420] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:29:54 executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xef, 0x400400)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e617400000000000000001600000000000000000000000000000000000000001b00000005000000f8040000480300009162ea5b954d10890000000065760000640400006404000005000000000000000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="7f000001e000000200000000ffffff006272696467653000000000000000000069703667726530000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000310000000000000000000000000000004014c01000000000000000000000000000000000000000000000000240074746c00000000000000000000000000000000000000000000000000000000ff00004800697076730000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000ff000000ffffffff000000ff4e2400074e2120044800444e415400000000000000000000000000000000000000000000000000011200000000000000000000000000000000000000ff02000000000000000000000000000103004e2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8001c0100000000000000000000000000000000000000000000000050006f736600000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000100000003000000000000000100000034004d41535155455241444500000000000000000000000000000000000000000100000001000000ac141410ac1414aa4e230067ac141415e0000001ff000000000000ff69705f7674693000000000000000000069703667726574617030000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000005c00020800000000000000000000000000009800e0000000000000000000000000000000000000000000000000004800444e4154000000000000000000000000000000000000000000000000000111000000ac1e00010000000000000000000000000000010000000000000000000000000000654e21ac1e0101e0000001ffffff00ffffffff76657468305f746f5f6272696467650076657468305f746f5f626f6e64000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e00010a0000000000000000000000000000e8001c01000000000000000000000000000000000000000000000000500073657400000000000000000000000000000000000000000000000000000402000301000000003f4700000000000000000000000000000700000000000000fc0000000000000057905872000000003400534e41540000000000000000000000000000000000000000000000000000010000001100000000000000ac1414aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000940000000000000000000000000000000000000000002400000000000000000000000000000000000000000000000000000000000000feffffff"], 0x554)
r1 = socket$kcm(0x11, 0x400000002, 0x300)
tee(r0, r1, 0x6, 0x1)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
recvmsg$kcm(r1, &(0x7f000000a080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe98}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8906, 0x0)

[  603.627299][T18704] binder: 18686:18704 ioctl c028660f 20000000 returned -22
[  603.651110][T18704] binder: 18686:18704 ioctl c0306201 0 returned -14
07:29:54 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x6c00, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:54 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x802)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x4000)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40401000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="02002dbd7000fedbdf25010000000000000001410000002000170000000c0000000569623a76657468315f746f5f626f6e6400000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4008010)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:29:54 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x7fffffffefff}}, 0x0)

07:29:54 executing program 4 (fault-call:1 fault-nth:43):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  603.905959][T19074] binder: 19068:19074 ioctl c0306201 0 returned -14
07:29:54 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x7400, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  604.020133][T19182] FAULT_INJECTION: forcing a failure.
[  604.020133][T19182] name failslab, interval 1, probability 0, space 0, times 0
[  604.059716][T19182] CPU: 0 PID: 19182 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  604.067751][T19182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  604.077819][T19182] Call Trace:
[  604.081128][T19182]  dump_stack+0x172/0x1f0
[  604.085485][T19182]  should_fail.cold+0xa/0x15
[  604.090103][T19182]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  604.095927][T19182]  ? ___might_sleep+0x163/0x280
[  604.100804][T19182]  __should_failslab+0x121/0x190
[  604.103824][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  604.105755][T19182]  should_failslab+0x9/0x14
[  604.105773][T19182]  kmem_cache_alloc+0x2b2/0x6f0
[  604.105798][T19182]  ? rcu_read_lock_sched_held+0x110/0x130
[  604.111549][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  604.116017][T19182]  ? ceph_con_workfn.cold+0x269/0x269
[  604.116031][T19182]  ceph_msg_new2+0x3a/0x440
[  604.116045][T19182]  ? msgpool_free+0x50/0x50
[  604.116058][T19182]  ? ceph_con_workfn.cold+0x269/0x269
[  604.116070][T19182]  msgpool_alloc+0xa1/0x120
[  604.116093][T19182]  mempool_init_node+0x2e1/0x560
[  604.146720][T19182]  ? ceph_con_workfn.cold+0x269/0x269
[  604.156569][T19182]  mempool_create_node+0xca/0x140
[  604.156584][T19182]  ? msgpool_free+0x50/0x50
[  604.156598][T19182]  ? msgpool_free+0x50/0x50
[  604.156610][T19182]  ? ceph_con_workfn.cold+0x269/0x269
[  604.156637][T19182]  mempool_create+0x3a/0x50
[  604.156653][T19182]  ceph_msgpool_init+0xc6/0x180
[  604.156671][T19182]  ceph_osdc_init+0x4c4/0x9a0
[  604.156694][T19182]  ceph_create_client+0x29c/0x370
[  604.156721][T19182]  ceph_mount+0x471/0x1870
[  604.209789][T19182]  ? vfs_parse_fs_param+0x510/0x510
[  604.214998][T19182]  ? ceph_compare_super+0x510/0x510
[  604.220210][T19182]  legacy_get_tree+0xf2/0x200
[  604.224900][T19182]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  604.231149][T19182]  vfs_get_tree+0x123/0x450
[  604.235669][T19182]  do_mount+0x1436/0x2c40
[  604.240024][T19182]  ? copy_mount_string+0x40/0x40
[  604.244971][T19182]  ? _copy_from_user+0xdd/0x150
[  604.249858][T19182]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  604.256098][T19182]  ? memdup_user+0x65/0xb0
[  604.260528][T19182]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  604.266868][T19182]  ? copy_mount_options+0x280/0x3a0
[  604.272085][T19182]  __ia32_compat_sys_mount+0x664/0x790
[  604.277569][T19182]  ? trace_hardirqs_on+0x67/0x230
[  604.282604][T19182]  do_fast_syscall_32+0x281/0xc98
[  604.287636][T19182]  entry_SYSENTER_compat+0x70/0x7f
[  604.292738][T19182] RIP: 0023:0xf7fca869
[  604.296808][T19182] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  604.316407][T19182] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  604.324811][T19182] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  604.332779][T19182] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  604.340758][T19182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  604.348728][T19182] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  604.356685][T19182] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  604.364971][    C0] protocol 88fb is buggy, dev hsr_slave_0
07:29:55 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8150000}, 0x0)

07:29:55 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x420003, 0x0)
write$P9_RSETATTR(r1, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7)

07:29:55 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x10120800000000}}, 0x0)

07:29:55 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x7a00, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  604.370764][    C0] protocol 88fb is buggy, dev hsr_slave_1
07:29:55 executing program 4 (fault-call:1 fault-nth:44):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  604.423590][T19424] binder: 19423:19424 ioctl c0306201 0 returned -14
[  604.521977][T19550] FAULT_INJECTION: forcing a failure.
[  604.521977][T19550] name failslab, interval 1, probability 0, space 0, times 0
[  604.548305][T19550] CPU: 1 PID: 19550 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  604.556379][T19550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  604.566449][T19550] Call Trace:
[  604.569766][T19550]  dump_stack+0x172/0x1f0
[  604.574122][T19550]  should_fail.cold+0xa/0x15
[  604.578753][T19550]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  604.584595][T19550]  ? ___might_sleep+0x163/0x280
[  604.589485][T19550]  __should_failslab+0x121/0x190
[  604.594441][T19550]  should_failslab+0x9/0x14
[  604.598961][T19550]  __kmalloc+0x2dc/0x740
[  604.603225][T19550]  ? rcu_read_lock_sched_held+0x110/0x130
[  604.608959][T19550]  ? kmem_cache_alloc+0x32e/0x6f0
[  604.613998][T19550]  ? ceph_kvmalloc+0x41/0xb6
[  604.618605][T19550]  ceph_kvmalloc+0x41/0xb6
[  604.623042][T19550]  ceph_msg_new2+0x26c/0x440
[  604.627656][T19550]  ? msgpool_free+0x50/0x50
[  604.632175][T19550]  ? ceph_con_workfn.cold+0x269/0x269
[  604.637565][T19550]  msgpool_alloc+0xa1/0x120
[  604.642090][T19550]  mempool_init_node+0x2e1/0x560
[  604.647042][T19550]  ? ceph_con_workfn.cold+0x269/0x269
[  604.652431][T19550]  mempool_create_node+0xca/0x140
[  604.657469][T19550]  ? msgpool_free+0x50/0x50
[  604.662074][T19550]  ? msgpool_free+0x50/0x50
[  604.666589][T19550]  ? ceph_con_workfn.cold+0x269/0x269
[  604.672049][T19550]  mempool_create+0x3a/0x50
[  604.676668][T19550]  ceph_msgpool_init+0xc6/0x180
[  604.681541][T19550]  ceph_osdc_init+0x4c4/0x9a0
[  604.686243][T19550]  ceph_create_client+0x29c/0x370
[  604.691283][T19550]  ceph_mount+0x471/0x1870
[  604.695715][T19550]  ? vfs_parse_fs_param+0x510/0x510
[  604.700925][T19550]  ? ceph_compare_super+0x510/0x510
[  604.706135][T19550]  legacy_get_tree+0xf2/0x200
[  604.710820][T19550]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  604.717073][T19550]  vfs_get_tree+0x123/0x450
07:29:55 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x1000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  604.721594][T19550]  do_mount+0x1436/0x2c40
[  604.725948][T19550]  ? copy_mount_string+0x40/0x40
[  604.730891][T19550]  ? _copy_from_user+0xdd/0x150
[  604.730914][T19550]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  604.741997][T19550]  ? memdup_user+0x65/0xb0
[  604.746425][T19550]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  604.752684][T19550]  ? copy_mount_options+0x280/0x3a0
[  604.758003][T19550]  __ia32_compat_sys_mount+0x664/0x790
[  604.763482][T19550]  ? trace_hardirqs_on+0x67/0x230
[  604.768529][T19550]  do_fast_syscall_32+0x281/0xc98
[  604.773576][T19550]  entry_SYSENTER_compat+0x70/0x7f
[  604.778709][T19550] RIP: 0023:0xf7fca869
[  604.782787][T19550] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  604.802408][T19550] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  604.810838][T19550] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  604.818823][T19550] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  604.828107][T19550] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  604.836085][T19550] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  604.836094][T19550] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:29:55 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
stat(0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x2302)

07:29:55 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x2000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:55 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:29:55 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x80040800000000}}, 0x0)

[  604.942051][T19856] binder: 19852:19856 ioctl c0306201 0 returned -14
07:29:56 executing program 2:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000000c0)=""/246)
ioctl$EVIOCGPROP(r1, 0x80404509, 0x0)

07:29:56 executing program 4 (fault-call:1 fault-nth:45):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  605.196651][T20167] FAULT_INJECTION: forcing a failure.
[  605.196651][T20167] name failslab, interval 1, probability 0, space 0, times 0
[  605.243406][T20167] CPU: 0 PID: 20167 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  605.251441][T20167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  605.261770][T20167] Call Trace:
[  605.261803][T20167]  dump_stack+0x172/0x1f0
[  605.269415][T20167]  should_fail.cold+0xa/0x15
[  605.274040][T20167]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  605.279867][T20167]  ? ___might_sleep+0x163/0x280
[  605.284777][T20167]  __should_failslab+0x121/0x190
[  605.289738][T20167]  should_failslab+0x9/0x14
[  605.294271][T20167]  __kmalloc+0x2dc/0x740
[  605.298503][T20167]  ? rcu_read_lock_sched_held+0x110/0x130
[  605.304216][T20167]  ? kmem_cache_alloc+0x32e/0x6f0
[  605.309244][T20167]  ? ceph_kvmalloc+0x41/0xb6
[  605.313835][T20167]  ceph_kvmalloc+0x41/0xb6
[  605.318259][T20167]  ceph_msg_new2+0x26c/0x440
[  605.322832][T20167]  ? msgpool_free+0x50/0x50
[  605.327322][T20167]  ? ceph_con_workfn.cold+0x269/0x269
[  605.332674][T20167]  msgpool_alloc+0xa1/0x120
[  605.337167][T20167]  mempool_init_node+0x2e1/0x560
[  605.342110][T20167]  ? ceph_con_workfn.cold+0x269/0x269
[  605.347480][T20167]  mempool_create_node+0xca/0x140
[  605.352487][T20167]  ? msgpool_free+0x50/0x50
[  605.356972][T20167]  ? msgpool_free+0x50/0x50
[  605.361456][T20167]  ? ceph_con_workfn.cold+0x269/0x269
[  605.366826][T20167]  mempool_create+0x3a/0x50
[  605.371346][T20167]  ceph_msgpool_init+0xc6/0x180
[  605.376223][T20167]  ceph_osdc_init+0x4c4/0x9a0
[  605.380891][T20167]  ceph_create_client+0x29c/0x370
[  605.385903][T20167]  ceph_mount+0x471/0x1870
[  605.390306][T20167]  ? vfs_parse_fs_param+0x510/0x510
[  605.395491][T20167]  ? ceph_compare_super+0x510/0x510
[  605.400675][T20167]  legacy_get_tree+0xf2/0x200
[  605.405351][T20167]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  605.411591][T20167]  vfs_get_tree+0x123/0x450
[  605.416085][T20167]  do_mount+0x1436/0x2c40
[  605.420402][T20167]  ? copy_mount_string+0x40/0x40
[  605.425322][T20167]  ? _copy_from_user+0xdd/0x150
[  605.430267][T20167]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  605.436504][T20167]  ? memdup_user+0x65/0xb0
[  605.440912][T20167]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  605.447137][T20167]  ? copy_mount_options+0x280/0x3a0
[  605.452334][T20167]  __ia32_compat_sys_mount+0x664/0x790
[  605.457797][T20167]  ? trace_hardirqs_on+0x67/0x230
[  605.462815][T20167]  do_fast_syscall_32+0x281/0xc98
[  605.467829][T20167]  entry_SYSENTER_compat+0x70/0x7f
[  605.472942][T20167] RIP: 0023:0xf7fca869
[  605.477010][T20167] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  605.496600][T20167] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  605.505007][T20167] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  605.512961][T20167] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  605.520914][T20167] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  605.528868][T20167] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  605.536821][T20167] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:29:56 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8350000}, 0x0)

07:29:56 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x3000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:56 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x90120800000000}}, 0x0)

07:29:56 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
dup2(r0, r0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r1=>0xffffffffffffff9c})
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={<r2=>0x0, 0xfffffffffffffffc}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x5, 0x400, 0x101, 0x10000, 0x1ff}, &(0x7f0000000100)=0x14)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:29:56 executing program 2:
syslog(0x4, &(0x7f0000000040)=""/10, 0x2df)

07:29:56 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$clear(0x7, r1)

[  605.662568][T20183] binder: 20181:20183 ioctl c0306201 0 returned -14
07:29:56 executing program 4 (fault-call:1 fault-nth:46):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:29:56 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pause()
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x6)

07:29:56 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x4000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  605.857847][T20425] FAULT_INJECTION: forcing a failure.
[  605.857847][T20425] name failslab, interval 1, probability 0, space 0, times 0
[  605.904133][T20425] CPU: 1 PID: 20425 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  605.912198][T20425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  605.922278][T20425] Call Trace:
[  605.925585][T20425]  dump_stack+0x172/0x1f0
[  605.929945][T20425]  should_fail.cold+0xa/0x15
[  605.934559][T20425]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  605.940392][T20425]  ? ___might_sleep+0x163/0x280
[  605.945265][T20425]  __should_failslab+0x121/0x190
[  605.950227][T20425]  should_failslab+0x9/0x14
[  605.954747][T20425]  kmem_cache_alloc+0x2b2/0x6f0
[  605.959614][T20425]  ? ceph_kvmalloc+0x41/0xb6
[  605.964244][T20425]  ? ceph_msg_new2+0x309/0x440
[  605.969059][T20425]  ceph_msg_new2+0x3a/0x440
[  605.973570][T20425]  ? msgpool_free+0x50/0x50
[  605.978077][T20425]  msgpool_alloc+0xa1/0x120
[  605.982586][T20425]  mempool_init_node+0x2e1/0x560
[  605.987538][T20425]  ? ceph_con_workfn.cold+0x269/0x269
[  605.992908][T20425]  mempool_create_node+0xca/0x140
[  605.997940][T20425]  ? msgpool_free+0x50/0x50
[  606.002535][T20425]  ? msgpool_free+0x50/0x50
[  606.007047][T20425]  ? ceph_con_workfn.cold+0x269/0x269
[  606.012436][T20425]  mempool_create+0x3a/0x50
[  606.016961][T20425]  ceph_msgpool_init+0xc6/0x180
[  606.021831][T20425]  ceph_osdc_init+0x4c4/0x9a0
[  606.026530][T20425]  ceph_create_client+0x29c/0x370
[  606.031557][T20425]  ceph_mount+0x471/0x1870
[  606.035983][T20425]  ? vfs_parse_fs_param+0x510/0x510
[  606.041263][T20425]  ? ceph_compare_super+0x510/0x510
[  606.046463][T20425]  legacy_get_tree+0xf2/0x200
[  606.051147][T20425]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  606.057394][T20425]  vfs_get_tree+0x123/0x450
[  606.061884][T20425]  do_mount+0x1436/0x2c40
[  606.066206][T20425]  ? copy_mount_string+0x40/0x40
[  606.071127][T20425]  ? _copy_from_user+0xdd/0x150
[  606.075986][T20425]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  606.082254][T20425]  ? memdup_user+0x65/0xb0
[  606.086659][T20425]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  606.092899][T20425]  ? copy_mount_options+0x280/0x3a0
[  606.098109][T20425]  __ia32_compat_sys_mount+0x664/0x790
[  606.103558][T20425]  ? trace_hardirqs_on+0x67/0x230
[  606.108569][T20425]  do_fast_syscall_32+0x281/0xc98
[  606.113600][T20425]  entry_SYSENTER_compat+0x70/0x7f
[  606.118731][T20425] RIP: 0023:0xf7fca869
[  606.122786][T20425] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  606.142467][T20425] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
07:29:57 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0xe0510800000000}}, 0x0)

07:29:57 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x10200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
fdatasync(r0)

