g program 0: ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="18010000", @ANYRES16=r2, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10) ioctl$TCSBRKP(r1, 0x7b9, 0x20717000) [ 1153.044394] binder: 8911:8915 transaction failed 29201/-22, size 24-8 line 2994 [ 1153.075868] binder: 8911:8915 ioctl c0306201 20000440 returned -14 [ 1153.094825] binder_alloc: binder_alloc_mmap_handler: 8911 20001000-20002000 already mapped failed -16 [ 1153.104729] Unknown ioctl 21531 18:38:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000df1000/0x4000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000e0b000/0x3000)=nil}) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0xaf3, 0x40) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000200)={0x0, 0x1, @stop_pts=0x2614}) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000000c0)=""/220) 18:38:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)="67b380926993bf646b4e0b224fe2e935c230ee4f81d7abe0afe6729f2709cbec99f6eca1f8ad5c45769cc84b2885f0e9c3678cdf37a1090553ea1ed058bdd3700b58b873", 0x44) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x8000) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4e23, 0x80, @ipv4={[], [], @multicast2}, 0x7}, {0xa, 0x4e22, 0xe1ce, @dev={0xfe, 0x80, [], 0x16}, 0x8}, 0xfffffffffffffffb, [0x1078c52c, 0x2, 0x3ff, 0x6, 0x2, 0xc, 0x384, 0x2]}, 0x5c) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={r2, 0x0, r0}) 18:38:57 executing program 3: lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000002c0)=0xe8) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000600)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000640)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in6=@empty}}, &(0x7f0000000740)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000000880)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000008c0)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f00000009c0)=0xe8) r9 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a00)={0x0, 0x0, 0x0}, &(0x7f0000000a40)=0xc) r11 = getgid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000a80)={0x0, 0x0, 0x0}, &(0x7f0000000ac0)=0xc) lstat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, &(0x7f0000000c00)=0xc) getgroups(0x4, &(0x7f0000000c40)=[0xee00, 0x0, 0xee01, 0xee01]) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = getgid() setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000001040)=ANY=[@ANYBLOB="02000000010000000000000002000300", @ANYRES32=r0, @ANYBLOB="02000700", @ANYRES32=r1, @ANYBLOB="02000400", @ANYRES32=r2, @ANYBLOB="02000000", @ANYRES32=r3, @ANYBLOB="02000400", @ANYRES32=r4, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="02000100", @ANYRES32=r6, @ANYBLOB="7ab2b9cbe399e1596d91a4d92cdf163a51482b2de5d930bed69cc27202b243eb825f047b155f0627f414aa7bdc8ea3bc9a40176aae8b2986f5df9aefc8442d4aaaa20df9e47338c082e31075582c30a8606531c0e5972915de20a784d217fa8284cc1ff40b8d99a33b48bd4b4d4ae572663f2e3b5244de43e7487f88cb320ac369fd60c3e1af60358b9977b7fade22c891105dce69095adbcf735d4895ce311125181177c7005bd2f50626c51a7b2f9cf2418fe33ca3cf76dd8282d4cd7dfbbdf02ddec4604d5bc3cbbd", @ANYRES32=r7, @ANYBLOB="02000300", @ANYRES32=r8, @ANYBLOB="02000500", @ANYRES32=r9, @ANYBLOB="040001000000000008000200", @ANYRES32=r10, @ANYBLOB="08000600", @ANYRES32=r11, @ANYBLOB="08000400", @ANYRES32=r12, @ANYBLOB="08000200", @ANYRES32=r13, @ANYBLOB="08000600", @ANYRES32=r14, @ANYBLOB="08000400", @ANYRES32=r15, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r16, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r17, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r18, @ANYBLOB="08000400", @ANYRES32=r19, @ANYBLOB="10000200000000002000040000000000"], 0xc4, 0x1) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r20 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') ioctl$TUNGETIFF(r20, 