[  606.150898][T20425] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  606.158890][T20425] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  606.166878][T20425] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  606.174882][T20425] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  606.182864][T20425] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:29:57 executing program 4 (fault-call:1 fault-nth:47):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  606.236466][T20606] binder: 20605:20606 ioctl c0306201 0 returned -14
[  606.310840][T20629] FAULT_INJECTION: forcing a failure.
[  606.310840][T20629] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  606.324123][T20629] CPU: 0 PID: 20629 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  606.332119][T20629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  606.342188][T20629] Call Trace:
[  606.345503][T20629]  dump_stack+0x172/0x1f0
[  606.349853][T20629]  should_fail.cold+0xa/0x15
[  606.354468][T20629]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  606.360297][T20629]  ? __lock_acquire+0x548/0x3fb0
[  606.365248][T20629]  ? ceph_msgpool_init+0xc6/0x180
[  606.370286][T20629]  ? ceph_osdc_init+0x4c4/0x9a0
[  606.375156][T20629]  ? ceph_create_client+0x29c/0x370
[  606.380375][T20629]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  606.386664][T20629]  should_fail_alloc_page+0x50/0x60
[  606.392009][T20629]  __alloc_pages_nodemask+0x1a1/0x7e0
[  606.397409][T20629]  ? __alloc_pages_slowpath+0x28b0/0x28b0
[  606.403254][T20629]  ? find_held_lock+0x35/0x130
[  606.408044][T20629]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  606.413872][T20629]  cache_grow_begin+0x9c/0x860
[  606.418662][T20629]  ? ceph_kvmalloc+0x41/0xb6
[  606.423271][T20629]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  606.429534][T20629]  __kmalloc+0x67f/0x740
[  606.433798][T20629]  ? ceph_kvmalloc+0x41/0xb6
[  606.438405][T20629]  ceph_kvmalloc+0x41/0xb6
[  606.442838][T20629]  ceph_msg_new2+0x26c/0x440
[  606.447440][T20629]  ? msgpool_free+0x50/0x50
[  606.451953][T20629]  ? ceph_con_workfn.cold+0x269/0x269
[  606.457335][T20629]  msgpool_alloc+0xa1/0x120
[  606.461853][T20629]  mempool_init_node+0x2e1/0x560
[  606.466816][T20629]  ? ceph_con_workfn.cold+0x269/0x269
[  606.472291][T20629]  mempool_create_node+0xca/0x140
[  606.477326][T20629]  ? msgpool_free+0x50/0x50
[  606.481850][T20629]  ? msgpool_free+0x50/0x50
[  606.486365][T20629]  ? ceph_con_workfn.cold+0x269/0x269
[  606.491763][T20629]  mempool_create+0x3a/0x50
[  606.496287][T20629]  ceph_msgpool_init+0xc6/0x180
[  606.501153][T20629]  ceph_osdc_init+0x4c4/0x9a0
[  606.505849][T20629]  ceph_create_client+0x29c/0x370
[  606.510873][T20629]  ceph_mount+0x471/0x1870
[  606.515289][T20629]  ? vfs_parse_fs_param+0x510/0x510
[  606.520510][T20629]  ? ceph_compare_super+0x510/0x510
[  606.525815][T20629]  legacy_get_tree+0xf2/0x200
[  606.530513][T20629]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  606.536775][T20629]  vfs_get_tree+0x123/0x450
[  606.541285][T20629]  do_mount+0x1436/0x2c40
[  606.545637][T20629]  ? copy_mount_string+0x40/0x40
[  606.550580][T20629]  ? _copy_from_user+0xdd/0x150
[  606.555455][T20629]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  606.561716][T20629]  ? memdup_user+0x65/0xb0
[  606.566146][T20629]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  606.566162][T20629]  ? copy_mount_options+0x280/0x3a0
[  606.566188][T20629]  __ia32_compat_sys_mount+0x664/0x790
[  606.566205][T20629]  ? trace_hardirqs_on+0x67/0x230
[  606.566235][T20629]  do_fast_syscall_32+0x281/0xc98
[  606.577669][T20629]  entry_SYSENTER_compat+0x70/0x7f
[  606.577682][T20629] RIP: 0023:0xf7fca869
[  606.577696][T20629] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  606.577711][T20629] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  606.577724][T20629] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  606.577732][T20629] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  606.577740][T20629] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
07:29:57 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x5000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:57 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x2)
clone(0x8000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20001, 0x104)
pwritev(r0, &(0x7f0000000580)=[{&(0x7f0000000180)="ebe6b85cc50602f0fffde482f3fa4805858a5cff049b0edae96a7e8dfa6cbb21e29fbca86e6e21ce3003b75145202b3f69a66cf79d9b4c0c5cc361eac466275b8e", 0x41}, {&(0x7f0000000200)="60f3dc8c08ab0aa85a00b08899cf171ca1f10339c5dee09701e71265c26bccc5cbf904ff7cd4b90ff0f6bdbb8220a4f539aecb8f69bca112ac10185955319d50065f10946f74060b8a9906cf6e9b8c8bd2dcba201378d587d17004447a9b6b966f0ad098a8a14ff56bed6421fb5684a31589c69c1ca8141c6200de3f3017657c1f206f6fd8568d84863844ee097712e49ef37ed181ef6a3159edaac7574b491b700f743577964e94eb5aacb3e5cd1ec72a667a3de1137f2b7e66af", 0xbb}, {&(0x7f00000002c0)="e16ecad30d7abacd", 0x8}, {&(0x7f0000000300)="8cd52062abbf6354e17fdea2da87e981fcb9f64786f99a8016966f4b677d8eea3586965010126e79385d8399fa8aac5958fdb7c2c314da59b6d5a5cf2253792fcec7d9c2366db9e00655d2ae847e6faea7949320eb727483b7ba866e7067bb1bcb0ad7c68243782f5f1f242a9333759239e6f08b95c841253361130968ac6ca5698131bb0348215559c8180c8481d4d5e5e143934463e9c18f9558e82b167d77344002970bc69734a694504ad85f475b32f2867fba969e9ce712dff3422c82dbe6022baa5c20830fbf2addf4f74e0059406b7607cffb2b588ff433a638ce8e48e5d6fb12838406e7d24e8f3a30d39fc544", 0xf1}, {&(0x7f0000000440)="c8f0d3c3a90b9c22c8951dee3130ab340b8e2af9074e478facd631e4587d1c9e6d49315bd8473d045aecc390f5d9957ff2113ef34fa4be793020788be1f78106e0775c3013bdcf7cd4a56844c0ad3682aa232f500212b7a976ee4ff0a30fb3c07b9332bfe3f654d09307716af7ad1a1e7dea760f9291a3f1edfd6128d6ecec77832ab1e7502d4f28e2e47996bd795097f78d65dd7140bdd76a5371d2ccc40faacdbea81532e5d1c4172cdcd5856d7b13aa6005db", 0xb4}, {&(0x7f0000000500)="37c8c31864899a026d64d1919138a5102403e8503e19ee74a624b0d04d67767b9b9555d892f440585c47ad26e31f549a52fb03d99a600fda12945ace0813af08ac7cc09fff4c2951977e1af410b76af63089253e8d2965564c39", 0x5a}], 0x6, 0x0)
accept4$tipc(r1, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10, 0x800)
ioctl$RTC_AIE_ON(r1, 0x7001)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xc0000, 0x0)
r2 = getpid()
fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x0, r2})
syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x523000)

07:29:57 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9c65000}, 0x0)

07:29:57 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0xffefffffff7f0000}}, 0x0)

[  606.577756][T20629] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  606.622110][T20629] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:29:57 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pause()
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x6)

07:29:57 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x6000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:57 executing program 4 (fault-call:1 fault-nth:48):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:29:57 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0xffffffffff600000}}, 0x0)

[  607.008463][T21139] FAULT_INJECTION: forcing a failure.
[  607.008463][T21139] name failslab, interval 1, probability 0, space 0, times 0
[  607.048789][T21139] CPU: 1 PID: 21139 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  607.056820][T21139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  607.066890][T21139] Call Trace:
[  607.070216][T21139]  dump_stack+0x172/0x1f0
[  607.074579][T21139]  should_fail.cold+0xa/0x15
[  607.079214][T21139]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  607.085054][T21139]  ? ___might_sleep+0x163/0x280
[  607.090007][T21139]  __should_failslab+0x121/0x190
07:29:58 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x7000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  607.094962][T21139]  should_failslab+0x9/0x14
[  607.099483][T21139]  __kmalloc+0x2dc/0x740
[  607.103739][T21139]  ? rcu_read_lock_sched_held+0x110/0x130
[  607.109470][T21139]  ? kmem_cache_alloc+0x32e/0x6f0
[  607.114587][T21139]  ? ceph_kvmalloc+0x41/0xb6
[  607.114607][T21139]  ceph_kvmalloc+0x41/0xb6
[  607.114636][T21139]  ceph_msg_new2+0x26c/0x440
[  607.114653][T21139]  ? msgpool_free+0x50/0x50
[  607.114672][T21139]  msgpool_alloc+0xa1/0x120
[  607.137253][T21139]  mempool_init_node+0x2e1/0x560
[  607.142218][T21139]  ? ceph_con_workfn.cold+0x269/0x269
[  607.147610][T21139]  mempool_create_node+0xca/0x140
[  607.152671][T21139]  ? msgpool_free+0x50/0x50
[  607.157191][T21139]  ? msgpool_free+0x50/0x50
[  607.161815][T21139]  ? ceph_con_workfn.cold+0x269/0x269
[  607.167207][T21139]  mempool_create+0x3a/0x50
[  607.171730][T21139]  ceph_msgpool_init+0xc6/0x180
[  607.176600][T21139]  ceph_osdc_init+0x4c4/0x9a0
[  607.181300][T21139]  ceph_create_client+0x29c/0x370
[  607.186370][T21139]  ceph_mount+0x471/0x1870
[  607.190806][T21139]  ? vfs_parse_fs_param+0x510/0x510
[  607.196021][T21139]  ? ceph_compare_super+0x510/0x510
[  607.201240][T21139]  legacy_get_tree+0xf2/0x200
[  607.205927][T21139]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  607.212303][T21139]  vfs_get_tree+0x123/0x450
[  607.216824][T21139]  do_mount+0x1436/0x2c40
[  607.221172][T21139]  ? copy_mount_string+0x40/0x40
[  607.227001][T21139]  ? _copy_from_user+0xdd/0x150
[  607.231871][T21139]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  607.238128][T21139]  ? memdup_user+0x65/0xb0
[  607.242578][T21139]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
07:29:58 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x20000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  607.248837][T21139]  ? copy_mount_options+0x280/0x3a0
[  607.254052][T21139]  __ia32_compat_sys_mount+0x664/0x790
[  607.254071][T21139]  ? trace_hardirqs_on+0x67/0x230
[  607.254094][T21139]  do_fast_syscall_32+0x281/0xc98
[  607.264601][T21139]  entry_SYSENTER_compat+0x70/0x7f
[  607.264614][T21139] RIP: 0023:0xf7fca869
[  607.264640][T21139] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
07:29:58 executing program 0:
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x801)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sco\x00')
ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x9, 0x1446})

07:29:58 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x1508}}, 0x0)

[  607.264648][T21139] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  607.264662][T21139] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  607.264671][T21139] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  607.264686][T21139] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  607.330964][T21139] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  607.339038][T21139] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:29:58 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x3f000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:58 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x3508}}, 0x0)

07:29:58 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x48000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:58 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9c87000}, 0x0)

07:29:58 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

07:29:58 executing program 4 (fault-call:1 fault-nth:49):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:29:58 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  607.726945][T21919] FAULT_INJECTION: forcing a failure.
[  607.726945][T21919] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  607.740212][T21919] CPU: 1 PID: 21919 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  607.748206][T21919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  607.758301][T21919] Call Trace:
[  607.761630][T21919]  dump_stack+0x172/0x1f0
[  607.765985][T21919]  should_fail.cold+0xa/0x15
[  607.770587][T21919]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  607.776413][T21919]  ? __lock_acquire+0x548/0x3fb0
[  607.781362][T21919]  ? ceph_msgpool_init+0xc6/0x180
[  607.786396][T21919]  ? ceph_osdc_init+0x4c4/0x9a0
[  607.791258][T21919]  ? ceph_create_client+0x29c/0x370
[  607.796472][T21919]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  607.802741][T21919]  should_fail_alloc_page+0x50/0x60
[  607.807957][T21919]  __alloc_pages_nodemask+0x1a1/0x7e0
[  607.813359][T21919]  ? __alloc_pages_slowpath+0x28b0/0x28b0
[  607.819094][T21919]  ? find_held_lock+0x35/0x130
[  607.823886][T21919]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  607.829814][T21919]  cache_grow_begin+0x9c/0x860
[  607.834599][T21919]  ? ceph_kvmalloc+0x41/0xb6
[  607.839219][T21919]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  607.845476][T21919]  __kmalloc+0x67f/0x740
[  607.849739][T21919]  ? ceph_kvmalloc+0x41/0xb6
[  607.854370][T21919]  ceph_kvmalloc+0x41/0xb6
[  607.858821][T21919]  ceph_msg_new2+0x26c/0x440
[  607.863428][T21919]  ? msgpool_free+0x50/0x50
[  607.867941][T21919]  msgpool_alloc+0xa1/0x120
[  607.872487][T21919]  mempool_init_node+0x2e1/0x560
[  607.877440][T21919]  ? ceph_con_workfn.cold+0x269/0x269
[  607.882835][T21919]  mempool_create_node+0xca/0x140
[  607.887878][T21919]  ? msgpool_free+0x50/0x50
[  607.892394][T21919]  ? msgpool_free+0x50/0x50
[  607.896905][T21919]  ? ceph_con_workfn.cold+0x269/0x269
[  607.902311][T21919]  mempool_create+0x3a/0x50
[  607.906830][T21919]  ceph_msgpool_init+0xc6/0x180
[  607.911714][T21919]  ceph_osdc_init+0x4c4/0x9a0
[  607.916411][T21919]  ceph_create_client+0x29c/0x370
[  607.921451][T21919]  ceph_mount+0x471/0x1870
[  607.925888][T21919]  ? vfs_parse_fs_param+0x510/0x510
[  607.931100][T21919]  ? ceph_compare_super+0x510/0x510
[  607.936342][T21919]  legacy_get_tree+0xf2/0x200
[  607.941045][T21919]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  607.947303][T21919]  vfs_get_tree+0x123/0x450
[  607.951830][T21919]  do_mount+0x1436/0x2c40
[  607.956178][T21919]  ? copy_mount_string+0x40/0x40
[  607.961136][T21919]  ? _copy_from_user+0xdd/0x150
[  607.966008][T21919]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  607.972273][T21919]  ? memdup_user+0x65/0xb0
[  607.976712][T21919]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  607.982967][T21919]  ? copy_mount_options+0x280/0x3a0
[  607.988196][T21919]  __ia32_compat_sys_mount+0x664/0x790
[  607.993701][T21919]  ? trace_hardirqs_on+0x67/0x230
[  607.998747][T21919]  do_fast_syscall_32+0x281/0xc98
[  608.003880][T21919]  entry_SYSENTER_compat+0x70/0x7f
[  608.008999][T21919] RIP: 0023:0xf7fca869
[  608.013075][T21919] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  608.032695][T21919] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  608.041126][T21919] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  608.049207][T21919] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  608.057228][T21919] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  608.065232][T21919] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
07:29:59 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

[  608.073244][T21919] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  608.108685][T22050] binder: 21921:22050 ioctl c0306201 0 returned -14
07:29:59 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x4c000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:29:59 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x5408}}, 0x0)

07:29:59 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={<r1=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={<r2=>r1})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={r2})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x3, 0x8240)
ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f0000000180)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:29:59 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x60000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  608.401592][T22320] binder: 22316:22320 ioctl c0306201 0 returned -14
07:29:59 executing program 4 (fault-call:1 fault-nth:50):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:29:59 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x68000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  608.611928][T22553] FAULT_INJECTION: forcing a failure.
[  608.611928][T22553] name failslab, interval 1, probability 0, space 0, times 0
07:29:59 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xff600000}, 0x0)

07:29:59 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

[  608.724192][T22553] CPU: 1 PID: 22553 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  608.732321][T22553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  608.742846][T22553] Call Trace:
[  608.742877][T22553]  dump_stack+0x172/0x1f0
[  608.742900][T22553]  should_fail.cold+0xa/0x15
[  608.742922][T22553]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  608.742947][T22553]  ? ___might_sleep+0x163/0x280
[  608.765809][T22553]  __should_failslab+0x121/0x190
[  608.770775][T22553]  should_failslab+0x9/0x14
[  608.775294][T22553]  kmem_cache_alloc+0x2b2/0x6f0
[  608.780164][T22553]  ? ceph_kvmalloc+0x41/0xb6
[  608.784777][T22553]  ? ceph_msg_new2+0x309/0x440
[  608.789558][T22553]  ceph_msg_new2+0x3a/0x440
[  608.796235][T22553]  ? msgpool_free+0x50/0x50
[  608.802873][T22553]  msgpool_alloc+0xa1/0x120
[  608.807410][T22553]  mempool_init_node+0x2e1/0x560
[  608.812400][T22553]  ? ceph_con_workfn.cold+0x269/0x269
[  608.817837][T22553]  mempool_create_node+0xca/0x140
[  608.822970][T22553]  ? msgpool_free+0x50/0x50
[  608.828854][T22553]  ? msgpool_free+0x50/0x50
[  608.833373][T22553]  ? ceph_con_workfn.cold+0x269/0x269
[  608.838772][T22553]  mempool_create+0x3a/0x50
[  608.843322][T22553]  ceph_msgpool_init+0xc6/0x180
[  608.848193][T22553]  ceph_osdc_init+0x4c4/0x9a0
[  608.852904][T22553]  ceph_create_client+0x29c/0x370
[  608.857948][T22553]  ceph_mount+0x471/0x1870
[  608.862388][T22553]  ? vfs_parse_fs_param+0x510/0x510
[  608.867603][T22553]  ? ceph_compare_super+0x510/0x510
[  608.872855][T22553]  legacy_get_tree+0xf2/0x200
[  608.877580][T22553]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  608.883851][T22553]  vfs_get_tree+0x123/0x450
[  608.888374][T22553]  do_mount+0x1436/0x2c40
[  608.892726][T22553]  ? copy_mount_string+0x40/0x40
[  608.897701][T22553]  ? _copy_from_user+0xdd/0x150
[  608.902571][T22553]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  608.908829][T22553]  ? memdup_user+0x65/0xb0
[  608.913608][T22553]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  608.919873][T22553]  ? copy_mount_options+0x280/0x3a0
[  608.925094][T22553]  __ia32_compat_sys_mount+0x664/0x790
[  608.930565][T22553]  ? trace_hardirqs_on+0x67/0x230
[  608.936486][T22553]  do_fast_syscall_32+0x281/0xc98
[  608.941542][T22553]  entry_SYSENTER_compat+0x70/0x7f
[  608.946673][T22553] RIP: 0023:0xf7fca869
[  608.950748][T22553] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  608.970363][T22553] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  608.978815][T22553] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  608.986804][T22553] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  608.994781][T22553] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  609.002762][T22553] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  609.010745][T22553] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:30:00 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x6c000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:00 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:30:00 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x60ff}}, 0x0)

[  609.132151][T22787] binder: 22784:22787 ioctl c0306201 0 returned -14
07:30:00 executing program 4 (fault-call:1 fault-nth:51):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:00 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/185, 0xb9}, {&(0x7f00000000c0)=""/32, 0x20}, {&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f00000001c0)}, {&(0x7f0000000200)=""/71, 0x47}], 0x5, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x6540, 0x0)
ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000440)={0x4, @raw_data="f86b4cce4873667719ed56fe9eb664cc8e12f451a50c795aa1bc3959e262e0a8b039c05c7cc5f31b1b0d7f47b96ce7b1560bba32647c0d2be707c88e30731d74e621b7a714509bef1ad2fe7fcaf8e637db23e92e6ac086ce7ad4254f4e6701da4a4682a5bfd5275db4f0d23184370c51fc2e774e393c26c700adb5d05bd9e4b062c5511f0084b288d20f380375a17198d54348436b52ea38bad5c80624d0c91b4d7e35657dfc774aafa65e2bf6b74d7f7b58e127f7a361f7da5ec16e42bd252eefa78640b52cb7b7"})
ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0)

07:30:00 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x74000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  609.310312][T23024] FAULT_INJECTION: forcing a failure.
[  609.310312][T23024] name failslab, interval 1, probability 0, space 0, times 0
[  609.418107][T23024] CPU: 1 PID: 23024 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  609.426151][T23024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  609.436220][T23024] Call Trace:
[  609.439523][T23024]  dump_stack+0x172/0x1f0
[  609.443874][T23024]  should_fail.cold+0xa/0x15
[  609.448486][T23024]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  609.454311][T23024]  ? ___might_sleep+0x163/0x280
[  609.459231][T23024]  __should_failslab+0x121/0x190
[  609.464182][T23024]  should_failslab+0x9/0x14
[  609.468703][T23024]  kmem_cache_alloc+0x2b2/0x6f0
[  609.473564][T23024]  ? ceph_kvmalloc+0x41/0xb6
[  609.478168][T23024]  ? ceph_msg_new2+0x309/0x440
[  609.482953][T23024]  ceph_msg_new2+0x3a/0x440
[  609.487468][T23024]  ? msgpool_free+0x50/0x50
[  609.491977][T23024]  msgpool_alloc+0xa1/0x120
[  609.496495][T23024]  mempool_init_node+0x2e1/0x560
[  609.501452][T23024]  ? ceph_con_workfn.cold+0x269/0x269
[  609.506834][T23024]  mempool_create_node+0xca/0x140
[  609.511866][T23024]  ? msgpool_free+0x50/0x50
[  609.516380][T23024]  ? msgpool_free+0x50/0x50
[  609.520891][T23024]  ? ceph_con_workfn.cold+0x269/0x269
[  609.526274][T23024]  mempool_create+0x3a/0x50
[  609.530785][T23024]  ceph_msgpool_init+0xc6/0x180
[  609.535656][T23024]  ceph_osdc_init+0x4c4/0x9a0
[  609.540350][T23024]  ceph_create_client+0x29c/0x370
[  609.545390][T23024]  ceph_mount+0x471/0x1870
[  609.549823][T23024]  ? vfs_parse_fs_param+0x510/0x510
[  609.555032][T23024]  ? ceph_compare_super+0x510/0x510
[  609.560246][T23024]  legacy_get_tree+0xf2/0x200
[  609.564936][T23024]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  609.571197][T23024]  vfs_get_tree+0x123/0x450
[  609.575802][T23024]  do_mount+0x1436/0x2c40
[  609.580159][T23024]  ? copy_mount_string+0x40/0x40
[  609.585114][T23024]  ? _copy_from_user+0xdd/0x150
[  609.589979][T23024]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  609.596243][T23024]  ? memdup_user+0x65/0xb0
[  609.600672][T23024]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  609.606921][T23024]  ? copy_mount_options+0x280/0x3a0
[  609.612137][T23024]  __ia32_compat_sys_mount+0x664/0x790
07:30:00 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

[  609.617628][T23024]  ? trace_hardirqs_on+0x67/0x230
[  609.622672][T23024]  do_fast_syscall_32+0x281/0xc98
[  609.627718][T23024]  entry_SYSENTER_compat+0x70/0x7f
[  609.632840][T23024] RIP: 0023:0xf7fca869
[  609.636914][T23024] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  609.656538][T23024] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
07:30:00 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x101208}}, 0x0)

07:30:00 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x150800000000}, 0x0)

[  609.664962][T23024] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  609.672945][T23024] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  609.680929][T23024] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  609.688913][T23024] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  609.696895][T23024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:30:00 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x7a000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:00 executing program 4 (fault-call:1 fault-nth:52):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:00 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x2, 0xa002)
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40400, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000024}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x55a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c4}, 0x80)

07:30:00 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x100000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  610.013697][T23485] FAULT_INJECTION: forcing a failure.
[  610.013697][T23485] name failslab, interval 1, probability 0, space 0, times 0
[  610.067100][T23485] CPU: 1 PID: 23485 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  610.075149][T23485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  610.085229][T23485] Call Trace:
[  610.088552][T23485]  dump_stack+0x172/0x1f0
[  610.093012][T23485]  should_fail.cold+0xa/0x15
[  610.097644][T23485]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  610.103484][T23485]  ? ___might_sleep+0x163/0x280
[  610.108365][T23485]  __should_failslab+0x121/0x190
[  610.113362][T23485]  should_failslab+0x9/0x14
[  610.117891][T23485]  __kmalloc+0x2dc/0x740
[  610.122149][T23485]  ? rcu_read_lock_sched_held+0x110/0x130
[  610.127879][T23485]  ? kmem_cache_alloc+0x32e/0x6f0
[  610.132916][T23485]  ? ceph_kvmalloc+0x41/0xb6
[  610.137532][T23485]  ceph_kvmalloc+0x41/0xb6
[  610.141966][T23485]  ceph_msg_new2+0x26c/0x440
[  610.146569][T23485]  ? msgpool_free+0x50/0x50
[  610.151081][T23485]  msgpool_alloc+0xa1/0x120
[  610.155600][T23485]  mempool_init_node+0x2e1/0x560
[  610.160567][T23485]  ? ceph_con_workfn.cold+0x269/0x269
[  610.165955][T23485]  mempool_create_node+0xca/0x140
[  610.166471][T23532] binder: 23528:23532 ioctl c0306201 0 returned -14
[  610.170992][T23485]  ? msgpool_free+0x50/0x50
[  610.171009][T23485]  ? msgpool_free+0x50/0x50
[  610.171023][T23485]  ? ceph_con_workfn.cold+0x269/0x269
[  610.171041][T23485]  mempool_create+0x3a/0x50
[  610.171058][T23485]  ceph_msgpool_init+0xc6/0x180
[  610.171078][T23485]  ceph_osdc_init+0x4c4/0x9a0
[  610.206038][T23485]  ceph_create_client+0x29c/0x370
[  610.211081][T23485]  ceph_mount+0x471/0x1870
07:30:01 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x200000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  610.215526][T23485]  ? vfs_parse_fs_param+0x510/0x510
[  610.220747][T23485]  ? ceph_compare_super+0x510/0x510
[  610.225959][T23485]  legacy_get_tree+0xf2/0x200
[  610.230660][T23485]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  610.236915][T23485]  vfs_get_tree+0x123/0x450
[  610.241431][T23485]  do_mount+0x1436/0x2c40
[  610.245776][T23485]  ? copy_mount_string+0x40/0x40
[  610.250720][T23485]  ? _copy_from_user+0xdd/0x150
[  610.255596][T23485]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  610.261878][T23485]  ? memdup_user+0x65/0xb0
[  610.266332][T23485]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  610.272583][T23485]  ? copy_mount_options+0x280/0x3a0
[  610.277823][T23485]  __ia32_compat_sys_mount+0x664/0x790
[  610.283303][T23485]  ? trace_hardirqs_on+0x67/0x230
[  610.288354][T23485]  do_fast_syscall_32+0x281/0xc98
[  610.293399][T23485]  entry_SYSENTER_compat+0x70/0x7f
[  610.298524][T23485] RIP: 0023:0xf7fca869
[  610.302602][T23485] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  610.322238][T23485] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  610.330665][T23485] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  610.338658][T23485] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  610.346660][T23485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  610.354660][T23485] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
07:30:01 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x800408}}, 0x0)

[  610.362653][T23485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:30:01 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x300000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:01 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:30:01 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)

[  610.556478][T23863] binder: 23845:23863 ioctl c0306201 0 returned -14
07:30:01 executing program 4 (fault-call:1 fault-nth:53):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:01 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x350800000000}, 0x0)

07:30:01 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x400000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  610.705094][T24079] FAULT_INJECTION: forcing a failure.
[  610.705094][T24079] name failslab, interval 1, probability 0, space 0, times 0
[  610.778351][T24079] CPU: 0 PID: 24079 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  610.786389][T24079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  610.796466][T24079] Call Trace:
[  610.799801][T24079]  dump_stack+0x172/0x1f0
[  610.804162][T24079]  should_fail.cold+0xa/0x15
[  610.808784][T24079]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  610.814634][T24079]  ? ___might_sleep+0x163/0x280
[  610.819632][T24079]  __should_failslab+0x121/0x190
[  610.826108][T24079]  should_failslab+0x9/0x14
[  610.830646][T24079]  __kmalloc+0x2dc/0x740
[  610.834921][T24079]  ? rcu_read_lock_sched_held+0x110/0x130
[  610.840757][T24079]  ? kmem_cache_alloc+0x32e/0x6f0
[  610.845895][T24079]  ? ceph_kvmalloc+0x41/0xb6
[  610.850506][T24079]  ceph_kvmalloc+0x41/0xb6
[  610.855209][T24079]  ceph_msg_new2+0x26c/0x440
[  610.859825][T24079]  ? msgpool_free+0x50/0x50
[  610.864356][T24079]  msgpool_alloc+0xa1/0x120
[  610.868893][T24079]  mempool_init_node+0x2e1/0x560
[  610.873861][T24079]  ? ceph_con_workfn.cold+0x269/0x269
[  610.879719][T24079]  mempool_create_node+0xca/0x140
[  610.884796][T24079]  ? msgpool_free+0x50/0x50
[  610.896544][T24079]  ? msgpool_free+0x50/0x50
[  610.901069][T24079]  ? ceph_con_workfn.cold+0x269/0x269
[  610.906469][T24079]  mempool_create+0x3a/0x50
[  610.910997][T24079]  ceph_msgpool_init+0xc6/0x180
[  610.915874][T24079]  ceph_osdc_init+0x4c4/0x9a0
[  610.920688][T24079]  ceph_create_client+0x29c/0x370
[  610.925754][T24079]  ceph_mount+0x471/0x1870
[  610.930196][T24079]  ? vfs_parse_fs_param+0x510/0x510
[  610.936258][T24079]  ? ceph_compare_super+0x510/0x510
[  610.941681][T24079]  legacy_get_tree+0xf2/0x200
[  610.946659][T24079]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  610.952930][T24079]  vfs_get_tree+0x123/0x450
[  610.957455][T24079]  do_mount+0x1436/0x2c40
[  610.961808][T24079]  ? copy_mount_string+0x40/0x40
[  610.966762][T24079]  ? _copy_from_user+0xdd/0x150
[  610.971642][T24079]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  610.977993][T24079]  ? memdup_user+0x65/0xb0
[  610.982433][T24079]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  610.988707][T24079]  ? copy_mount_options+0x280/0x3a0
[  610.993957][T24079]  __ia32_compat_sys_mount+0x664/0x790
[  610.999439][T24079]  ? trace_hardirqs_on+0x67/0x230
[  611.004478][T24079]  do_fast_syscall_32+0x281/0xc98
[  611.009524][T24079]  entry_SYSENTER_compat+0x70/0x7f
[  611.014671][T24079] RIP: 0023:0xf7fca869
[  611.018840][T24079] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  611.038546][T24079] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  611.046981][T24079] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  611.054991][T24079] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  611.062976][T24079] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  611.070962][T24079] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
07:30:02 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x901208}}, 0x0)

07:30:02 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x500000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  611.078949][T24079] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:30:02 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:30:02 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)

07:30:02 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x600000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  611.348472][T24444] binder: 24431:24444 ioctl c0306201 0 returned -14
07:30:02 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0xe05108}}, 0x0)

07:30:02 executing program 4 (fault-call:1 fault-nth:54):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:02 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x700000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:02 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800000000)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  611.637145][T24705] FAULT_INJECTION: forcing a failure.
[  611.637145][T24705] name failslab, interval 1, probability 0, space 0, times 0
[  611.742397][T24705] CPU: 1 PID: 24705 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  611.751136][T24705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  611.761214][T24705] Call Trace:
[  611.764522][T24705]  dump_stack+0x172/0x1f0
[  611.768882][T24705]  should_fail.cold+0xa/0x15
[  611.773493][T24705]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  611.779322][T24705]  ? ___might_sleep+0x163/0x280
[  611.784195][T24705]  __should_failslab+0x121/0x190
[  611.789168][T24705]  should_failslab+0x9/0x14
[  611.793698][T24705]  __kmalloc+0x2dc/0x740
[  611.797968][T24705]  ? rcu_read_lock_sched_held+0x110/0x130
[  611.803814][T24705]  ? kmem_cache_alloc+0x32e/0x6f0
[  611.808876][T24705]  ? ceph_kvmalloc+0x41/0xb6
[  611.813491][T24705]  ceph_kvmalloc+0x41/0xb6
[  611.817957][T24705]  ceph_msg_new2+0x26c/0x440
[  611.822565][T24705]  ? msgpool_free+0x50/0x50
[  611.827078][T24705]  msgpool_alloc+0xa1/0x120
[  611.831600][T24705]  mempool_init_node+0x2e1/0x560
[  611.836575][T24705]  ? ceph_con_workfn.cold+0x269/0x269
[  611.842332][T24705]  mempool_create_node+0xca/0x140
[  611.847382][T24705]  ? msgpool_free+0x50/0x50
[  611.851899][T24705]  ? msgpool_free+0x50/0x50
[  611.856428][T24705]  ? ceph_con_workfn.cold+0x269/0x269
[  611.861828][T24705]  mempool_create+0x3a/0x50
[  611.866355][T24705]  ceph_msgpool_init+0xc6/0x180
[  611.871233][T24705]  ceph_osdc_init+0x4c4/0x9a0
[  611.875934][T24705]  ceph_create_client+0x29c/0x370
[  611.880989][T24705]  ceph_mount+0x471/0x1870
[  611.885434][T24705]  ? vfs_parse_fs_param+0x510/0x510
[  611.890668][T24705]  ? ceph_compare_super+0x510/0x510
[  611.895896][T24705]  legacy_get_tree+0xf2/0x200
[  611.900597][T24705]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  611.906869][T24705]  vfs_get_tree+0x123/0x450
[  611.911399][T24705]  do_mount+0x1436/0x2c40
[  611.915755][T24705]  ? copy_mount_string+0x40/0x40
[  611.920804][T24705]  ? _copy_from_user+0xdd/0x150
[  611.925688][T24705]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  611.927152][T24776] binder: 24740:24776 ioctl c0306201 0 returned -14
07:30:02 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x2000000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  611.932434][T24705]  ? memdup_user+0x65/0xb0
[  611.932452][T24705]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  611.932467][T24705]  ? copy_mount_options+0x280/0x3a0
[  611.932491][T24705]  __ia32_compat_sys_mount+0x664/0x790
[  611.932509][T24705]  ? trace_hardirqs_on+0x67/0x230
[  611.932530][T24705]  do_fast_syscall_32+0x281/0xc98
[  611.932553][T24705]  entry_SYSENTER_compat+0x70/0x7f
[  611.976079][T24705] RIP: 0023:0xf7fca869
[  611.980175][T24705] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  611.999801][T24705] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  612.008248][T24705] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  612.008258][T24705] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  612.008265][T24705] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  612.008273][T24705] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
07:30:02 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x60ffffffffff}, 0x0)

[  612.008280][T24705] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:30:03 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x8048000}}, 0x0)

07:30:03 executing program 4 (fault-call:1 fault-nth:55):
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:03 executing program 0:
setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x10000, 0xff}, {0x9, 0x5}]}, 0x14, 0x1)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x73c, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0xffffffff, 0xa30c, 0xd2, 0x3, 0x12, 0x7, 0xffffffff, 0x81, 0x8, 0x5, 0x1, 0x80})
clone(0x1fffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  612.374695][T25123] FAULT_INJECTION: forcing a failure.
[  612.374695][T25123] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  612.388297][T25123] CPU: 1 PID: 25123 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  612.396474][T25123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  612.406645][T25123] Call Trace:
[  612.409959][T25123]  dump_stack+0x172/0x1f0
[  612.414321][T25123]  should_fail.cold+0xa/0x15
[  612.418943][T25123]  ? fault_create_debugfs_attr+0x1e0/0x1e0
07:30:03 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x3f00000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  612.424819][T25123]  ? __lock_acquire+0x548/0x3fb0
[  612.428442][T25127] binder: 25126:25127 ioctl c0306201 0 returned -14
[  612.429780][T25123]  ? ceph_msgpool_init+0xc6/0x180
[  612.429794][T25123]  ? ceph_osdc_init+0x4c4/0x9a0
[  612.429811][T25123]  ? ceph_create_client+0x29c/0x370
[  612.429827][T25123]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  612.429850][T25123]  should_fail_alloc_page+0x50/0x60
[  612.463012][T25123]  __alloc_pages_nodemask+0x1a1/0x7e0
[  612.468421][T25123]  ? __alloc_pages_slowpath+0x28b0/0x28b0
[  612.474193][T25123]  ? find_held_lock+0x35/0x130
[  612.479074][T25123]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  612.484906][T25123]  cache_grow_begin+0x9c/0x860
[  612.489745][T25123]  ? ceph_kvmalloc+0x41/0xb6
[  612.494363][T25123]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  612.500659][T25123]  __kmalloc+0x67f/0x740
[  612.505141][T25123]  ? ceph_kvmalloc+0x41/0xb6
[  612.509798][T25123]  ceph_kvmalloc+0x41/0xb6
[  612.514243][T25123]  ceph_msg_new2+0x26c/0x440
[  612.518858][T25123]  ? msgpool_free+0x50/0x50
[  612.523381][T25123]  msgpool_alloc+0xa1/0x120
[  612.527909][T25123]  mempool_init_node+0x2e1/0x560
[  612.532876][T25123]  ? ceph_con_workfn.cold+0x269/0x269
[  612.538285][T25123]  mempool_create_node+0xca/0x140
[  612.543327][T25123]  ? msgpool_free+0x50/0x50
[  612.547851][T25123]  ? msgpool_free+0x50/0x50
[  612.552371][T25123]  ? ceph_con_workfn.cold+0x269/0x269
[  612.557765][T25123]  mempool_create+0x3a/0x50
[  612.562292][T25123]  ceph_msgpool_init+0xc6/0x180
[  612.567165][T25123]  ceph_osdc_init+0x4c4/0x9a0
07:30:03 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)

[  612.571914][T25123]  ceph_create_client+0x29c/0x370
[  612.576966][T25123]  ceph_mount+0x471/0x1870
[  612.581410][T25123]  ? vfs_parse_fs_param+0x510/0x510
[  612.586653][T25123]  ? ceph_compare_super+0x510/0x510
[  612.591881][T25123]  legacy_get_tree+0xf2/0x200
[  612.596579][T25123]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  612.602854][T25123]  vfs_get_tree+0x123/0x450
[  612.607380][T25123]  do_mount+0x1436/0x2c40
[  612.611736][T25123]  ? copy_mount_string+0x40/0x40
[  612.616702][T25123]  ? _copy_from_user+0xdd/0x150
[  612.621579][T25123]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  612.627882][T25123]  ? memdup_user+0x65/0xb0
[  612.632322][T25123]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  612.638584][T25123]  ? copy_mount_options+0x280/0x3a0
[  612.643828][T25123]  __ia32_compat_sys_mount+0x664/0x790
[  612.649309][T25123]  ? trace_hardirqs_on+0x67/0x230
[  612.654385][T25123]  do_fast_syscall_32+0x281/0xc98
[  612.659435][T25123]  entry_SYSENTER_compat+0x70/0x7f
[  612.664595][T25123] RIP: 0023:0xf7fca869
07:30:03 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x8121000}}, 0x0)

[  612.668704][T25123] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  612.688330][T25123] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  612.696768][T25123] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  612.704761][T25123] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  612.712758][T25123] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  612.720749][T25123] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  612.728739][T25123] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
07:30:03 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001fbc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x111, 0x100b}}, 0x20)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r2, 0x4}}, 0x18)
lseek(r0, 0x0, 0x3)

[  612.893578][T25458] binder: 25419:25458 ioctl c0306201 0 returned -14
07:30:03 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x4800000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:03 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x7fffffffefff}, 0x0)

07:30:04 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x8129000}}, 0x0)

07:30:04 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x4c00000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:04 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x801, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400ad80", @ANYRES16=r2, @ANYBLOB="00082dbd7000fedbdf25060000002000020008000b000200000014000100ac1414bb000000000000000000000000080005000300000008000500ae9f0000"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x40)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:30:04 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:04 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

[  613.376764][T25852] binder: 25849:25852 ioctl c0306201 0 returned -14
07:30:04 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x8150000}}, 0x0)

07:30:04 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x6000000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:04 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x1ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:30:04 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

[  613.761474][T26185] binder: 26121:26185 ioctl c0306201 0 returned -14
07:30:04 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[%::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:04 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x6800000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  613.869879][T26319] libceph: resolve '%' (ret=-3): failed
07:30:04 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x10120800000000}, 0x0)

07:30:04 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x8350000}}, 0x0)

[  613.922942][T26319] libceph: parse_ips bad ip '[%::]'
07:30:04 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[.::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:05 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x6c00000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:05 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

[  614.134572][T26529] libceph: resolve '.' (ret=-3): failed
[  614.171255][T26529] libceph: parse_ips bad ip '[.::]'
07:30:05 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x10100, 0x0)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00')
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:30:05 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[:::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:05 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x7400000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  614.316437][T26705] libceph: parse_ips bad ip '[:::]'
07:30:05 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[]::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  614.395440][T26710] binder: 26709:26710 ioctl c0306201 0 returned -14
07:30:05 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x851e000}}, 0x0)

[  614.442361][T26765] libceph: parse_ips bad ip '[]::]'
07:30:05 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d]:]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:05 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

[  614.614386][T26974] libceph: resolve 'd' (ret=-3): failed
[  614.668572][T26974] libceph: parse_ips bad ip '[d]:]'
07:30:05 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x50c60900000000}, 0x0)

07:30:05 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x7a00000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:05 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0xfffffffffffffffe)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0)
ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x8)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:30:05 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x8540000}}, 0x0)

07:30:05 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d:]]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:05 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

[  614.902689][T27063] libceph: resolve 'd' (ret=-3): failed
07:30:05 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

[  614.954907][T27063] libceph: parse_ips bad ip '[d:]]'
07:30:05 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::::/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:06 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x0, 0x0, 0x0})

[  615.096063][T27288] libceph: resolve 'd' (ret=-3): failed
[  615.114743][T27288] libceph: parse_ips bad ip '[d:::'
07:30:06 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::d:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:06 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

[  615.205080][T27343] binder: 27336:27343 unknown command 10
[  615.231958][T27343] binder: 27336:27343 ioctl c0306201 200003c0 returned -22
[  615.251015][T27371] libceph: parse_ips bad ip '[d::d'
07:30:06 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]]/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  615.385817][T27468] ceph: device name is missing path (no : separator in [d::]]/llb:)
07:30:06 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x70c80900000000}, 0x0)

07:30:06 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000040)="e8cf194f5138")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:30:06 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0xff600000}}, 0x0)

07:30:06 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/%lb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:06 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='c\x00\x00\x00'], 0x0, 0x0, 0x0})

07:30:06 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

[  615.824223][T27505] binder: 27501:27505 unknown command 99
[  615.835531][T27514] binder: 27506:27514 ioctl c0306201 0 returned -14
[  615.858462][T27505] binder: 27501:27505 ioctl c0306201 200003c0 returned -22
07:30:06 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/l%b:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:06 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x150800000000}}, 0x0)

07:30:07 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='\vc\x00\x00'], 0x0, 0x0, 0x0})

07:30:07 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7fff, 0x12602)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111, 0x4}}, 0x20)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(r1, &(0x7f0000001440)=[{&(0x7f00000000c0)=""/22, 0x16}, {&(0x7f0000000100)=""/240, 0xf0}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000003c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6)
ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000001480)=0x80000000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  616.164264][T27831] binder: 27830:27831 ERROR: BC_REGISTER_LOOPER called without request
[  616.249311][T27842] binder: 27840:27842 ioctl c0306201 0 returned -14
07:30:07 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

07:30:07 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0})

07:30:07 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x80040800000000}, 0x0)

07:30:07 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/ll%:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:07 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x350800000000}}, 0x0)

07:30:07 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
rt_sigpending(&(0x7f0000000040), 0x8)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:30:07 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0})

[  616.795676][T28268] binder: 28257:28268 ioctl c0306201 0 returned -14
07:30:07 executing program 2:
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

07:30:07 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12670000"], 0x0, 0x0, 0x0})