0x800454d2, &(0x7f00000000c0)) sync_file_range(r20, 0x5, 0xd84, 0x1) 18:38:57 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, 0x1ff}, 0x1c) [ 1153.115926] binder: BINDER_SET_CONTEXT_MGR already set [ 1153.121998] binder: 8911:8915 ioctl 40046207 0 returned -16 [ 1153.150305] binder: 8911:8925 transaction failed 29201/-22, size 24-8 line 2994 [ 1153.187040] binder: 8911:8925 ioctl c0306201 20000440 returned -14 [ 1153.204874] binder: undelivered TRANSACTION_ERROR: 29201 18:38:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1153.230268] binder: undelivered TRANSACTION_ERROR: 29201 18:38:57 executing program 2: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1b\x00', 0x100000105}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) dup2(r0, r1) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00i\x0e\xa9[\x00\xce\x00', @ifru_mtu=0x1}) [ 1153.355863] binder: 8949:8951 transaction failed 29201/-22, size 24-8 line 2994 [ 1153.387914] binder: 8949:8951 ioctl c0306201 20000440 returned -14 [ 1153.434294] binder_alloc: binder_alloc_mmap_handler: 8949 20001000-20002000 already mapped failed -16 [ 1153.458493] binder: BINDER_SET_CONTEXT_MGR already set [ 1153.465247] binder: 8949:8956 ioctl 40046207 0 returned -16 [ 1153.480147] binder_transaction: 7 callbacks suppressed [ 1153.480166] binder: 8949:8957 got transaction to invalid handle [ 1153.495282] binder: 8949:8957 transaction failed 29201/-22, size 24-8 line 2994 [ 1153.511174] binder: undelivered TRANSACTION_ERROR: 29201 [ 1153.517472] binder: 8949:8957 ioctl c0306201 20000440 returned -14 [ 1153.532455] binder: undelivered TRANSACTION_ERROR: 29201 [ 1153.696172] protocol 88fb is buggy, dev hsr_slave_0 [ 1153.701268] protocol 88fb is buggy, dev hsr_slave_1 [ 1153.706435] protocol 88fb is buggy, dev hsr_slave_0 [ 1153.711501] protocol 88fb is buggy, dev hsr_slave_1 [ 1153.889197] Unknown ioctl 21531 18:38:58 executing program 5: inotify_init1(0x800) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000040), 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0xfffffffffffffff8, 0x8, 0x100, 0x400, 0x8, 0x3, 0xffffffffffffffe1, {0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x9, 0x40, 0x9, 0x3, 0x3a29dfe1}}, &(0x7f0000000340)=0xb0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={r3, @in6={{0xa, 0x4e23, 0x1a2, @rand_addr="2a5d3aa152c674da8ce3b6b6cc78f24e", 0x1ff}}, 0x2, 0x8b, 0x9563, 0x2, 0x81}, &(0x7f0000000580)=0x98) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000640)={0x81, 0x0, [0x1, 0x2, 0x8, 0x200]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) add_key(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0, 0x0) pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={r5, @in={{0x2, 0x4e20, @empty}}, 0x2, 0x9}, 0x90) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:38:58 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x2) ftruncate(r0, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f0000000200)=""/57, 0x39}, {&(0x7f0000000240)=""/62, 0x3e}, {&(0x7f0000000340)=""/181, 0xb5}, {&(0x7f0000000280)=""/103, 0x67}, {&(0x7f0000000400)=""/148, 0x94}, {&(0x7f00000004c0)=""/65, 0x41}, {&(0x7f0000000540)=""/22, 0x16}], 0x8, 0x0) preadv(r1, &(0x7f0000000700), 0x13b, 0x10400003) connect$vsock_dgram(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @reserved}, 0x10) 18:38:58 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x1ff}, 0x1c) 18:38:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xffffffffffffffd3) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000040)=0xc89, 0x6c2a1f6a380dd874) r4 = gettid() perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x8, 0x5, 0x0, 0x7, 0x0, 0x81, 0x4, 0x9, 0x2, 0x0, 0x9, 0xca4, 0x93d, 0x722e, 0x10001, 0xa190, 0x24000, 0x7f, 0x8001, 0x7fffffff, 0x0, 0x0, 0x7, 0x1, 0x9, 