07:30:07 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb]\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  617.026701][T28552] binder: 28548:28552 unknown command 26386
[  617.032700][T28552] binder: 28548:28552 ioctl c0306201 200003c0 returned -22
07:30:08 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x540800000000}}, 0x0)

07:30:08 executing program 2:
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

07:30:08 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x802)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:30:08 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="ffe0f505"], 0x0, 0x0, 0x0})

[  617.235081][T28665] binder: 28663:28665 ioctl c0306201 0 returned -14
[  617.398179][T28833] binder: 28822:28833 unknown command 99999999
[  617.411733][T28833] binder: 28822:28833 ioctl c0306201 200003c0 returned -22
07:30:08 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x90120800000000}, 0x0)

07:30:08 executing program 2:
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

07:30:08 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x02', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:08 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x60ffffffffff}}, 0x0)

07:30:08 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x4103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000000)=""/91)

07:30:08 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0})

07:30:08 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

[  617.728341][T29022] binder: BC_ACQUIRE_RESULT not supported
[  617.744667][T29022] binder: 29019:29022 ioctl c0306201 200003c0 returned -22
[  617.752334][T29026] binder: 29016:29026 ioctl c0306201 0 returned -14
07:30:08 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

07:30:08 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x03', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:08 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})

07:30:08 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3e, 0x2)
sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x108c, 0x29, 0x20, 0x70bd2c, 0x25dfdbff, {0x13}, [@typed={0x8, 0x50, @u32=0x70}, @generic="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", @nested={0x70, 0x8f, [@generic="dbc9219c92a6f444f9e55a2faf3777f1dee4a3171a67e5b3a7e55cf76ab10c4614ee937ed5953c03d309d0b211fc1d2e7668addd6d608d759eda356b90d9e0d91b4220d2bbbea2c486b5023ea050933116821f4f5cfca49e49648a89cf2a7de78f68b88d82eead24d4"]}]}, 0x108c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

07:30:08 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x7fffffffefff}}, 0x0)

[  618.156154][T29390] binder: 29360:29390 ioctl c0306201 0 returned -14
07:30:09 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffefffffff7f0000}, 0x0)

07:30:09 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

07:30:09 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x04', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:09 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="07630440"], 0x0, 0x0, 0x0})

07:30:09 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:30:09 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x10120800000000}}, 0x0)

[  618.642376][T29675] binder: 29674:29675 DecRefs 0 refcount change on invalid ref 0 ret -22
[  618.668789][T29683] binder: 29677:29683 ioctl c0306201 0 returned -14
07:30:09 executing program 2:
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

07:30:09 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0})

07:30:09 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x05', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  618.884257][T29965] cgroup: fork rejected by pids controller in /syz2
07:30:09 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x80040800000000}}, 0x0)

07:30:09 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64IPIN\x00', &(0x7f0000000040)='/dev/binder#\x00', 0xd, 0x1)

[  618.927813][T30009] binder: 30008:30009 BC_FREE_BUFFER u0000000000000000 no match
07:30:10 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0})

[  619.061296][T30125] binder: 30061:30125 ioctl c0306201 0 returned -14
[  619.206470][T30383] binder: BC_ATTEMPT_ACQUIRE not supported
[  619.236927][T30383] binder: 30381:30383 ioctl c0306201 200003c0 returned -22
07:30:10 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x06', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:10 executing program 2:
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

07:30:10 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffff600000}, 0x0)

07:30:10 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x90120800000000}}, 0x0)

07:30:10 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

07:30:10 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="10630840"], 0x0, 0x0, 0x0})

[  619.581854][T30543] binder: 30541:30543 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  619.602580][T30550] binder: 30540:30550 ioctl c0306201 0 returned -14
07:30:10 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:30:10 executing program 2:
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

07:30:10 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\a', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:10 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0xe0510800000000}}, 0x0)

[  619.859463][T30961] binder: 30959:30961 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:30:10 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:30:11 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0})

[  620.026159][T31194] binder: 31131:31194 ioctl c0306201 0 returned -14
07:30:11 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0xffefffffff7f0000}}, 0x0)

07:30:11 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\n', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  620.137350][T31307] binder: 31306:31307 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
07:30:11 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1508}, 0x0)

07:30:11 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

07:30:11 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="08631040"], 0x0, 0x0, 0x0})

07:30:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:30:11 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x1c', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:11 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0xffffffffff600000}}, 0x0)

[  620.514794][T31615] binder: 31614:31615 BC_INCREFS_DONE u0000000000000000 no match
[  620.526103][T31619] binder: 31617:31619 ioctl c0306201 0 returned -14
07:30:11 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09631040"], 0x0, 0x0, 0x0})

07:30:11 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

07:30:11 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x1508}}, 0x0)

07:30:11 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\xd8', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  620.765907][T32022] binder: 32019:32022 BC_ACQUIRE_DONE u0000000000000000 no match
07:30:11 executing program 0:
r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x200000, 0x20000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x4, 0x2}], 0x3b, 0x0, &(0x7f0000000080)="7fae5361a8b8029b0e8af5b81c2844977d92b32299ce6a934c6f15c5b472d5e05896ebf06ec778be498a7a18938d0639fd4e3cc2708c271fa23163"})
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

07:30:11 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[  620.932497][T32070] binder: 32066:32070 ioctl c0306201 0 returned -14
[  621.176057][    T5] binder: release 32359:32366 transaction 69 out, still active
[  621.189682][    T5] binder: undelivered TRANSACTION_COMPLETE
07:30:12 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3508}, 0x0)

07:30:12 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x3508}}, 0x0)

07:30:12 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\xe4', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:12 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

07:30:12 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="01634040"], 0x0, 0x0, 0x0})

07:30:12 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
sendfile64(r0, 0xffffffffffffffff, 0x0, 0x8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00'})
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0)
syz_open_dev$dri(0x0, 0x0, 0x0)
close(r1)
getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f0000000100))
sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x10)
getegid()
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4004081)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0x4, 0x400000)
write$P9_RUNLINKAT(r3, &(0x7f0000000480)={0x7, 0x4d, 0x1}, 0x7)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x600, 0x0)
ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f0000000380)=0xaa)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000040)={0x1, {{0xa, 0x4e20, 0x80000000, @local, 0x5}}, {{0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}}, 0x104)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000340)={0x1, 0x0, &(0x7f0000000180)="f09acfabcffcc81526a98efa3c7e860569923d10d00ca19aa70b0bdfca69cc27a1257b3b968960aa617addeaee1f3b9aca9db7de914353de5bfe4045195de22a70ae4662ad6c9e1d03fc6533c4a1f84e94ff7094c0e16bf31c3b10da891f1fae7e9315e15701b9e913589d40f185cbbd3adb36d66f26d99a6024c78aeb25ee1a4c1545aab0c93fd62a7b996a17e7a164116d6275471da93c449fd055ebb877e5fec1517ae975693b908dcc2d2a3b99c6718459b776acedaf3caedfa31ebb82c2a333861cb8cc561457376d681edbb2dda322433f9a03e74bb3e3", &(0x7f0000000280)="9f05aea1621479aa2943de8846905bef861f73a5c3df33e0e50064f7dab5a9e1c8d444e5799d5004cea9f789ff20dab9d5d2a590f3d970fb622dde9745f9ebf7e01cd06af41c0d3b4df430025f998ece778ea1b659d4d7f8e82148a4502857aa1c9517ab3521733055ebb35a39db7aa7ab8d22067bcb98fdd379a7a88bf25cf8eee9697159243fa32f19c369f376bc321f61ee30403f29d891422e34cfc49591", 0xda, 0xa0})

[  621.435633][T32581] binder: 32574:32581 got reply transaction with no transaction stack
[  621.452979][T32581] binder: 32574:32581 transaction failed 29201/-71, size 0-0 line 2899
[  621.522079][T32584] binder: 32573:32584 ioctl c0306201 0 returned -14
07:30:12 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

07:30:12 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x5408}}, 0x0)

07:30:12 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})

07:30:12 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\xf0', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  621.682633][T13054] binder: undelivered TRANSACTION_ERROR: 29201
07:30:12 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

07:30:12 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7ff0000000, 0x40c000)
write$FUSE_LSEEK(r1, &(0x7f0000000080)={0x18, 0xfffffffffffffffe, 0x7, {0x2}}, 0x18)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="290000006a5581040000000000000000ae00f55c4dd9aef95c5c00000000010000000000000104150000000000000bdcc9020000000000000000d6269a95c5e8a051"], 0x29)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0)
ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000140)='hwsim0\x00')
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f00000000c0)=0xbb86, 0x8)

[  621.942455][T13054] binder: release 563:573 transaction 71 out, still active
[  621.951311][T13054] binder: undelivered TRANSACTION_COMPLETE
[  622.027698][  T866] binder: 865:866 ioctl c0306201 0 returned -14
07:30:13 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff}, 0x0)

07:30:13 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12634840"], 0x0, 0x0, 0x0})

07:30:13 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x04', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:13 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x60ff}}, 0x0)

07:30:13 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

07:30:13 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, r1, 0xc, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x23}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40004}, 0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x80000000, 0x0)
ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0186416, &(0x7f0000000040)={0x10001, 0x68b, 0x7, 0x1, 0x5, 0x9})

[  622.374641][ T1081] binder: 1080:1081 got reply transaction with no transaction stack
[  622.394797][ T1093] binder: 1074:1093 ioctl c0306201 0 returned -14
[  622.398250][ T1081] binder: 1080:1081 transaction failed 29201/-71, size 0-0 line 2899
07:30:13 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

07:30:13 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="51670200"], 0x0, 0x0, 0x0})

07:30:13 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x80', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:13 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x101208}}, 0x0)

[  622.576651][   T22] binder: undelivered TRANSACTION_ERROR: 29201
07:30:13 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x4000000400)
r1 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x3, 0x111000)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f00000002c0)={0x15, 0x8fbd, 0x8006, 0x2, 0xfffffffffffffffc, 0x9, 0x6, 0x1, <r2=>0x0}, &(0x7f0000000300)=0x20)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000380)={0xfffffffffffffff9, 0x3, 0x0, 0x6, 0x9, 0x0, 0x691, 0x1, r2}, &(0x7f00000003c0)=0x20)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0xd33415e0087f13ca, 0x0)
ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000240))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x100)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="080028bd7000fcdbdf250100000008000500ff7fffff08000500110b000008000400000000002c000100080000008f990000080600003c00000008000b00736970000800010002000000000800ff00000014001d67626373683008000000000000000000000800080020000000acf387aa24d2441c7e8ad5de68"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x40000)

[  622.669242][ T1514] binder: 1513:1514 unknown command 157521
[  622.711423][ T1514] binder: 1513:1514 ioctl c0306201 200003c0 returned -22
[  622.766608][ T1561] binder: 1522:1561 ioctl c0306201 0 returned -14
07:30:13 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x800408}}, 0x0)

07:30:14 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x101208}, 0x0)

07:30:14 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="51670300"], 0x0, 0x0, 0x0})

07:30:14 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x80', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:14 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x800)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = dup2(r0, r0)
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80206433, &(0x7f0000000000)=""/73)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:30:14 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

07:30:14 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x901208}}, 0x0)

[  623.318738][ T2069] binder: 2059:2069 unknown command 223057
[  623.330280][ T2066] binder: 2064:2066 ioctl 80206433 20000000 returned -22
[  623.340781][ T2069] binder: 2059:2069 ioctl c0306201 200003c0 returned -22
[  623.360066][ T2066] binder: 2064:2066 ioctl c0306201 0 returned -14
07:30:14 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="51670400"], 0x0, 0x0, 0x0})

07:30:14 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:14 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

[  623.590481][ T2453] binder: 2451:2453 unknown command 288593
[  623.625238][ T2453] binder: 2451:2453 ioctl c0306201 200003c0 returned -22
07:30:14 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={<r1=>0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440020000000c63060009631040", @ANYRES64=r1, @ANYBLOB="04000000000000000b6300000b630000"], 0x1000, 0x0, &(0x7f0000000440)="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"})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:30:14 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0xe05108}}, 0x0)

[  623.778000][ T2637] binder: 2599:2637 Release 1 refcount change on invalid ref 2 ret -22
07:30:14 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\xa2', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  623.820668][ T2637] binder: 2599:2637 unknown command 418572
[  623.849342][ T2637] binder: 2599:2637 ioctl c0306201 20000080 returned -22
07:30:15 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50c609}, 0x0)

07:30:15 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="51670500"], 0x0, 0x0, 0x0})

07:30:15 executing program 0:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000180)=0x9)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xa002, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={<r3=>0x0, 0x5}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000000c0)={r3, 0x3}, &(0x7f0000000100)=0x8)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

07:30:15 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x8048000}}, 0x0)

07:30:15 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

07:30:15 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  624.296692][ T2952] binder: 2951:2952 unknown command 354129
[  624.321666][ T2963] binder: 2950:2963 ioctl c0306201 0 returned -14
[  624.331418][ T2952] binder: 2951:2952 ioctl c0306201 200003c0 returned -22
07:30:15 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="51670600"], 0x0, 0x0, 0x0})

07:30:15 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x8121000}}, 0x0)

07:30:15 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:15 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20000, 0x0)
setsockopt$inet6_dccp_buf(r0, 0x21, 0xe, &(0x7f0000000040)="e52ebb1e27885f155d0b6a061073e04a30ba3f646f", 0x15)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x140, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x1})

[  624.666295][ T3378] binder: 3371:3378 unknown command 419665
[  624.688631][ T3378] binder: 3371:3378 ioctl c0306201 200003c0 returned -22
07:30:15 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\a\x00'], 0x0, 0x0, 0x0})

07:30:15 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  625.060898][ T3668] binder: 3659:3668 unknown command 485201
[  625.073890][ T3668] binder: 3659:3668 ioctl c0306201 200003c0 returned -22
07:30:16 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x70c809}, 0x0)

07:30:16 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

07:30:16 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x8129000}}, 0x0)

07:30:16 executing program 0:
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x80101, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in=@multicast2, @in6=@ipv4={[], [], @initdev}}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000240)=0xe8)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x100000001, 0x200002)
getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:30:16 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='QgH\x00'], 0x0, 0x0, 0x0})

07:30:16 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  625.304378][ T3875] binder: 3874:3875 unknown command 4745041
[  625.326763][ T3879] binder: 3872:3879 ioctl c0306201 0 returned -14
[  625.330275][ T3875] binder: 3874:3875 ioctl c0306201 200003c0 returned -22
07:30:16 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb: ', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:16 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='QgL\x00'], 0x0, 0x0, 0x0})

07:30:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:30:16 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x8150000}}, 0x0)

[  625.698838][ T4241] binder: 4236:4241 unknown command 5007185
[  625.745211][ T4241] binder: 4236:4241 ioctl c0306201 200003c0 returned -22
[  625.789415][ T4266] binder: 4265:4266 ioctl c0306201 0 returned -14
07:30:16 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x8350000}}, 0x0)

07:30:16 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg`\x00'], 0x0, 0x0, 0x0})

[  626.090767][ T4515] binder: 4514:4515 unknown command 6317905
07:30:17 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800408}, 0x0)

07:30:17 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8)
setrlimit(0x1, &(0x7f0000011000))
r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
ftruncate(r1, 0x7)
clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x200000)
ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:30:17 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

[  626.163470][ T4515] binder: 4514:4515 ioctl c0306201 200003c0 returned -22
[  626.276767][ T4671] binder: 4669:4671 ioctl c0306201 0 returned -14
07:30:17 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qgh\x00'], 0x0, 0x0, 0x0})

07:30:17 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x851e000}}, 0x0)

07:30:17 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  626.525210][ T4853] binder: 4845:4853 unknown command 6842193
[  626.531192][ T4853] binder: 4845:4853 ioctl c0306201 200003c0 returned -22
07:30:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x220000, 0x0)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x40000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='/dev/binder#\x00', r2}, 0x10)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
readv(r0, &(0x7f00000000c0), 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f00000000c0)={0x0, 0x2, 0x0, {0x5, 0x0, 0x6}}, 0x28)
fcntl$setsig(r2, 0xa, 0x22)
pipe(&(0x7f00000001c0))

07:30:17 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x10', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  626.805315][ T5092] binder: 5085:5092 ioctl c0306201 0 returned -14
07:30:17 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x8540000}}, 0x0)

07:30:17 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qgl\x00'], 0x0, 0x0, 0x0})

07:30:17 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

[  626.991608][ T5246] binder: 5244:5246 unknown command 7104337
[  627.010985][ T5246] binder: 5244:5246 ioctl c0306201 200003c0 returned -22
07:30:18 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x901208}, 0x0)

07:30:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80000, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x101440, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040))

07:30:18 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:18 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qgt\x00'], 0x0, 0x0, 0x0})

[  627.291974][ T5527] binder: 5525:5527 ioctl c0306201 0 returned -14
07:30:18 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0xff600000}}, 0x0)

[  627.375746][ T5566] binder: 5559:5566 unknown command 7628625
[  627.408027][ T5566] binder: 5559:5566 ioctl c0306201 200003c0 returned -22
07:30:18 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:18 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qgz\x00'], 0x0, 0x0, 0x0})

07:30:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2, 0x0)
ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000004c0)=""/169)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000100)=""/13)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4cb], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f00000001c0))
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000240)=0x6, 0x4)
sendmsg$nl_netfilter(r1, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xfffffca4, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0xffffffffffffffdf}, 0x1, 0x0, 0x0, 0x41}, 0x40)

[  627.732037][ T5847] binder: 5846:5847 unknown command 8021841
[  627.770722][ T5847] binder: 5846:5847 ioctl c0306201 200003c0 returned -22
07:30:18 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

[  627.814432][ T5875] binder: 5857:5875 ioctl c0306201 0 returned -14
07:30:18 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="51670003"], 0x0, 0x0, 0x0})

07:30:18 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x150800000000}}, 0x0)

07:30:18 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x02', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  628.031160][ T6039] binder: 6034:6039 unknown command 50358097
[  628.085676][ T6039] binder: 6034:6039 ioctl c0306201 200003c0 returned -22
07:30:19 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8048000}, 0x0)

07:30:19 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="51670005"], 0x0, 0x0, 0x0})

07:30:19 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x03', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:19 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x301000, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080), 0x4)

07:30:19 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x350800000000}}, 0x0)

[  628.466742][ T6446] binder: 6443:6446 unknown command 83912529
[  628.472795][ T6446] binder: 6443:6446 ioctl c0306201 200003c0 returned -22
[  628.531518][ T6462] binder: 6451:6462 ioctl c0306201 0 returned -14
07:30:19 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="51670006"], 0x0, 0x0, 0x0})

07:30:19 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

07:30:19 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  628.805931][ T6721] binder: 6716:6721 unknown command 100689745
[  628.836753][ T6721] binder: 6716:6721 ioctl c0306201 200003c0 returned -22
07:30:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:30:19 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x540800000000}}, 0x0)

[  629.007198][ T6878] binder: 6863:6878 ioctl c0306201 0 returned -14
07:30:20 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\a'], 0x0, 0x0, 0x0})

07:30:20 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:20 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8121000}, 0x0)

[  629.197191][ T7020] binder: 7016:7020 unknown command 117466961
[  629.255343][ T7020] binder: 7016:7020 ioctl c0306201 200003c0 returned -22
07:30:20 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x60ffffffffff}}, 0x0)

07:30:20 executing program 0:
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x30000, 0x0)
ioctl$VT_RELDISP(r0, 0x5605)
clone(0x40000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x280100, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

07:30:20 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00 '], 0x0, 0x0, 0x0})

07:30:20 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\xc0', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:20 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

[  629.610306][ T7313] binder: 7309:7313 unknown command 536897361
[  629.634465][ T7313] binder: 7309:7313 ioctl c0306201 200003c0 returned -22
07:30:20 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x7fffffffefff}}, 0x0)

07:30:20 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00?'], 0x0, 0x0, 0x0})

07:30:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0xffffffffffffffff)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x3, 0x80000)
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f00000002c0))
clock_settime(0x7, &(0x7f00000001c0))
r2 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil)
shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000200)=""/85)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000040)={0x2, 0x7})
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x800, 0x0)
write$tun(r4, &(0x7f0000000100)={@val={0x0, 0xa00}, @val={0x1, 0x80, 0xd5, 0x2, 0xff, 0x100}, @x25={0x0, 0x1, 0xff, "89cd4665441472b80337d7cb9154193c7509800e03506c11fe2a8e9ec053879f875a03e14f98cc2da740b947f6d5ca59e911352032c85d25e66e0e258c9f1c56e3472a882df9f450f6b6c1a01b36023e0d720db0ade8ea3244b63b4d0e4c3487799b6540b79136db7e3b68b4fda521d8eefc9dc067e53a4d006ea1a3b0b217d2daaf79a88d55b87eebadb51ef503d8a80ccaee5dbe45cba19056b1"}}, 0xac)

07:30:20 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  629.979323][ T7649] binder: 7645:7649 unknown command 1056991057
[  630.015236][ T7649] binder: 7645:7649 ioctl c0306201 200003c0 returned -22
07:30:21 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x10120800000000}}, 0x0)

07:30:21 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00H'], 0x0, 0x0, 0x0})

07:30:21 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8129000}, 0x0)

[  630.412111][ T8002] binder: 7998:8002 unknown command 1207986001
[  630.434536][ T8002] binder: 7998:8002 ioctl c0306201 200003c0 returned -22
07:30:21 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

07:30:21 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00L'], 0x0, 0x0, 0x0})

07:30:21 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:21 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x80040800000000}}, 0x0)

[  630.711799][ T8319] binder: 8318:8319 unknown command 1275094865
07:30:21 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x5, 0x32, 0xffffffffffffffff, 0x0)
ioctl$VHOST_GET_FEATURES(r1, 0xc0044dff, &(0x7f00000026c0))
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x800, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=<r3=>0x0, &(0x7f0000000080)=0x4)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e24, 0xfffffffffffffff9, @dev={0xfe, 0x80, [], 0x1e}, 0x7}}, 0x81, 0x4, 0x0, 0x8000, 0x2}, &(0x7f0000000180)=0x98)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  630.758390][ T8319] binder: 8318:8319 ioctl c0306201 200003c0 returned -22
07:30:21 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\xff', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  630.937854][ T8472] binder: 8431:8472 ioctl c0306201 0 returned -14
07:30:22 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00`'], 0x0, 0x0, 0x0})

07:30:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x402003)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00')
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8)
getpeername(0xffffffffffffff9c, &(0x7f0000000380)=@hci={0x1f, <r5=>0x0}, &(0x7f0000000440)=0x80)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'vcan0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f00000004c0)={'team0\x00', <r7=>0x0})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000003a80)={{{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000003b80)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003bc0)={{{@in6=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@mcast2}}}, &(0x7f0000003cc0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003d00)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000003e00)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000003e40)={@loopback, <r11=>0x0}, &(0x7f0000003e80)=0x14)
recvmmsg(0xffffffffffffff9c, &(0x7f0000006d80)=[{{&(0x7f0000003ec0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003f40)=""/131, 0x83}, {&(0x7f0000004000)=""/198, 0xc6}, {&(0x7f0000004100)=""/156, 0x9c}], 0x3, &(0x7f0000004200)=""/80, 0x50}, 0x81}, {{&(0x7f0000004280)=@ax25={{}, [@null, @rose, @null, @default, @default, @default, @rose, @bcast]}, 0x80, &(0x7f0000004400)=[{&(0x7f0000004300)=""/143, 0x8f}, {&(0x7f00000043c0)=""/60, 0x3c}], 0x2, &(0x7f0000004440)=""/132, 0x84}, 0x68}, {{&(0x7f0000004500)=@ll={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000004640)=[{&(0x7f0000004580)=""/93, 0x5d}, {&(0x7f0000004600)=""/42, 0x2a}], 0x2, &(0x7f0000004680)=""/120, 0x78}, 0x48}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f00000048c0)=[{&(0x7f0000004780)=""/239, 0xef}, {&(0x7f0000004880)=""/5, 0x5}], 0x2, &(0x7f0000004900)=""/58, 0x3a}, 0x100}, {{0x0, 0x0, &(0x7f0000005f00)=[{&(0x7f0000004940)=""/195, 0xc3}, {&(0x7f0000004a40)=""/94, 0x5e}, {&(0x7f0000004ac0)=""/184, 0xb8}, {&(0x7f0000004b80)=""/109, 0x6d}, {&(0x7f0000004c00)=""/247, 0xf7}, {&(0x7f0000004d00)=""/155, 0x9b}, {&(0x7f0000004dc0)=""/101, 0x65}, {&(0x7f0000004e40)=""/4096, 0x1000}, {&(0x7f0000005e40)=""/156, 0x9c}], 0x9}, 0x3}, {{&(0x7f0000005f80)=@x25={0x9, @remote}, 0x80, &(0x7f0000006080)=[{&(0x7f0000006000)=""/68, 0x44}], 0x1, &(0x7f00000060c0)=""/106, 0x6a}, 0x1}, {{&(0x7f0000006140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000006580)=[{&(0x7f00000061c0)=""/237, 0xed}, {&(0x7f00000062c0)=""/231, 0xe7}, {&(0x7f00000063c0)=""/39, 0x27}, {&(0x7f0000006400)=""/12, 0xc}, {&(0x7f0000006440)=""/47, 0x2f}, {&(0x7f0000006480)=""/163, 0xa3}, {&(0x7f0000006540)=""/36, 0x24}], 0x7, &(0x7f00000065c0)=""/58, 0x3a}, 0x3f}, {{&(0x7f0000006600)=@tipc=@id, 0x80, &(0x7f0000006980)=[{&(0x7f0000006680)=""/111, 0x6f}, {&(0x7f0000006700)=""/197, 0xc5}, {&(0x7f0000006800)=""/186, 0xba}, {&(0x7f00000068c0)=""/161, 0xa1}], 0x4, &(0x7f00000069c0)=""/27, 0x1b}, 0x100}, {{&(0x7f0000006a00)=@nfc, 0x80, &(0x7f0000006c40)=[{&(0x7f0000006a80)=""/228, 0xe4}, {&(0x7f0000006b80)=""/164, 0xa4}], 0x2, &(0x7f0000006c80)=""/223, 0xdf}, 0x2}], 0x9, 0x10143, &(0x7f0000006ec0)={0x0, 0x1c9c380})
getsockname$packet(0xffffffffffffffff, &(0x7f0000006f00)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000006f40)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000006f80)={'team0\x00', <r14=>0x0})
getpeername$packet(0xffffffffffffff9c, &(0x7f0000006fc0)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000007000)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000007080)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000007180)=0xe8)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000071c0)={@loopback, <r17=>0x0}, &(0x7f0000007200)=0x14)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007240)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000007340)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000007680)={'team0\x00', <r19=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000076c0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r20=>0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f00000077c0)=0xe8)
accept4$packet(0xffffffffffffff9c, &(0x7f000000a700)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f000000a740)=0x14, 0x80800)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f000000a780)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r22=>0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f000000a880)=0xe8)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f000000b000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x44008}, 0xc, &(0x7f000000afc0)={&(0x7f000000a8c0)={0x6f0, r2, 0x322, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0xfc, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x268, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x73}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x62}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r13}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x264, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r19}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r20}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r21}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r22}, {0xf4, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}]}, 0x6f0}, 0x1, 0x0, 0x0, 0x4000}, 0x40)

[  631.155324][ T8723] binder: 8722:8723 unknown command 1610639185
[  631.162095][ T8723] binder: 8722:8723 ioctl c0306201 200003c0 returned -22
07:30:22 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x90120800000000}}, 0x0)

07:30:22 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8150000}, 0x0)

[  631.262966][ T8749] binder: 8745:8749 ioctl c0306201 0 returned -14
07:30:22 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

07:30:22 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:22 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00h'], 0x0, 0x0, 0x0})

07:30:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7f, 0x200)
r2 = socket$xdp(0x2c, 0x3, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, <r3=>0x0})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={<r4=>0x0, r1, 0x0, 0xd, &(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
tgkill(r3, r4, 0x27)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  631.654099][ T9065] binder: 9044:9065 unknown command 1744856913
[  631.716530][ T9114] binder: 9099:9114 ioctl c0306201 0 returned -14
07:30:22 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0xe0510800000000}}, 0x0)

07:30:22 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  631.763266][ T9065] binder: 9044:9065 ioctl c0306201 200003c0 returned -22
07:30:22 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00l'], 0x0, 0x0, 0x0})

07:30:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x80, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000040)={<r2=>0x0, 0xffff}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={r2, 0x0, 0x20, 0x3, 0x8}, &(0x7f0000000100)=0x18)
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000140)={0x0, 0x1f})
fcntl$setflags(r0, 0x2, 0x1)

[  632.071794][ T9461] binder: 9447:9461 unknown command 1811965777
[  632.089633][ T9461] binder: 9447:9461 ioctl c0306201 200003c0 returned -22
[  632.125153][ T9481] binder: 9474:9481 ioctl c0306201 0 returned -14
[  632.142271][ T9481] binder: 9474:9481 ioctl c0306201 0 returned -14
07:30:23 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:23 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0xffefffffff7f0000}}, 0x0)

07:30:23 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, 0x0)

07:30:23 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8350000}, 0x0)

07:30:23 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00t'], 0x0, 0x0, 0x0})

07:30:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:30:23 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  632.529917][ T9773] binder: 9758:9773 unknown command 1946183505
[  632.537012][ T9778] binder: 9776:9778 ioctl c0306201 0 returned -14
[  632.563986][ T9773] binder: 9758:9773 ioctl c0306201 200003c0 returned -22
07:30:23 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0xffffffffff600000}}, 0x0)

07:30:23 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00z'], 0x0, 0x0, 0x0})

07:30:23 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x440042, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000200)="d2b8b77f5a")
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0xffffffffffffff42, 0x40)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f00000000c0)={<r3=>0x0, 0x9, 0xbf, 0x7, 0x3ff, 0x3}, &(0x7f0000000100)=0x14)
setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4)
getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={r3, 0x8}, &(0x7f0000000180)=0x8)

07:30:23 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:23 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x1508}}, 0x0)

[  632.982778][T10235] binder: 10234:10235 unknown command 2046846801
[  633.022134][T10239] binder: 10236:10239 ioctl c0306201 0 returned -14
[  633.046159][T10235] binder: 10234:10235 ioctl c0306201 200003c0 returned -22
07:30:24 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, 0x0)

07:30:24 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x3508}}, 0x0)

07:30:24 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  633.294841][T10454] binder: 10453:10454 unknown command 26449
[  633.312544][T10454] binder: 10453:10454 ioctl c0306201 200003c0 returned -22
07:30:24 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9c65000}, 0x0)

07:30:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000))
clone(0x1010800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={@empty, 0x32, r2})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x9200200}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc8, r3, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000001}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4dec}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6a}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfc1e}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}]}, 0xc8}}, 0x8000)

07:30:24 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:24 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  633.497398][T10530] binder: 10523:10530 ioctl c0306201 0 returned -14
[  633.629449][T10703] binder: 10691:10703 unknown command 26449
[  633.642365][T10703] binder: 10691:10703 ioctl c0306201 200003c0 returned -22
07:30:24 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:24 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x5408}}, 0x0)

07:30:24 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7, 0x0)
ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x494)
ioctl$TIOCCBRK(r1, 0x5428)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x0, 0xb1, 0x3, 0x4}, {0x750f, 0x1, 0x6, 0x3}, {0x9438, 0x7ff, 0x2, 0x52f60269}, {0x2, 0x7ff, 0x9, 0x1f}]})

07:30:24 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, 0x0)

[  634.014252][T10987] binder: 10985:10987 unknown command 26449
[  634.036549][T10987] binder: 10985:10987 ioctl c0306201 200003c0 returned -22
07:30:25 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:25 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  634.156588][T11127] binder: 11072:11127 ioctl c0306201 0 returned -14
[  634.176991][   T27] audit: type=1326 audit(1553671825.096:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11072 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fdf869 code=0x0
[  634.273259][T11189] binder: 11186:11189 unknown command 26449
[  634.295331][T11189] binder: 11186:11189 ioctl c0306201 200003c0 returned -22
07:30:25 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x60ff}}, 0x0)

07:30:25 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9c87000}, 0x0)

07:30:25 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:25 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  634.595273][T11390] binder: 11389:11390 unknown command 26449
[  634.629001][T11390] binder: 11389:11390 ioctl c0306201 200003c0 returned -22
07:30:25 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x101208}}, 0x0)

07:30:25 executing program 2:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x1508}}, 0x0)

07:30:25 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:25 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  634.951850][T11648] binder: 11646:11648 unknown command 26449
[  634.994005][T11648] binder: 11646:11648 ioctl c0306201 200003c0 returned -22
07:30:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000))
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2)
prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040))
getegid()

07:30:26 executing program 2:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x90120800000000}}, 0x0)

07:30:26 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x800408}}, 0x0)

07:30:26 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:26 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  635.255216][T11949] binder: 11948:11949 unknown command 26449
[  635.283383][T11951] binder: 11950:11951 ioctl c0306201 0 returned -14
[  635.291983][T11949] binder: 11948:11949 ioctl c0306201 200003c0 returned -22
07:30:26 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xff600000}, 0x0)

07:30:26 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
sendfile64(r0, 0xffffffffffffffff, 0x0, 0x8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00'})
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0)
syz_open_dev$dri(0x0, 0x0, 0x0)
close(r1)
getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f0000000100))
sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x10)
getegid()
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4004081)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0x4, 0x400000)
write$P9_RUNLINKAT(r3, &(0x7f0000000480)={0x7, 0x4d, 0x1}, 0x7)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x600, 0x0)
ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f0000000380)=0xaa)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000040)={0x1, {{0xa, 0x4e20, 0x80000000, @local, 0x5}}, {{0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}}, 0x104)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000340)={0x1, 0x0, &(0x7f0000000180)="f09acfabcffcc81526a98efa3c7e860569923d10d00ca19aa70b0bdfca69cc27a1257b3b968960aa617addeaee1f3b9aca9db7de914353de5bfe4045195de22a70ae4662ad6c9e1d03fc6533c4a1f84e94ff7094c0e16bf31c3b10da891f1fae7e9315e15701b9e913589d40f185cbbd3adb36d66f26d99a6024c78aeb25ee1a4c1545aab0c93fd62a7b996a17e7a164116d6275471da93c449fd055ebb877e5fec1517ae975693b908dcc2d2a3b99c6718459b776acedaf3caedfa31ebb82c2a333861cb8cc561457376d681edbb2dda322433f9a03e74bb3e3", &(0x7f0000000280)="9f05aea1621479aa2943de8846905bef861f73a5c3df33e0e50064f7dab5a9e1c8d444e5799d5004cea9f789ff20dab9d5d2a590f3d970fb622dde9745f9ebf7e01cd06af41c0d3b4df430025f998ece778ea1b659d4d7f8e82148a4502857aa1c9517ab3521733055ebb35a39db7aa7ab8d22067bcb98fdd379a7a88bf25cf8eee9697159243fa32f19c369f376bc321f61ee30403f29d891422e34cfc49591", 0xda, 0xa0})

07:30:26 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:26 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:26 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x901208}}, 0x0)

[  635.506181][T12131] binder: 12128:12131 ioctl c0306201 0 returned -14
07:30:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000002d00)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x800, 0x800)
r2 = getpgid(0xffffffffffffffff)
r3 = getpgid(r2)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000002880)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000002980)=0xe8)
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000000)="26daf990d045c1d72292d017")
sendmsg$netlink(r1, &(0x7f0000002c80)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x1000800}, 0xc, &(0x7f0000002c00)=[{&(0x7f0000000440)={0x233c, 0x3f, 0x500, 0x70bd2b, 0x25dfdbfb, "", [@generic="69e9dc8ddfdfa51878343dda55cd192678db4404f391e261affe07ec44f7fd2062b1c7cdf50f4f6d4d61627a6d3ca675c015e431937c7e9ecbf28b93c449303635362c4e328752a70f0dfb6dcfdce3338cedc3e14e5ea2dff875bd357157a6362c69abe1b16a22164157a52f8b6e306f3149bd02067563b9a6118a66039df9f4dd8f6c36d3260a0dc6e67323c17071f51bf49cedb39a37857671356aec8f59050112c3b03e7300a80949f9ae5d7398293bc28c511d3b0794e07d", @generic="83d724b8d6e30d1a33703db369274711b745b6222b1a042067fc7bc6", @typed={0x14, 0x13, @ipv6=@mcast2}, @generic="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", @typed={0x8, 0x83, @ipv4=@broadcast}, @nested={0x1238, 0x96, [@typed={0x8, 0x1b, @u32=0x6}, @typed={0x8, 0x79, @fd=r0}, @generic="54eba49fda4eca3ad574d60e8f0331c3ffd96bb9983698321987d5e7ccac5d00beb2471c88b43573cf2734", @generic="e80745ccef7a9d9daaf6ea0da515967088bb045603b875e978acbfaf2b6a5b918fcf3529966164846edb414c420e18f50fbed4e9dfde65f6621944113e656ee5de4e48a4614457350018cf05563c80fcd8eeb06e9523584bc333584b99707ddd4d96919d389e1664c60be9d678b74a2501f0f8821cd8b33f40bf2d10ba8aecd5468e039252e0628c96cd6ef25f8f6e882337ed5606fc290bb926ffc6c74e1319ba76942b5c60729f22ae2e06fe79cd2bfcf594c1ee440fc7828b5c30fc9fc2716b6f4cbe9586537dfe4a4526236722ba4bf22f743d7bece8c4e8a9fa9b1f", @typed={0x4, 0x4d}, @generic="62510dfee8dd0e027dfcb43f3183efb0d096286f4ef1b11ecfca417582445aa81c525470f869e3cb014caa66110e84b056e37db9c0866957ce2ec33bba028f667062682fb00ec3bd1a77a6f1905b8bc13f9de7834bab5aed9985bb4aeac03a79295a9aa2f285fe50de", @generic="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", @generic="8cceeaf70f4c92b75470e7bb6284c9ba73feb13a0ae5e9027084f95c2f9062a8bbd3f57ce8eb368e0da6a878074363d74b0b33f6fd21d35bcff8e4f1366b4d46911be9e2a94e869d1cdaefc223e5bdcd1fb63806087c27275e7e73971df175c71c6bf225f60cb3690a0ecad8d4b05ca0e2ca5368fe35d3d7d753a96e9a90a5bcfaf1b1e68c6ca0d1ca157e3dfa43ce5a283c777a4cd66872e3a24e555f95557619c6522edb330b4f4e5af4a088"]}]}, 0x233c}, {&(0x7f00000000c0)={0x1a4, 0x3b, 0xd00, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x180, 0x5f, [@typed={0x8, 0x3, @u32=0x3}, @generic="c5e00b0dd03fbab2374ad91e56eae8cad3cd381978720d8aa53ab97e0d1fdf517e27cd088996c8901c1b89972ce139cb3ea2e89aa13b59461d4304e5633b40368893b52275d6c34af47fba1eeca071b64a1a75d226555002e0104618e40573001904767f7c48b774f622ac6c902e608d57431da8c59ad390631b30", @typed={0x8, 0x82, @pid=r2}, @generic="9ac5a6dc3a9803895d5534fdedace990b724acb57f692750cde5499181abbdfbce172617cd1c17d0d67891b881252bbc", @generic="81b026bef7eaca9355097ba6da170963749781f63c55cd82154845a22452fc", @generic="80c8718a1e8eefa7ec7d0bca7ab9deca02cbe9efe5302efbe4aad337c0b0740e05d290277213ec42a8732d1ce54125e56e7a911fd92ef1334aad723abb69b4a47c5c73d97c44c4b25ccfd40c317040141499e694a61cfed71f5c92a1668f561e4e6ee54df3af0d07bdb9b5a3b31decf4f056bcc881389a4b16d45fe11c5b1dd853f916e5e2af12807aea053bb44c5b8830de752182f09764a07af345abb305"]}, @typed={0x14, 0x83, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, 0x1a4}, {&(0x7f0000000280)={0x178, 0x3f, 0x400, 0x70bd2c, 0x25dfdbfb, "", [@generic="74975e0133742af94398ebf216d9f102d49ef62fc9be8aa253e3cb0b9318ce1733bf0635857aff875a4322172e4d6b3152dd3898d67d477a76fb2a4f4fac3a116d2e841040d533581edd958f381cc4459a441822a8a947bb12461a62feca6d9b28074039651a1edb7e7c6b3f36c56e27b5bb418564245faa8f0431dd6c5035a608896ef38f4ea59362da45f6d26e92451e2f193a19b3c5dad9dad3704448a8d0e6127011a6f2ba387e95aec0ee2baea28e07a1a08e8434e1a82c1935d48fe6dd9f519e60bc315fcc692d08bdd6f151c1fa90aa1a", @nested={0x18, 0x28, [@typed={0x14, 0x9, @ipv6=@loopback}]}, @nested={0x7c, 0x5a, [@typed={0xc, 0x42, @str='wlan1\x00'}, @typed={0x14, 0x31, @ipv6=@mcast2}, @typed={0x8, 0x90, @ipv4=@empty}, @generic="87b694b7b0ad8166efcf7e6a409a9acac8aea076b7b760231d93226916f0302120e9ff52c650f58ea71135858367d7319aa8e0cfb9d38bde52771691eb922f273503ac5d5533941c13d5d0a4ced50427"]}]}, 0x178}, {&(0x7f0000002780)={0xe4, 0x2e, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0x71, @pid=r3}, @nested={0xcc, 0x8c, [@generic="35fe5d9912998a487f4a1b39f758255d534e66e75464d7d3a55ca540c2683692d4d831a61b6495ceda51ec59b61b956312190034d89a9e48d1ea8a3755a1aca9f23bd52f0d1f25", @typed={0xc, 0x4f, @u64=0x7}, @generic="f1b2ac2bb99030bf3e68b4e3225152e59dbb2a9e26b941c0576c269c0ebd8ec9b7d44b4d86dc2f31dbc7fdfc3bbcf9decf4acb3e09b040b19c5fad63c272d10f6cb99ceada5cba86929cefc98c385394a2b75637087a29705125c3b8b73988", @typed={0x14, 0x14, @str='/dev/binder#\x00'}]}]}, 0xe4}, {&(0x7f00000029c0)={0x40, 0x27, 0x402, 0x70bd29, 0x25dfdbff, "", [@typed={0x8, 0x31, @str='@\x00'}, @generic="b8fe85d5b5375732cfd4e98ef26ccd40841ad5c04e2608f17db970df", @typed={0x4, 0x76}, @typed={0x8, 0x44, @uid=r4}]}, 0x40}, {&(0x7f0000002a00)={0x20, 0x31, 0x10, 0x70bd29, 0x25dfdbfb, "", [@typed={0xc, 0x9, @u64=0x7f}, @generic="80b9"]}, 0x20}, {&(0x7f0000002a40)={0xc4, 0x42, 0x8, 0x70bd2d, 0x25dfdbff, "", [@generic="65f668a355cc9d945d2a4291feb74c0c2a1afb87cd432e81b7751e320dc7f3153a92cf84c5c459596223431edcf8d95e2efdf84de7905b38e725be5012e7af58de6709e50b5f74355d7fa7dfcb33cfbdf70290ade029c93bf1959321b16c425fdab8af923600728a3d2615f2d47e3879b599eba2983ced56d72708abb3ef43ddd84ccbc843c5fefb1f929fc922731936e8961ecad6c681e10f46c80fac9b526c36dbced36c3a6b1d6d439f7cc654be01df3b"]}, 0xc4}, {&(0x7f0000002b40)={0xc0, 0x1c, 0x500, 0x70bd2c, 0x25dfdbfb, "", [@nested={0xc, 0x5b, [@typed={0x8, 0x33, @ipv4=@multicast1}]}, @generic="fdc0869fc4e8f0e09f20470cbc4a2a9cf447cd937959a22c11fcebd4655a38772acf3a16e05311a05ade2afcaab483aea735ae5a083cbb77bfc1a4fb4e182d2ace92ff799f41f3230043042d0d3d8574960379b403fd55b7390e3ffd82d4f5e34c1acabcfba664433916e7267131993ca0be9b7d9bfc01b3d05e7c88769eb40865301d25de4ab4146a18c99c6154c95e688777358eb0bd141412e961b00e8e619131"]}, 0xc0}], 0x8, &(0x7f0000002c40)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0, r0]}], 0x40, 0x8800}, 0x80)
r5 = syz_open_dev$swradio(&(0x7f0000002cc0)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$BLKFRASET(r5, 0x1264, &(0x7f0000000400))
ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000002d40)="ff98b02dda932ba57d21f20e079905b47b849c732a3a570ba7a8b6f78981138cfd40ecbde6162c23335f711938da2f7122ff8498e73a6060d6648ca80bfba56e2248d6ccdf7379e09915ce241203b5f85df847b6277858e737734fd9d716d7c282e0fe68dcf0e93349322faaf032df885f94cd48ff264bf72a17e0a19ee96bbfbf945fb1d603c8bbcc95d8aa1b967a796f878b9c7692f6f096ae")