0x3, 0x2df, 0xe92, 0x0, 0x9, 0x8001, 0x0, 0xffffffff, 0x9, 0x6, 0x2, 0x0, 0xffffffffffff8001, 0x4, @perf_bp={&(0x7f0000000140), 0x3}, 0x10200, 0x3, 0x5, 0xd, 0x6, 0x101, 0x3fffc0000000}, r4, 0x5, r1, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:38:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:38:58 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1a1, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000280)={'tunl0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) fstat(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000240)='/dev/loop0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuseblk\x00', 0x80000, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions='default_permissions'}], [{@subj_type={'subj_type'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/cachefiles\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x7fff}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@permit_directio='permit_directio'}, {@obj_role={'obj_role', 0x3d, 'tunl0\x00'}}]}}) [ 1154.070004] binder: 8972:8973 got transaction to invalid handle [ 1154.091216] binder: 8972:8973 transaction failed 29201/-22, size 24-8 line 2994 [ 1154.106148] protocol 88fb is buggy, dev hsr_slave_0 [ 1154.111249] protocol 88fb is buggy, dev hsr_slave_1 18:38:58 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80fe]}, 0x1ff}, 0x1c) 18:38:58 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) msgget(0x1, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$rds(0x15, 0x5, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil) [ 1154.116393] protocol 88fb is buggy, dev hsr_slave_0 [ 1154.121444] protocol 88fb is buggy, dev hsr_slave_1 [ 1154.123200] binder: 8972:8973 ioctl c0306201 20000440 returned -14 18:38:58 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x53}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r1, &(0x7f0000000700), 0x13b, 0x10400003) [ 1154.179690] binder_alloc: binder_alloc_mmap_handler: 8972 20001000-20002000 already mapped failed -16 18:38:58 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0fe]}, 0x1ff}, 0x1c) [ 1154.227265] binder: 8972:8983 got transaction to invalid handle [ 1154.254379] binder: 8972:8983 transaction failed 29201/-22, size 24-8 line 2994 [ 1154.261611] binder: BINDER_SET_CONTEXT_MGR already set 18:38:58 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r0, &(0x7f0000000700), 0x13b, 0x10400003) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f00000000c0)) 18:38:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x59a}, 0x1c) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f00000000c0)) listen(r2, 0x0) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) [ 1154.327754] binder: 8972:8983 ioctl c0306201 20000440 returned -14 [ 1154.340991] binder: 8972:8989 ioctl 40046207 0 returned -16 [ 1154.341048] binder: undelivered TRANSACTION_ERROR: 29201 [ 1154.394912] binder: undelivered TRANSACTION_ERROR: 29201 18:38:59 executing program 5: inotify_init1(0x800) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) add_key(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)={0x21, 0x3, 0x0, {0x4}}, 0x21) pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:38:59 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00]}, 0x1ff}, 0x1c) 18:38:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@nat={'nat\x00', 0x19, 0x4, 0x6b8, [0x20000b00, 0x0, 0x0, 0x20000e00, 0x20000f88], 0x0, &(0x7f0000000040), &(0x7f0000000b00)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{{{0x11, 0x2, 0xdadb, 'dummy0\x00', 'veth0_to_bond\x00', 'veth1_to_hsr\x00', 'ipddp0\x00', @dev={[], 0xc}, [0xff, 0xff, 0xff, 0xff, 0xff], @dev={[], 0x1e}, [0xff, 0xff, 0xff, 0x0, 0xff], 0xa0, 0x110, 0x148, [@cgroup0={'cgroup\x00', 0x8, {{0x100, 0xff}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@link_local, 0xfffffffffffffffd}}}, @snat={'snat\x00', 0x10, {{@dev={[], 0x20}, 0x10}}}]}, @common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xfffffffffffffffd}}}}, {{{0x19, 0x10, 0x11, 'erspan0\x00', 'bond_slave_0\x00', 'bond_slave_0\x00', 'bpq0\x00', @remote, [0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0xe8, 0x150, 0x188, [@devgroup={'devgroup\x00', 0x18, {{0x4, 0xfffffffffffff868, 0x4, 0x8}}}, @mac={'mac\x00', 0x10, {{@local, 0x1}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@random="c836183a035f", 0xfffffffffffffffe}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}]}, @arpreply={'arpreply\x00', 0x10, {{@link_local, 0xa858a8327d436805}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x20, 0x0, 'nr0\x00', 'lapb0\x00', 'ipddp0\x00', 'bond0\x00', @local, [0x0, 0x0, 0xff, 0xff, 0xff], @local, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0xb0, 0x120, 0x158, [@devgroup={'devgroup\x00', 0x18, {{0xc, 0xffffffffffffff80, 0x8001, 0x2, 0xfffffffffffffff7}}}]}, [@snat={'snat\x00', 0x10, {{@dev={[], 0x17}, 0xffffffffffffffff}}}, @arpreply={'arpreply\x00', 0x10, {{@local, 0xffffffffffffffff}}}]}, @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0x42be4a1f0836c669}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{{{0x11, 0x40, 0x1, 'caif0\x00', 'bpq0\x00', 'netdevsim0\x00', 'ip6erspan0\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff], @remote, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0xa0, 0x1d0, 0x200, [@state={'state\x00', 0x8, {{0x7}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x9, 'system_u:object_r:passwd_exec_t:s0\x00'}}}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x10}}}}]}]}, 0x730) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x6) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x105082) r2 = syz_open_dev$sndpcmp(0x0, 0x2, 0x8040) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000000580)=0xc) geteuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a00)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@broadcast}}}, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000280)={0x4, 0x2}) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000002) socket$inet_udplite(0x2, 0x2, 0x88) 18:38:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xffffffffffffffd3) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000040)=0xc89, 0x6c2a1f6a380dd874) r4 = gettid() perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x8, 0x5, 0x0, 0x7, 0x0, 0x81, 0x4, 0x9, 0x2, 0x0, 0x9, 0xca4, 0x93d, 0x722e, 0x10001, 0xa190, 0x24000, 0x7f, 0x8001, 0x7fffffff, 0x0, 0x0, 0x7, 0x1, 0x9, 0x3, 0x2df, 0xe92, 0x0, 0x9, 0x8001, 0x0, 0xffffffff, 0x9, 0x6, 0x2, 0x0, 0xffffffffffff8001, 0x4, @perf_bp={&(0x7f0000000140), 0x3}, 0x10200, 0x3, 0x5, 0xd, 0x6, 0x101, 0x3fffc0000000}, r4, 0x5, r1, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:38:59 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x21000100}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="b0000000981b873f33042e0c5723245e6587b7f4bb9c25c8d9d5294ca8e09c70cf13496eba0bd24a7d1812bd3d44d8ac9f451e9304185b189ada5f87eacd6531535866fd4bd297d62391f8ae4243565248e8e3edfe20a6689c36b3ae1d1600000000000000000000000000", @ANYRES16=r1, @ANYBLOB="000025bd7000fedbdf25110000004c00030008000300040000000800010000000000080007004e220000080007004e220000080003000200000008000300020000000800080000000000080007004e20000008000800010000000c000200080003000100000008000500080000003c0003000800030002000000080001000000000008000500e000000108000500e0000002080004000900000008000800030000000800010002000000"], 0xb0}}, 0x8000) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000140)={0x0, {0x200, 0x2}}) preadv(r0, &(0x7f0000000700), 0x13b, 0x10400003) 18:38:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1155.093152] binder: 9018:9027 got