[  635.650106][T12329] binder: 12321:12329 unknown command 26449
[  635.657801][T12341] binder: 12339:12341 ioctl c0306201 0 returned -14
[  635.679637][T12329] binder: 12321:12329 ioctl c0306201 200003c0 returned -22
07:30:26 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

[  635.694905][T12341] binder: 12339:12341 ioctl 4b41 20000000 returned -22
[  635.738937][T12341] binder: 12339:12341 ioctl c0306201 0 returned -14
07:30:26 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0xe05108}}, 0x0)

07:30:26 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:26 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0)
ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000040)={0xf, {0x73, 0xc2, 0x7, 0x400}})
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54)

[  636.034960][T12704] binder: 12702:12704 unknown command 26449
[  636.086242][T12704] binder: 12702:12704 ioctl c0306201 200003c0 returned -22
07:30:27 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  636.215243][T12844] binder: 12788:12844 ioctl c0306201 0 returned -14
07:30:27 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x150800000000}, 0x0)

07:30:27 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x8048000}}, 0x0)

07:30:27 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  636.614820][T13109] binder: 13106:13109 unknown command 26449
[  636.640525][T13109] binder: 13106:13109 ioctl c0306201 200003c0 returned -22
07:30:27 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:27 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

07:30:27 executing program 0:
recvmmsg(0xffffffffffffff9c, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/174, 0xae}, {&(0x7f00000000c0)=""/208, 0xd0}, {&(0x7f00000001c0)=""/169, 0xa9}, {&(0x7f0000000280)=""/134, 0x86}, {&(0x7f0000000340)=""/146, 0x92}, {&(0x7f0000000440)=""/195, 0xc3}, {&(0x7f0000000540)=""/47, 0x2f}], 0x7, &(0x7f00000005c0)=""/95, 0x5f}, 0x3a}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000640)=""/22, 0x16}, {&(0x7f0000000680)=""/140, 0x8c}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/82, 0x52}], 0x4, &(0x7f0000001800)=""/222, 0xde}, 0x6}, {{&(0x7f0000001900)=@x25, 0x80, &(0x7f0000003a40)=[{&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/163, 0xa3}, {&(0x7f0000002a40)=""/4096, 0x1000}], 0x3}, 0x6}, {{&(0x7f0000003a80), 0x80, &(0x7f0000003f40)=[{&(0x7f0000003b00)=""/106, 0x6a}, {&(0x7f0000003b80)=""/131, 0x83}, {&(0x7f0000003c40)=""/19, 0x13}, {&(0x7f0000003c80)=""/51, 0x33}, {&(0x7f0000003cc0)=""/170, 0xaa}, {&(0x7f0000003d80)=""/96, 0x60}, {&(0x7f0000003e00)=""/148, 0x94}, {&(0x7f0000003ec0)=""/12, 0xc}, {&(0x7f0000003f00)=""/17, 0x11}], 0x9, &(0x7f0000003fc0)=""/20, 0x14}, 0x2}, {{&(0x7f0000004000)=@isdn, 0x80, &(0x7f00000044c0)=[{&(0x7f0000004080)=""/134, 0x86}, {&(0x7f0000004140)=""/244, 0xf4}, {&(0x7f0000004240)=""/211, 0xd3}, {&(0x7f0000004340)=""/206, 0xce}, {&(0x7f0000004440)=""/66, 0x42}], 0x5}, 0x7}, {{&(0x7f0000004500)=@tipc=@name, 0x80, &(0x7f0000004780)=[{&(0x7f0000004580)=""/206, 0xce}, {&(0x7f0000004680)=""/142, 0x8e}, {&(0x7f0000004740)=""/61, 0x3d}], 0x3, &(0x7f00000047c0)=""/128, 0x80}, 0x6}, {{&(0x7f0000004840)=@sco, 0x80, &(0x7f00000058c0)=[{&(0x7f00000048c0)=""/4096, 0x1000}], 0x1}, 0xfb}, {{&(0x7f0000005900)=@pppol2tpv3={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff}}, 0x80, &(0x7f0000005b40)=[{&(0x7f0000005980)=""/23, 0x17}, {&(0x7f00000059c0)=""/39, 0x27}, {&(0x7f0000005a00)=""/57, 0x39}, {&(0x7f0000005a40)=""/203, 0xcb}], 0x4, &(0x7f0000005b80)=""/197, 0xc5}, 0x1}, {{&(0x7f0000005c80)=@tipc=@id, 0x80, &(0x7f0000006140)=[{&(0x7f0000005d00)=""/60, 0x3c}, {&(0x7f0000005d40)=""/19, 0x13}, {&(0x7f0000005d80)=""/16, 0x10}, {&(0x7f0000005dc0)=""/20, 0x14}, {&(0x7f0000005e00)=""/25, 0x19}, {&(0x7f0000005e40)=""/115, 0x73}, {&(0x7f0000005ec0)=""/240, 0xf0}, {&(0x7f0000005fc0)=""/140, 0x8c}, {&(0x7f0000006080)=""/180, 0xb4}], 0x9, &(0x7f00000061c0)=""/40, 0x28}, 0x1}, {{&(0x7f0000006200)=@nfc_llcp, 0x80, &(0x7f0000006380)=[{&(0x7f0000006280)=""/127, 0x7f}, {&(0x7f0000006300)=""/41, 0x29}, {&(0x7f0000006340)=""/26, 0x1a}], 0x3, &(0x7f00000063c0)=""/229, 0xe5}, 0x6}], 0xa, 0x40010061, &(0x7f0000006600)={0x77359400})
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000006680)='TIPC\x00')
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000006740)={&(0x7f0000006640)={0x10, 0x0, 0x0, 0x500008}, 0xc, &(0x7f0000006700)={&(0x7f00000066c0)={0x1c, r1, 0x520, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000006780)=0xffffffffffffffff, 0x4)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)

07:30:27 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  636.912208][T13338] binder: 13319:13338 ioctl c0306201 0 returned -14
07:30:27 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x8121000}}, 0x0)

07:30:28 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  637.012511][T13359] binder: 13358:13359 unknown command 26449
[  637.054219][T13359] binder: 13358:13359 ioctl c0306201 200003c0 returned -22
07:30:28 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000000)=0x2, 0x0, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)=0x1, 0x2)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2, 0x800)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000100)={0x9, 0xc, [0x5, 0x3, 0x3f]})

07:30:28 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\xff', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  637.454737][T13747] binder: 13742:13747 unknown command 26449
07:30:28 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x350800000000}, 0x0)

07:30:28 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x8129000}}, 0x0)

[  637.514087][T13747] binder: 13742:13747 ioctl c0306201 200003c0 returned -22
07:30:28 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = dup3(r0, r0, 0x80000)
r2 = eventfd(0xe537)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000000)={0x3, r2})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  637.808656][T14023] binder: 14018:14023 unknown command 26449
07:30:28 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00')

07:30:28 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x8150000}}, 0x0)

07:30:28 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  637.864445][T14023] binder: 14018:14023 ioctl c0306201 200003c0 returned -22
[  637.865001][T14080] binder: 14079:14080 ioctl c0306201 0 returned -14
07:30:28 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  638.149879][T14393] binder: 14390:14393 unknown command 26449
[  638.216162][T14393] binder: 14390:14393 ioctl c0306201 200003c0 returned -22
07:30:29 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:29 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v1={0x1000000, [{0x81, 0xfffffffffffffffb}]}, 0xc, 0x3)

07:30:29 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x8350000}}, 0x0)

07:30:29 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:29 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x60ffffffffff}, 0x0)

[  638.554110][T14690] binder: 14689:14690 unknown command 26449
[  638.589402][T14690] binder: 14689:14690 ioctl c0306201 200003c0 returned -22
07:30:29 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:29 executing program 2:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x150800000000}}, 0x0)

07:30:29 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:29 executing program 2:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x8350000}}, 0x0)

07:30:29 executing program 0:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x5, 0x10000)
io_setup(0x7, &(0x7f00000005c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000740)=[&(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f0000000600)="e0438498bc09b13dc5f1da15898b6c0ea10b9735da7c3c87dc15de89ea661bb24eef5ee0074e7c8aa8924bb2c61f43fbb7a297b2196267419340a63ee37f9b32c8694fcb585cdcf17843d4281d9bd9f8e020569b308192708159e49f9d287fdb6164637c457b2c43e55d3e2bd7024c235f4e789a92fc5bc7e5d556455c43c2329d47916448e4b284f219e82aa6a5fba7ed1197aca1642afed4692012f4a6f9239eb36367ddfd6082adef644feecbed052c4fda1e06fc527542844d0a9b483394f2092306111a0d53ac88f2298b937d", 0xcf, 0x0, 0x0, 0x1, r0}])
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00')
getsockname$packet(0xffffffffffffff9c, &(0x7f0000000580)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14)
readv(r0, &(0x7f0000000bc0)=[{&(0x7f00000007c0)=""/225, 0xe1}, {&(0x7f00000008c0)=""/76, 0x4c}, {&(0x7f0000000940)=""/195, 0xc3}, {&(0x7f0000000a40)=""/111, 0x6f}, {&(0x7f0000000ac0)=""/214, 0xd6}], 0x5)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f00000002c0)=0xe8)
r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14, 0x800)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14)
write$FUSE_BMAP(r0, &(0x7f0000000780)={0x18, 0x38bd89c092f9002e, 0x8, {0x401}}, 0x18)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000540)=0xe8)
getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000e80)={<r9=>0x0, @initdev, @local}, &(0x7f0000000ec0)=0xc)
accept4$packet(0xffffffffffffff9c, &(0x7f0000000f00)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000f40)=0x14, 0x80800)
getsockname$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001040)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001140)={0x11, 0x0, <r12=>0x0}, &(0x7f0000001180)=0x14)
socket$inet6(0xa, 0x1, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40001000}, 0xc, &(0x7f0000001740)={&(0x7f00000011c0)=ANY=[@ANYBLOB="48050000", @ANYRES16=r2, @ANYBLOB="00042abd7000ffdbdf250300000008000100", @ANYRES32=r3, @ANYBLOB="100102004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e6700000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=r4, @ANYBLOB="3c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c000400feff3f090300000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000014000400e9ff000600000080000248070700000008000100", @ANYRES32=r6, @ANYBLOB="780002003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000500000008000100", @ANYRES32=r8, @ANYBLOB="740102003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000b0000000c0004000600fb07f9ffffff40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000300000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000001000000008000300060000000400040008000600000000000000", @ANYRES32=r9, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400ff0f00003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000014000400090006fefbffffff08001f070800000008000100", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000008000300030000000800040001000000"], 0x548}, 0x1, 0x0, 0x0, 0xc1}, 0x40081)
r13 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r14 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
setsockopt$inet_icmp_ICMP_FILTER(r14, 0x1, 0x1, &(0x7f0000000040)={0x330d}, 0x4)
ioctl$BINDER_WRITE_READ(r13, 0xc0306201, 0x0)
fcntl$setflags(r5, 0x2, 0x1)

07:30:29 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x851e000}}, 0x0)

[  638.815107][T14930] binder: 14929:14930 unknown command 26449
[  638.822477][T14930] binder: 14929:14930 ioctl c0306201 200003c0 returned -22
07:30:29 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)

07:30:29 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:29 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  639.011891][T15019] binder: 15018:15019 ioctl c0306201 0 returned -14
07:30:30 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x8540000}}, 0x0)

[  639.100787][T15052] binder: 15045:15052 unknown command 26449
[  639.146149][T15052] binder: 15045:15052 ioctl c0306201 200003c0 returned -22
07:30:30 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\xff', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:30 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffefff}, 0x0)

07:30:30 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:30 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0xff600000}}, 0x0)

07:30:30 executing program 0:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)

[  639.605481][T15471] binder: 15468:15471 unknown command 26449
[  639.627755][T15471] binder: 15468:15471 ioctl c0306201 200003c0 returned -22
07:30:30 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\xff', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:30 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)

07:30:30 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  639.979103][T15681] binder: 15671:15681 unknown command 26449
[  640.026179][T15681] binder: 15671:15681 ioctl c0306201 200003c0 returned -22
07:30:31 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\xff', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:31 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x150800000000}}, 0x0)

07:30:31 executing program 0:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)

07:30:31 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  640.376396][T16036] binder: 16019:16036 unknown command 26449
07:30:31 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  640.428001][T16036] binder: 16019:16036 ioctl c0306201 200003c0 returned -22
07:30:31 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10120800000000}, 0x0)

07:30:31 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x350800000000}}, 0x0)

07:30:31 executing program 2:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)

07:30:31 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:31 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\xf9', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  640.830518][T16235] binder: 16229:16235 unknown command 26449
[  640.860483][T16235] binder: 16229:16235 ioctl c0306201 200003c0 returned -22
07:30:32 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:32 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x540800000000}}, 0x0)

07:30:32 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x7f', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  641.202511][T16638] binder: 16637:16638 unknown command 26449
[  641.222378][T16638] binder: 16637:16638 ioctl c0306201 200003c0 returned -22
07:30:32 executing program 0:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229)

07:30:32 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:32 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x60ffffffffff}}, 0x0)

07:30:32 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50c60900000000}, 0x0)

[  641.631852][T16857] binder: 16856:16857 unknown command 26449
07:30:32 executing program 2:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0xffffffffff600000}}, 0x0)

[  641.706430][T16857] binder: 16856:16857 ioctl c0306201 200003c0 returned -22
07:30:32 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x8c', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:32 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x7fffffffefff}}, 0x0)

07:30:32 executing program 2:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0xffefffffff7f0000}}, 0x0)

07:30:32 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:33 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\xf6', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  642.101098][T17200] binder: 17198:17200 unknown command 26449
07:30:33 executing program 2:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0xe05108}}, 0x0)

[  642.143270][T17200] binder: 17198:17200 ioctl c0306201 200003c0 returned -22
07:30:33 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x4018620d, 0x0)

[  642.414790][T17411] binder: 17410:17411 ioctl 4018620d 0 returned -22
07:30:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0)

07:30:33 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x10120800000000}}, 0x0)

07:30:33 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  642.577689][T17420] binder: 17419:17420 unknown command 26449
[  642.593504][T17424] binder: BINDER_SET_CONTEXT_MGR already set
[  642.603224][T17420] binder: 17419:17420 ioctl c0306201 200003c0 returned -22
[  642.604014][T17424] binder: 17423:17424 ioctl 40046207 0 returned -16
07:30:33 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x70c80900000000}, 0x0)

07:30:33 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\xfe', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:33 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x4018620d, 0x0)

07:30:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0)

[  642.695385][T17533] binder: 17531:17533 ioctl 4018620d 0 returned -22
07:30:33 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:33 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x4018620d, 0x0)

[  642.764516][T17587] binder: BINDER_SET_CONTEXT_MGR already set
[  642.778136][T17587] binder: 17567:17587 ioctl 40046207 0 returned -16
[  642.831017][T17638] binder: 17635:17638 unknown command 26449
07:30:33 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x80040800000000}}, 0x0)

07:30:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0)

07:30:33 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  642.879261][T17648] binder: 17647:17648 ioctl 4018620d 0 returned -22
[  642.894337][T17638] binder: 17635:17638 ioctl c0306201 200003c0 returned -22
07:30:33 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ve\xfa\xfd\x00\x00\x00\x001\x00', 0x43732e1398416f1a})
ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000000)=0x10000)

[  643.026619][T17665] binder: BINDER_SET_CONTEXT_MGR already set
[  643.037147][T17665] binder: 17660:17665 ioctl 40046207 0 returned -16
07:30:34 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, 0x0, &(0x7f0000000200))
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x34)
setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0)

07:30:34 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  643.190445][T17878] binder: 17876:17878 unknown command 26449
[  643.241509][T17878] binder: 17876:17878 ioctl c0306201 200003c0 returned -22
07:30:34 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x80040800000000}, 0x0)

07:30:34 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x90120800000000}}, 0x0)

07:30:34 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:34 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0x277, 0x0, 0x0, 0x0)

07:30:34 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:34 executing program 0:
r0 = inotify_init()
ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00')
r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x3)
inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x4000082)
write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="65f336224bdd3b533505b3540906a7ee8c91dc38e00f136c79a3f7cb93e001b6"], 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r1, &(0x7f00000001c0), 0xa198)

[  643.685713][T18187] binder: 18185:18187 unknown command 26449
[  643.691683][T18187] binder: 18185:18187 ioctl c0306201 200003c0 returned -22
07:30:34 executing program 2:
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit(0x0)

07:30:34 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:34 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\xff', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:34 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0xe0510800000000}}, 0x0)

[  643.936963][T18503] binder: 18502:18503 unknown command 26449
[  643.958293][T18503] binder: 18502:18503 ioctl c0306201 200003c0 returned -22
[  644.015485][T18518] BUG: MAX_STACK_TRACE_ENTRIES too low!
[  644.021106][T18518] turning off the locking correctness validator.
[  644.027635][T18518] CPU: 1 PID: 18518 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38
[  644.035632][T18518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  644.045704][T18518] Call Trace:
[  644.049014][T18518]  dump_stack+0x172/0x1f0
[  644.053367][T18518]  save_trace.cold+0x14/0x19
[  644.057986][T18518]  mark_lock+0x2fb/0x1380
[  644.062330][T18518]  ? print_shortest_lock_dependencies+0x90/0x90
[  644.068689][T18518]  __lock_acquire+0x548/0x3fb0
[  644.073463][T18518]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  644.079716][T18518]  ? debug_smp_processor_id+0x3c/0x280
[  644.085183][T18518]  ? mark_held_locks+0xf0/0xf0
[  644.089977][T18518]  ? perf_trace_lock+0x510/0x510
[  644.094912][T18518]  ? __save_stack_trace+0x99/0x100
[  644.100122][T18518]  lock_acquire+0x16f/0x3f0
[  644.103033][ T3876] kobject: 'loop5' (000000004dc84303): kobject_uevent_env
07:30:35 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:35 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0xffefffffff7f0000}}, 0x0)

[  644.104636][T18518]  ? flush_workqueue+0xf7/0x14c0
[  644.104652][T18518]  flush_workqueue+0x126/0x14c0
[  644.104674][T18518]  ? flush_workqueue+0xf7/0x14c0
[  644.111810][ T3876] kobject: 'loop5' (000000004dc84303): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  644.116809][T18518]  ? __ia32_compat_sys_mount+0x664/0x790
[  644.116823][T18518]  ? do_fast_syscall_32+0x281/0xc98
[  644.116837][T18518]  ? lock_downgrade+0x880/0x880
[  644.116849][T18518]  ? find_held_lock+0x35/0x130
[  644.116871][T18518]  ? pwq_unbound_release_workfn+0x2f0/0x2f0
[  644.161184][ T3876] kobject: 'loop3' (00000000296f63b0): kobject_uevent_env
[  644.163169][T18518]  drain_workqueue+0x1b4/0x470
[  644.163183][T18518]  ? drain_workqueue+0x1b4/0x470
[  644.163206][T18518]  destroy_workqueue+0x21/0x700
[  644.174802][ T3876] kobject: 'loop3' (00000000296f63b0): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  644.175061][T18518]  destroy_fs_client+0x38/0x180
[  644.175076][T18518]  ceph_mount+0xc93/0x1870
[  644.175092][T18518]  ? ceph_compare_super+0x510/0x510
[  644.175115][T18518]  legacy_get_tree+0xf2/0x200
[  644.214162][T18518]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  644.220701][T18518]  vfs_get_tree+0x123/0x450
[  644.225220][T18518]  do_mount+0x1436/0x2c40
[  644.229582][T18518]  ? copy_mount_string+0x40/0x40
[  644.234206][T18881] binder: 18800:18881 unknown command 26449
[  644.234543][T18518]  ? _copy_from_user+0xdd/0x150
[  644.241158][T18881] binder: 18800:18881 ioctl c0306201 200003c0 returned -22
[  644.245377][T18518]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  644.245394][T18518]  ? memdup_user+0x65/0xb0
[  644.245408][T18518]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  644.245420][T18518]  ? copy_mount_options+0x280/0x3a0
[  644.245438][T18518]  __ia32_compat_sys_mount+0x664/0x790
[  644.245452][T18518]  ? trace_hardirqs_on+0x67/0x230
[  644.245473][T18518]  do_fast_syscall_32+0x281/0xc98
[  644.290431][T18518]  entry_SYSENTER_compat+0x70/0x7f
[  644.295565][T18518] RIP: 0023:0xf7fca869
[  644.299645][T18518] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  644.306254][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
[  644.319522][T18518] RSP: 002b:00000000f5dc60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  644.319536][T18518] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000200
[  644.319543][T18518] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000
[  644.319550][T18518] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  644.319557][T18518] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  644.319564][T18518] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  644.384703][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  644.400264][ T3876] kobject: 'loop3' (00000000296f63b0): kobject_uevent_env
[  644.407967][ T3876] kobject: 'loop3' (00000000296f63b0): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  644.421738][ T3876] kobject: 'loop5' (000000004dc84303): kobject_uevent_env
[  644.429856][ T3876] kobject: 'loop5' (000000004dc84303): fill_kobj_path: path = '/devices/virtual/block/loop5'
07:30:35 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x90120800000000}, 0x0)

07:30:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000006a0077bb45e9f52b67dcf87d00000000000010000000000000000093"], 0x0, 0x0, 0x0})

07:30:35 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0xffffffffff600000}}, 0x0)

07:30:35 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:35 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  644.520788][ T3876] kobject: 'loop4' (00000000e3494c6c): kobject_uevent_env
[  644.528060][ T3876] kobject: 'loop4' (00000000e3494c6c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  644.568704][ T3876] kobject: 'loop1' (0000000031760c2d): kobject_uevent_env
[  644.585971][T19029] binder: 19028:19029 unknown command 26449
[  644.591925][T19029] binder: 19028:19029 ioctl c0306201 200003c0 returned -22
[  644.600602][T19027] binder: 19025:19027 transaction failed 29201/-28, size 16-37632 line 3147
07:30:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000006a0077bb45e9f52b67dcf87d00000000000010000000000000000093"], 0x0, 0x0, 0x0})

[  644.613187][ T3876] kobject: 'loop1' (0000000031760c2d): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  644.627474][ T7720] binder: undelivered TRANSACTION_ERROR: 29201
[  644.654266][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
[  644.666458][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  644.696793][T19250] binder: 19227:19250 transaction failed 29201/-28, size 16-37632 line 3147
07:30:35 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000006a0077bb45e9f52b67dcf87d00000000000010000000000000000093"], 0x0, 0x0, 0x0})

07:30:35 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:35 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x0, 0x1508}}, 0x0)

[  644.726106][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  644.739530][ T3876] kobject: 'loop5' (000000004dc84303): kobject_uevent_env
[  644.758005][ T3876] kobject: 'loop5' (000000004dc84303): fill_kobj_path: path = '/devices/virtual/block/loop5'
07:30:35 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000006a0077bb45e9f52b67dcf87d00000000000010000000000000000093"], 0x0, 0x0, 0x0})

[  644.787497][T19347] binder: 19345:19347 unknown command 26449
[  644.805221][T19351] binder: 19346:19351 transaction failed 29201/-28, size 16-37632 line 3147
[  644.817828][ T3876] kobject: 'loop3' (00000000296f63b0): kobject_uevent_env
[  644.823145][T19347] binder: 19345:19347 ioctl c0306201 200003c0 returned -22
[  644.837091][T19353] binder: 19352:19353 transaction failed 29201/-28, size 16-37632 line 3147
[  644.851216][ T3876] kobject: 'loop3' (00000000296f63b0): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  644.857121][ T7720] binder: undelivered TRANSACTION_ERROR: 29201
[  644.864377][ T3876] kobject: 'loop2' (000000004efe9e18): kobject_uevent_env
07:30:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000006a0077bb45e9f52b67dcf87d00000000000010000000000000000093"], 0x0, 0x0, 0x0})

[  644.890528][ T7720] binder: undelivered TRANSACTION_ERROR: 29201
[  644.890753][ T3876] kobject: 'loop2' (000000004efe9e18): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  644.917696][ T3876] kobject: 'loop4' (00000000e3494c6c): kobject_uevent_env
[  644.933285][T19521] binder: 19520:19521 transaction failed 29201/-28, size 16-37632 line 3147
[  644.942216][ T3876] kobject: 'loop4' (00000000e3494c6c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  644.956355][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
[  644.965287][ T7728] binder: undelivered TRANSACTION_ERROR: 29201
[  644.979102][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  644.999030][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
[  645.006831][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  645.017433][ T3876] kobject: 'loop2' (000000004efe9e18): kobject_uevent_env
[  645.024647][ T3876] kobject: 'loop2' (000000004efe9e18): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  645.035906][ T3876] kobject: 'loop5' (000000004dc84303): kobject_uevent_env
[  645.043043][ T3876] kobject: 'loop5' (000000004dc84303): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  645.053760][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
[  645.060891][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  645.072507][ T3876] kobject: 'loop4' (00000000e3494c6c): kobject_uevent_env
[  645.079709][ T3876] kobject: 'loop4' (00000000e3494c6c): fill_kobj_path: path = '/devices/virtual/block/loop4'
07:30:36 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffffff7f0000}, 0x0)

07:30:36 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000006a0077bb45e9f52b67dcf87d00000000000010000000000000000093"], 0x0, 0x0, 0x0})

07:30:36 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="51670002"], 0x0, 0x0, 0x0})

07:30:36 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x0, 0x3508}}, 0x0)

07:30:36 executing program 0:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000006a0077bb45e9f52b67dcf87d00000000000010000000000000000093"], 0x0, 0x0, 0x0})

07:30:36 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  645.487390][ T3876] kobject: 'loop1' (0000000031760c2d): kobject_uevent_env
[  645.506105][T19576] binder: 19575:19576 unknown command 33580881
[  645.515352][T19581] binder: 19572:19581 transaction failed 29201/-28, size 16-37632 line 3147
[  645.522557][T19576] binder: 19575:19576 ioctl c0306201 200003c0 returned -22
07:30:36 executing program 0:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000006a0077bb45e9f52b67dcf87d00000000000010000000000000000093"], 0x0, 0x0, 0x0})

[  645.528043][ T3876] kobject: 'loop1' (0000000031760c2d): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  645.553320][    T5] binder: undelivered TRANSACTION_ERROR: 29201
[  645.567839][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
07:30:36 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000006a0077bb45e9f52b67dcf87d00000000000010000000000000000093"], 0x0, 0x0, 0x0})

07:30:36 executing program 0:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000006a0077bb45e9f52b67dcf87d00000000000010000000000000000093"], 0x0, 0x0, 0x0})

[  645.595298][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  645.629849][ T3876] kobject: 'loop2' (000000004efe9e18): kobject_uevent_env
07:30:36 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="51670003"], 0x0, 0x0, 0x0})

[  645.639184][T19732] binder: 19731:19732 transaction failed 29201/-28, size 16-37632 line 3147
[  645.657754][ T3876] kobject: 'loop2' (000000004efe9e18): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  645.671697][ T7728] binder: undelivered TRANSACTION_ERROR: 29201
07:30:36 executing program 2:
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)

07:30:36 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  645.696765][ T3876] kobject: 'loop5' (000000004dc84303): kobject_uevent_env
[  645.704661][T19784] binder: 19783:19784 unknown command 50358097
[  645.720516][T19784] binder: 19783:19784 ioctl c0306201 200003c0 returned -22
[  645.731917][ T3876] kobject: 'loop5' (000000004dc84303): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  645.766602][ T3876] kobject: 'loop2' (000000004efe9e18): kobject_uevent_env
[  645.776198][ T3876] kobject: 'loop2' (000000004efe9e18): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  645.788856][ T3876] kobject: 'loop3' (00000000296f63b0): kobject_uevent_env
[  645.799569][ T3876] kobject: 'loop3' (00000000296f63b0): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  645.810474][ T3876] kobject: 'loop4' (00000000e3494c6c): kobject_uevent_env
[  645.821445][ T3876] kobject: 'loop4' (00000000e3494c6c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  645.835397][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
[  645.842669][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  645.854065][ T3876] kobject: 'loop2' (000000004efe9e18): kobject_uevent_env
[  645.865551][ T3876] kobject: 'loop2' (000000004efe9e18): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  645.876656][ T3876] kobject: 'loop5' (000000004dc84303): kobject_uevent_env
[  645.883992][ T3876] kobject: 'loop5' (000000004dc84303): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  645.975844][ T3876] kobject: 'loop4' (00000000e3494c6c): kobject_uevent_env
[  645.983007][ T3876] kobject: 'loop4' (00000000e3494c6c): fill_kobj_path: path = '/devices/virtual/block/loop4'
07:30:37 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffff600000}, 0x0)

07:30:37 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x0, 0x5408}}, 0x0)

07:30:37 executing program 0:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000006a0077bb45e9f52b67dcf87d00000000000010000000000000000093"], 0x0, 0x0, 0x0})

07:30:37 executing program 2:
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)

07:30:37 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="51670004"], 0x0, 0x0, 0x0})

07:30:37 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:37 executing program 2:
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)

[  646.393436][ T3876] kobject: 'loop1' (0000000031760c2d): kobject_uevent_env
[  646.422750][ T3876] kobject: 'loop1' (0000000031760c2d): fill_kobj_path: path = '/devices/virtual/block/loop1'
07:30:37 executing program 0:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000006a0077bb45e9f52b67dcf87d00000000000010000000000000000093"], 0x0, 0x0, 0x0})

[  646.448411][T19919] binder: 19918:19919 unknown command 67135313
[  646.457176][T19919] binder: 19918:19919 ioctl c0306201 200003c0 returned -22
[  646.457541][ T3876] kobject: 'loop2' (000000004efe9e18): kobject_uevent_env
[  646.475292][ T3876] kobject: 'loop2' (000000004efe9e18): fill_kobj_path: path = '/devices/virtual/block/loop2'
07:30:37 executing program 2:
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)

[  646.505835][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
[  646.528339][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
07:30:37 executing program 0:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000006a0077bb45e9f52b67dcf87d00000000000010000000000000000093"], 0x0, 0x0, 0x0})

07:30:37 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="51670005"], 0x0, 0x0, 0x0})

07:30:37 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x0, 0x60ff}}, 0x0)

[  646.583259][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
[  646.600591][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  646.614248][T20142] binder: 20140:20142 unknown command 83912529
[  646.620694][T20142] binder: 20140:20142 ioctl c0306201 200003c0 returned -22
[  646.637906][ T3876] kobject: 'loop5' (000000004dc84303): kobject_uevent_env
[  646.652950][ T3876] kobject: 'loop5' (000000004dc84303): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  646.672098][ T3876] kobject: 'loop2' (000000004efe9e18): kobject_uevent_env
[  646.679801][ T3876] kobject: 'loop2' (000000004efe9e18): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  646.700958][ T3876] kobject: 'loop3' (00000000296f63b0): kobject_uevent_env
[  646.711069][ T3876] kobject: 'loop3' (00000000296f63b0): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  646.722088][ T3876] kobject: 'loop4' (00000000e3494c6c): kobject_uevent_env
[  646.730238][ T3876] kobject: 'loop4' (00000000e3494c6c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  646.757661][ T3876] kobject: 'loop5' (000000004dc84303): kobject_uevent_env
[  646.765526][ T3876] kobject: 'loop5' (000000004dc84303): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  646.815282][ T3876] kobject: 'loop3' (00000000296f63b0): kobject_uevent_env
[  646.822549][ T3876] kobject: 'loop3' (00000000296f63b0): fill_kobj_path: path = '/devices/virtual/block/loop3'
07:30:38 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x6, 0x4)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xbc1f}, 0x0)

07:30:38 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x18, &(0x7f0000000040)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}}, 0xff74)

07:30:38 executing program 0:
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000006a0077bb45e9f52b67dcf87d00000000000010000000000000000093"], 0x0, 0x0, 0x0})

07:30:38 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:38 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="51670006"], 0x0, 0x0, 0x0})

07:30:38 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x0, 0x101208}}, 0x0)

07:30:38 executing program 0:
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000006a0077bb45e9f52b67dcf87d00000000000010000000000000000093"], 0x0, 0x0, 0x0})

[  647.314100][ T3876] kobject: 'loop1' (0000000031760c2d): kobject_uevent_env
[  647.321299][ T3876] kobject: 'loop1' (0000000031760c2d): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  647.345530][T20376] binder: 20355:20376 unknown command 100689745
[  647.356255][T20376] binder: 20355:20376 ioctl c0306201 200003c0 returned -22
[  647.398556][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
[  647.407240][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
07:30:38 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x18, &(0x7f0000000040)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}}, 0xff74)

07:30:38 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x0, 0x800408}}, 0x0)

07:30:38 executing program 0:
syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x2e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000006a0077bb45e9f52b67dcf87d00000000000010000000000000000093"], 0x0, 0x0, 0x0})

07:30:38 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:38 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\a'], 0x0, 0x0, 0x0})

[  647.460434][ T3876] kobject: 'loop2' (000000004efe9e18): kobject_uevent_env
[  647.478908][ T3876] kobject: 'loop2' (000000004efe9e18): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  647.531003][ T3876] kobject: 'loop3' (00000000296f63b0): kobject_uevent_env
[  647.554627][ T3876] kobject: 'loop3' (00000000296f63b0): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  647.570983][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
[  647.578673][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  647.591674][T20733] binder: 20711:20733 unknown command 117466961
[  647.597424][ T3876] kobject: 'loop4' (00000000e3494c6c): kobject_uevent_env
[  647.598620][T20733] binder: 20711:20733 ioctl c0306201 200003c0 returned -22
[  647.608785][ T3876] kobject: 'loop4' (00000000e3494c6c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  647.623574][ T3876] kobject: 'loop5' (000000004dc84303): kobject_uevent_env
[  647.634243][ T3876] kobject: 'loop5' (000000004dc84303): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  647.651719][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
[  647.659522][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  647.709015][ T3876] kobject: 'loop5' (000000004dc84303): kobject_uevent_env
[  647.718045][ T3876] kobject: 'loop5' (000000004dc84303): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  647.730271][ T3876] kobject: 'loop3' (00000000296f63b0): kobject_uevent_env
[  647.737796][ T3876] kobject: 'loop3' (00000000296f63b0): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  647.788025][ T3876] kobject: 'loop4' (00000000e3494c6c): kobject_uevent_env
[  647.796304][ T3876] kobject: 'loop4' (00000000e3494c6c): fill_kobj_path: path = '/devices/virtual/block/loop4'
07:30:39 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040), 0x0)
ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3)

07:30:39 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x18, &(0x7f0000000040)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}}, 0xff74)

07:30:39 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:30:39 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00H'], 0x0, 0x0, 0x0})

07:30:39 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x0, 0x901208}}, 0x0)

07:30:39 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:39 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x18, &(0x7f0000000040)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast2}}, 0xff74)

[  648.187114][ T3876] kobject: 'loop1' (0000000031760c2d): kobject_uevent_env
[  648.190267][T20901] binder: 20900:20901 unknown command 1207986001
[  648.202968][ T3876] kobject: 'loop1' (0000000031760c2d): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  648.207515][T20901] binder: 20900:20901 ioctl c0306201 200003c0 returned -22
[  648.215869][T20909] binder: 20897:20909 ioctl c0306201 0 returned -14
07:30:39 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  648.242015][ T3876] kobject: 'loop2' (000000004efe9e18): kobject_uevent_env
[  648.266434][ T3876] kobject: 'loop2' (000000004efe9e18): fill_kobj_path: path = '/devices/virtual/block/loop2'
07:30:39 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)

07:30:39 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00L'], 0x0, 0x0, 0x0})

[  648.306467][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
[  648.328442][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
07:30:39 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x0, 0xe05108}}, 0x0)

07:30:39 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  648.376169][ T3876] kobject: 'loop5' (000000004dc84303): kobject_uevent_env
[  648.387851][ T3876] kobject: 'loop5' (000000004dc84303): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  648.406808][ T3876] kobject: 'loop3' (00000000296f63b0): kobject_uevent_env
[  648.414941][ T3876] kobject: 'loop3' (00000000296f63b0): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  648.438092][ T3876] kobject: 'loop4' (00000000e3494c6c): kobject_uevent_env
[  648.450633][ T3876] kobject: 'loop4' (00000000e3494c6c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  648.484001][T21121] binder: 21119:21121 unknown command 1275094865
[  648.500050][T21128] binder: 21127:21128 ioctl c0306201 0 returned -14
[  648.521774][T21121] binder: 21119:21121 ioctl c0306201 200003c0 returned -22
[  648.562722][ T3876] kobject: 'loop2' (000000004efe9e18): kobject_uevent_env
[  648.572116][ T3876] kobject: 'loop2' (000000004efe9e18): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  648.589907][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
[  648.607787][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  648.628105][ T3876] kobject: 'loop3' (00000000296f63b0): kobject_uevent_env
[  648.643046][ T3876] kobject: 'loop3' (00000000296f63b0): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  648.654878][ T3876] kobject: 'loop5' (000000004dc84303): kobject_uevent_env
[  648.662198][ T3876] kobject: 'loop5' (000000004dc84303): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  648.687447][ T3876] kobject: 'loop4' (00000000e3494c6c): kobject_uevent_env
[  648.694993][ T3876] kobject: 'loop4' (00000000e3494c6c): fill_kobj_path: path = '/devices/virtual/block/loop4'
07:30:40 executing program 1:
r0 = socket$inet(0x2, 0x4, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x0, 0x0)
ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f00000000c0)={0xffffffff, 0xa, 0x9, "00408f33727b1ead3a1933f92ac784ecd6e72ef9e87c5aa93c782089506a17513244b97912d976278c8dc28779aab4a032c4e524034157fdda4e1304", 0x1e, "3c50dbc8e31e5eae3081a223919312d37762f3d77c7a34b7b4152518b067334d992be6bd6d200f8030ee14e08d033da0bcb6684f404609d3d3c1a251", 0x8})
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040), 0x0)
ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000180)=0x40)

07:30:40 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)

07:30:40 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

07:30:40 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x0, 0x8048000}}, 0x0)

07:30:40 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00`'], 0x0, 0x0, 0x0})

07:30:40 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  649.105943][ T3876] kobject: 'loop1' (0000000031760c2d): kobject_uevent_env
[  649.113119][ T3876] kobject: 'loop1' (0000000031760c2d): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  649.131220][T21348] binder: 21347:21348 unknown command 1610639185
[  649.139254][T21342] binder: 21341:21342 ioctl c0306201 0 returned -14
07:30:40 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)

[  649.153447][T21348] binder: 21347:21348 ioctl c0306201 200003c0 returned -22
[  649.167738][ T3876] kobject: 'loop2' (000000004efe9e18): kobject_uevent_env
07:30:40 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  649.201167][ T3876] kobject: 'loop2' (000000004efe9e18): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  649.232251][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
07:30:40 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)

07:30:40 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x0, 0x8121000}}, 0x0)

07:30:40 executing program 1:
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x101201, 0x0)
r1 = gettid()
ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0x8, 0x20, 0xb86, 0x40, 0x18, 0x8, 0xff, 0x7, 0x8b, 0x1f, 0x5, 0x1ff})
r2 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
r3 = getpgrp(0xffffffffffffffff)
ptrace$peek(0x1, r1, &(0x7f0000000180))
getsockname$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, &(0x7f0000000240)=0x10)
migrate_pages(r3, 0xfffffffffffffffa, &(0x7f0000000100)=0x6, &(0x7f0000000140)=0xfff)
sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040), 0x0)

[  649.265392][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
07:30:40 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:40 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00h'], 0x0, 0x0, 0x0})

07:30:40 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

07:30:40 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)

[  649.308418][ T3876] kobject: 'loop2' (000000004efe9e18): kobject_uevent_env
[  649.336832][ T3876] kobject: 'loop2' (000000004efe9e18): fill_kobj_path: path = '/devices/virtual/block/loop2'
07:30:40 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  649.389858][ T3876] kobject: 'loop3' (00000000296f63b0): kobject_uevent_env
[  649.405096][T21622] binder: 21620:21622 unknown command 1744856913
[  649.405937][ T3876] kobject: 'loop3' (00000000296f63b0): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  649.426029][T21622] binder: 21620:21622 ioctl c0306201 200003c0 returned -22
07:30:40 executing program 2:
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)

07:30:40 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0})

[  649.433493][ T3876] kobject: 'loop1' (0000000031760c2d): kobject_uevent_env
[  649.442353][ T3876] kobject: 'loop1' (0000000031760c2d): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  649.460179][ T3876] kobject: 'loop4' (00000000e3494c6c): kobject_uevent_env
[  649.470835][ T3876] kobject: 'loop4' (00000000e3494c6c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  649.483033][ T3876] kobject: 'loop5' (000000004dc84303): kobject_uevent_env
07:30:40 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x0, 0x8129000}}, 0x0)

07:30:40 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:40 executing program 2:
r0 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)

[  649.518390][ T3876] kobject: 'loop5' (000000004dc84303): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  649.541807][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
[  649.562126][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  649.573429][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
[  649.586635][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  649.602931][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
07:30:40 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0})

[  649.616106][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  649.637027][ T3876] kobject: 'loop4' (00000000e3494c6c): kobject_uevent_env
[  649.651985][ T3876] kobject: 'loop4' (00000000e3494c6c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  649.666308][ T3876] kobject: 'loop2' (000000004efe9e18): kobject_uevent_env
[  649.673671][ T3876] kobject: 'loop2' (000000004efe9e18): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  649.688773][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
[  649.696898][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  649.718676][ T3876] kobject: 'loop5' (000000004dc84303): kobject_uevent_env
[  649.727240][ T3876] kobject: 'loop5' (000000004dc84303): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  649.744393][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
[  649.758706][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  649.775273][ T3876] kobject: 'loop3' (00000000296f63b0): kobject_uevent_env
[  649.782534][ T3876] kobject: 'loop3' (00000000296f63b0): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  649.804407][ T3876] kobject: 'loop2' (000000004efe9e18): kobject_uevent_env
[  649.811670][ T3876] kobject: 'loop2' (000000004efe9e18): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  649.824400][ T3876] kobject: 'loop4' (00000000e3494c6c): kobject_uevent_env
[  649.831534][ T3876] kobject: 'loop4' (00000000e3494c6c): fill_kobj_path: path = '/devices/virtual/block/loop4'
07:30:41 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000008c0)=ANY=[@ANYBLOB="6e617400000000000000000007000000000000000000000000000000000000001b000000050000001c0600001c0400001c0400006402000064020000000000005005000050050000500500005005000050050000050000009adcbc7d62a36e0c549906d69adc63c2800e06239131d49f91389f34fc83ea69c7677f5136027a8b38b26e60cd06160d1b1efb0e56224a9f9f70bef126cee974b33f38cfb295930941d3a9b0030301b69c762267dba82a0bda4a43f62f41bcadd01d76a920814c954ec0ba01b401af633abc7132bd0b50604efd8116ad09197bf270c9fafadbc2db05f9822559cf3f0c9d7624c02397c18b"], 0x1)
r2 = dup(r1)
getsockname$unix(r2, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e)
getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000009c0)={'raw\x00', 0x1000, "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"}, &(0x7f0000000140)=0x1024)
ioctl$LOOP_SET_CAPACITY(r2, 0x4c07)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000180)={0x0, 0x2000})
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040), 0x0)

07:30:41 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00l'], 0x0, 0x0, 0x0})

07:30:41 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0})

07:30:41 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x0, 0x8150000}}, 0x0)

07:30:41 executing program 2:
r0 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)

07:30:41 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  650.177030][ T3876] kobject: 'loop1' (0000000031760c2d): kobject_uevent_env
[  650.190028][ T3876] kobject: 'loop1' (0000000031760c2d): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  650.190377][T22059] binder: 22056:22059 unknown command 1811965777
[  650.221001][T22059] binder: 22056:22059 ioctl c0306201 200003c0 returned -22
07:30:41 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})

07:30:41 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x0, 0x8350000}}, 0x0)

[  650.255179][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
[  650.268720][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
07:30:41 executing program 2:
r0 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)

07:30:41 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:41 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})

[  650.317263][ T3876] kobject: 'loop3' (00000000296f63b0): kobject_uevent_env
[  650.345903][ T3876] kobject: 'loop3' (00000000296f63b0): fill_kobj_path: path = '/devices/virtual/block/loop3'
07:30:41 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00t'], 0x0, 0x0, 0x0})

[  650.389126][ T3876] kobject: 'loop2' (000000004efe9e18): kobject_uevent_env
[  650.424166][ T3876] kobject: 'loop2' (000000004efe9e18): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  650.437128][ T3876] kobject: 'loop4' (00000000e3494c6c): kobject_uevent_env
[  650.445769][ T3876] kobject: 'loop4' (00000000e3494c6c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  650.459271][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
[  650.467425][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  650.480768][T22489] binder: 22488:22489 unknown command 1946183505
[  650.494492][ T3876] kobject: 'loop5' (000000004dc84303): kobject_uevent_env
[  650.497458][T22489] binder: 22488:22489 ioctl c0306201 200003c0 returned -22
[  650.511938][ T3876] kobject: 'loop5' (000000004dc84303): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  650.530818][ T3876] kobject: 'loop3' (00000000296f63b0): kobject_uevent_env
[  650.539110][ T3876] kobject: 'loop3' (00000000296f63b0): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  650.554159][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
[  650.561437][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  650.623032][ T3876] kobject: 'loop4' (00000000e3494c6c): kobject_uevent_env
[  650.642869][ T3876] kobject: 'loop4' (00000000e3494c6c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  650.655072][ T3876] kobject: 'loop5' (000000004dc84303): kobject_uevent_env
[  650.662218][ T3876] kobject: 'loop5' (000000004dc84303): fill_kobj_path: path = '/devices/virtual/block/loop5'
07:30:42 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x4)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040), 0x0)

07:30:42 executing program 2:
socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)

07:30:42 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})

07:30:42 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x0, 0x851e000}}, 0x0)

07:30:42 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:42 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00z'], 0x0, 0x0, 0x0})

07:30:42 executing program 2:
socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)

07:30:42 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x17, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000006a0077bb45"], 0x0, 0x0, 0x0})

[  651.086732][T22628] binder: 22626:22628 unknown command 2046846801
[  651.089354][ T3876] kobject: 'loop1' (0000000031760c2d): kobject_uevent_env
[  651.097341][T22628] binder: 22626:22628 ioctl c0306201 200003c0 returned -22
[  651.120658][ T3876] kobject: 'loop1' (0000000031760c2d): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  651.158982][ T3876] kobject: 'loop2' (000000004efe9e18): kobject_uevent_env
[  651.189665][   T22] binder: release 22807:22831 transaction 80 out, still active
[  651.191155][ T3876] kobject: 'loop2' (000000004efe9e18): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  651.206310][   T22] binder: undelivered TRANSACTION_COMPLETE
07:30:42 executing program 2:
socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)

07:30:42 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:42 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x0, 0x8540000}}, 0x0)

07:30:42 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x17, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000006a0077bb45"], 0x0, 0x0, 0x0})

[  651.230051][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
[  651.261033][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  651.285292][T22852] binder: 22851:22852 unknown command 26449
[  651.300659][ T3876] kobject: 'loop5' (000000004dc84303): kobject_uevent_env
[  651.307813][ T7720] binder: release 22858:22860 transaction 81 out, still active
[  651.307822][ T7720] binder: undelivered TRANSACTION_COMPLETE
[  651.311456][T22852] binder: 22851:22852 ioctl c0306201 200003c0 returned -22
[  651.320151][ T3876] kobject: 'loop5' (000000004dc84303): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  651.340095][ T3876] kobject: 'loop3' (00000000296f63b0): kobject_uevent_env
[  651.348354][ T3876] kobject: 'loop3' (00000000296f63b0): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  651.359299][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
[  651.366756][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  651.377676][ T3876] kobject: 'loop4' (00000000e3494c6c): kobject_uevent_env
[  651.388955][ T3876] kobject: 'loop4' (00000000e3494c6c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  651.455066][ T3876] kobject: 'loop3' (00000000296f63b0): kobject_uevent_env
[  651.462252][ T3876] kobject: 'loop3' (00000000296f63b0): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  651.484897][ T3876] kobject: 'loop5' (000000004dc84303): kobject_uevent_env
[  651.492069][ T3876] kobject: 'loop5' (000000004dc84303): fill_kobj_path: path = '/devices/virtual/block/loop5'
07:30:42 executing program 1:
r0 = socket$inet(0x2, 0x80001, 0x84)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x80000, 0x0)
ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000140)=""/14)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040), 0x0)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f00000000c0)=0x4)

07:30:42 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:42 executing program 2:
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, 0x0, 0x0)

07:30:42 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x17, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000006a0077bb45"], 0x0, 0x0, 0x0})

07:30:42 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x0, 0xff600000}}, 0x0)

07:30:42 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  652.000021][ T3876] kobject: 'loop1' (0000000031760c2d): kobject_uevent_env
[  652.026214][T23070] binder: 23068:23070 unknown command 26449
[  652.026590][ T7720] binder: release 23066:23073 transaction 82 out, still active
[  652.034637][T23070] binder: 23068:23070 ioctl c0306201 200003c0 returned -22
07:30:43 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x23, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000006a0077bb45e9f52b67dcf87d0000000000"], 0x0, 0x0, 0x0})

07:30:43 executing program 2:
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, 0x0, 0x0)

[  652.042000][ T3876] kobject: 'loop1' (0000000031760c2d): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  652.066347][ T7720] binder: undelivered TRANSACTION_COMPLETE
[  652.088088][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
07:30:43 executing program 2:
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, 0x0, 0x0)

[  652.110216][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  652.131917][ T3876] kobject: 'loop2' (000000004efe9e18): kobject_uevent_env
[  652.135707][ T7728] binder: undelivered TRANSACTION_COMPLETE
[  652.148965][ T3876] kobject: 'loop2' (000000004efe9e18): fill_kobj_path: path = '/devices/virtual/block/loop2'
07:30:43 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:43 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x23, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000006a0077bb45e9f52b67dcf87d0000000000"], 0x0, 0x0, 0x0})

07:30:43 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  652.172872][ T3876] kobject: 'loop2' (000000004efe9e18): kobject_uevent_env
[  652.199594][ T3876] kobject: 'loop2' (000000004efe9e18): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  652.251314][ T7728] binder: undelivered TRANSACTION_COMPLETE
[  652.262870][T23294] binder: 23292:23294 unknown command 26449
[  652.267629][ T3876] kobject: 'loop5' (000000004dc84303): kobject_uevent_env
[  652.283963][T23294] binder: 23292:23294 ioctl c0306201 200003c0 returned -22
[  652.295548][ T3876] kobject: 'loop5' (000000004dc84303): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  652.308202][ T3876] kobject: 'loop4' (00000000e3494c6c): kobject_uevent_env
[  652.315576][ T3876] kobject: 'loop4' (00000000e3494c6c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  652.327249][ T3876] kobject: 'loop3' (00000000296f63b0): kobject_uevent_env
[  652.335582][ T3876] kobject: 'loop3' (00000000296f63b0): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  652.347198][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
[  652.354489][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  652.388542][ T3876] kobject: 'loop5' (000000004dc84303): kobject_uevent_env
[  652.400502][ T3876] kobject: 'loop5' (000000004dc84303): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  652.478410][ T3876] kobject: 'loop4' (00000000e3494c6c): kobject_uevent_env
[  652.485761][ T3876] kobject: 'loop4' (00000000e3494c6c): fill_kobj_path: path = '/devices/virtual/block/loop4'
07:30:43 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x2, 0x21c941)
ioctl$VT_RELDISP(r0, 0x5605)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x1}, 0x10)
r1 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040), 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x101000, 0x0)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000240)="a4a0538b1c6fef9c84008d3f6e4fd0fd6928389c771cf223bda3b34916e476db1b59c825a58ba85b974fb0cdbdbb3aa6378b05a499a238232467292620783e741fea54b919bc93a8ceaea85a17f8d7f79e281f23a858f0d0629eacf5f8460b5afc4151384e43ce859d765f81116215ab55285b1e77d7aba271006533", 0x7c}, {&(0x7f00000002c0)="d19724b28c4595963c370dcf8faff40660f30a69c0f628a2553929e5ad1d98cfc692a7620dc9256c85c8f4e75c82b393749ec5", 0x33}], 0x2)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={<r3=>0xffffffffffffffff}, 0x111, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r3}}, 0xc)

07:30:43 executing program 2:
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x1c)

07:30:43 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x0, 0x150800000000}}, 0x0)

07:30:43 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x23, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000006a0077bb45e9f52b67dcf87d0000000000"], 0x0, 0x0, 0x0})

07:30:43 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

07:30:43 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  652.919143][ T3876] kobject: 'loop1' (0000000031760c2d): kobject_uevent_env
[  652.945960][ T3876] kobject: 'loop1' (0000000031760c2d): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  652.954422][ T7728] binder: undelivered TRANSACTION_COMPLETE
[  652.962323][T23419] binder: 23411:23419 unknown command 26449
07:30:43 executing program 2:
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x1c)

07:30:43 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x29, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000006a0077bb45e9f52b67dcf87d0000000000001000000000"], 0x0, 0x0, 0x0})

[  652.990482][T23419] binder: 23411:23419 ioctl c0306201 200003c0 returned -22
[  652.994593][ T3876] kobject: 'loop2' (000000004efe9e18): kobject_uevent_env
[  653.014460][ T3876] kobject: 'loop2' (000000004efe9e18): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  653.024989][T23446] binder: 23437:23446 got transaction with invalid data ptr
07:30:44 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  653.032809][T23446] binder: 23437:23446 transaction failed 29201/-14, size 16-0 line 3179
[  653.039176][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
[  653.061929][T13054] binder: undelivered TRANSACTION_ERROR: 29201
[  653.075950][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
07:30:44 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x29, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000006a0077bb45e9f52b67dcf87d0000000000001000000000"], 0x0, 0x0, 0x0})

[  653.089773][ T3876] kobject: 'loop5' (000000004dc84303): kobject_uevent_env
[  653.118271][ T3876] kobject: 'loop5' (000000004dc84303): fill_kobj_path: path = '/devices/virtual/block/loop5'
07:30:44 executing program 2:
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x1c)

07:30:44 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

[  653.138431][T23631] binder: 23624:23631 unknown command 26449
[  653.158216][ T3876] kobject: 'loop2' (000000004efe9e18): kobject_uevent_env
[  653.168192][T23638] binder: 23637:23638 got transaction with invalid data ptr
[  653.176815][ T3876] kobject: 'loop2' (000000004efe9e18): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  653.187334][T23638] binder: 23637:23638 transaction failed 29201/-14, size 16-0 line 3179
[  653.195829][T23631] binder: 23624:23631 ioctl c0306201 200003c0 returned -22
[  653.205827][ T7728] binder: undelivered TRANSACTION_ERROR: 29201
[  653.223413][ T3876] kobject: 'loop3' (00000000296f63b0): kobject_uevent_env
[  653.234689][ T3876] kobject: 'loop3' (00000000296f63b0): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  653.249818][ T3876] kobject: 'loop4' (00000000e3494c6c): kobject_uevent_env
[  653.257572][ T3876] kobject: 'loop4' (00000000e3494c6c): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  653.268796][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
[  653.280459][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  653.310092][ T3876] kobject: 'loop2' (000000004efe9e18): kobject_uevent_env
[  653.322055][ T3876] kobject: 'loop2' (000000004efe9e18): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  653.338090][ T3876] kobject: 'loop5' (000000004dc84303): kobject_uevent_env
[  653.345651][ T3876] kobject: 'loop5' (000000004dc84303): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  653.417000][ T3876] kobject: 'loop4' (00000000e3494c6c): kobject_uevent_env
[  653.424291][ T3876] kobject: 'loop4' (00000000e3494c6c): fill_kobj_path: path = '/devices/virtual/block/loop4'
07:30:44 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x29, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000006a0077bb45e9f52b67dcf87d0000000000001000000000"], 0x0, 0x0, 0x0})

07:30:44 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x0, 0x350800000000}}, 0x0)

07:30:44 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000))
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x0, 0x8000, 0x8000}, &(0x7f0000000280)=0x14)
r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x403)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000040))
r2 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000640)={'irlan0\x00', {0x2, 0x4e21}})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000480))
fremovexattr(r3, &(0x7f00000000c0)=@known='trusted.overlay.opaque\x00')
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x10f, 0x0, &(0x7f00000004c0), 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
request_key(&(0x7f0000001840)='user\x00', &(0x7f0000001880)={'syz', 0x2}, &(0x7f00000018c0)='Y\x00', 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

07:30:44 executing program 1:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5, 0x400380)
ioctl$VT_DISALLOCATE(r0, 0x5608)
r1 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x5}, 0x0)

07:30:44 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)

07:30:44 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  653.810255][ T3876] kobject: 'loop1' (0000000031760c2d): kobject_uevent_env
[  653.813413][T23761] binder: 23760:23761 unknown command 26449
[  653.819941][ T3876] kobject: 'loop1' (0000000031760c2d): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  653.834710][T23767] binder: 23756:23767 got transaction with invalid data ptr
[  653.849136][T23761] binder: 23760:23761 ioctl c0306201 200003c0 returned -22
07:30:44 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000006a0077bb45e9f52b67dcf87d0000000000001000000000000000"], 0x0, 0x0, 0x0})

[  653.858444][T23762] kobject: 'kvm' (000000002d0a2722): kobject_uevent_env
[  653.859947][T23767] binder: 23756:23767 transaction failed 29201/-14, size 16-0 line 3179
[  653.866035][T23762] kobject: 'kvm' (000000002d0a2722): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[  653.893627][ T7728] binder: undelivered TRANSACTION_ERROR: 29201
[  653.921674][ T3876] kobject: 'loop0' (00000000bb083f8b): kobject_uevent_env
[  653.929273][ T3876] kobject: 'loop0' (00000000bb083f8b): fill_kobj_path: path = '/devices/virtual/block/loop0'
07:30:44 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='Qg\x00\x00'], 0x0, 0x0, 0x0})

[  653.967616][T24049] binder: 24016:24049 got transaction with invalid data ptr
[  653.988752][ T3876] kobject: 'loop5' (000000004dc84303): kobject_uevent_env
[  654.000901][ T3876] kobject: 'loop5' (000000004dc84303): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  654.007471][T23757] kobject: 'kvm' (000000002d0a2722): kobject_uevent_env
07:30:44 executing program 3:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev}}, 0x0, 0x0, 0x0, 0x0, 0x540800000000}}, 0x0)

07:30:44 executing program 4:
mkdir(&(0x7f0000004080)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0)