transaction to invalid handle 18:38:59 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80]}, 0x1ff}, 0x1c) 18:38:59 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r0, &(0x7f0000000700), 0x13b, 0x10400003) io_setup(0x2, &(0x7f00000000c0)) [ 1155.133953] binder: 9018:9027 ioctl c0306201 20000440 returned -14 [ 1155.171664] binder_alloc: binder_alloc_mmap_handler: 9018 20001000-20002000 already mapped failed -16 [ 1155.299739] binder: BINDER_SET_CONTEXT_MGR already set 18:38:59 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0]}, 0x1ff}, 0x1c) [ 1155.335890] binder: 9018:9027 ioctl 40046207 0 returned -16 [ 1155.365034] binder: 9018:9046 got transaction to invalid handle 18:38:59 executing program 3: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000140)="95b470e0b056714129471eceeb24ba387cbd1a80b7a0f775486bdb8c1c493f45f0cbf18fd94f4091b906075200656510d0c3ff60110d28e3fad727b330c6327a6de0d1e50a55fddba2be7e753ba1f5b5cf0237f8612bd92269b8e7d9d43e0a6afe36437b261b17ffec78fe083eb9677a0d6196e4b751b70e6ba5bb548d7e9c6491bbb3c146f4f1c3e0a3ddc7cda8677cddf82466f2b26b287d390c465bf7035f3ab6601fdd57138579e7a67ac55e270742a991cd1520c338bc3bec8b1e64000c3fb1a48458e57d6f45693d77b4a9bfb911e0a6f6e854ef76", 0xd8, r0}, 0x68) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x2) signalfd(r1, &(0x7f0000000100)={0x604d}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') r3 = getpgid(0x0) syz_open_procfs(r3, &(0x7f0000000340)='task\x00') preadv(r2, &(0x7f0000000700), 0x13b, 0x10400003) 18:39:00 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x0, 0x2000}}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154}, {&(0x7f00000003c0)=""/68}, {&(0x7f00000005c0)=""/214}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/146}, {&(0x7f0000000880)=""/144}, {&(0x7f0000000480)=""/13}, {&(0x7f0000000940)=""/71}], 0x2a9, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', 0x0, 0x18}, 0x10) [ 1155.407614] binder: 9018:9046 ioctl c0306201 20000440 returned -14 [ 1155.429068] binder: undelivered TRANSACTION_ERROR: 29201 18:39:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1155.591432] binder: 9059:9060 got transaction to invalid handle [ 1155.623768] binder: 9059:9060 ioctl c0306201 20000440 returned -14 [ 1155.679102] binder_alloc: binder_alloc_mmap_handler: 9059 20001000-20002000 already mapped failed -16 [ 1155.729922] binder: BINDER_SET_CONTEXT_MGR already set [ 1155.756391] binder: 9059:9060 ioctl 40046207 0 returned -16 [ 1155.779632] binder: 9059:9067 got transaction to invalid handle [ 1155.785773] binder: 9059:9067 ioctl c0306201 20000440 returned -14 18:39:00 executing program 5: inotify_init1(0x800) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) add_key(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0, 0x0) pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:39:00 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}, 0x1ff}, 0x1c) 18:39:00 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r0, &(0x7f0000000700), 0x13b, 0x10400003) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000100)) 18:39:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@nat={'nat\x00', 0x19, 0x4, 0x6b8, [0x20000b00, 0x0, 0x0, 0x20000e00, 0x20000f88], 0x0, &(0x7f0000000040), &(0x7f0000000b00)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{{{0x11, 0x2, 0xdadb, 'dummy0\x00', 'veth0_to_bond\x00', 'veth1_to_hsr\x00', 'ipddp0\x00', @dev={[], 0xc}, [0xff, 0xff, 0xff, 0xff, 0xff], @dev={[], 0x1e}, [0xff, 0xff, 0xff, 0x0, 0xff], 0xa0, 0x110, 0x148, [@cgroup0={'cgroup\x00', 0x8, {{0x100, 0xff}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@link_local, 0xfffffffffffffffd}}}, @snat={'snat\x00', 0x10, {{@dev={[], 0x20}, 0x10}}}]}, @common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xfffffffffffffffd}}}}, {{{0x19, 0x10, 0x11, 'erspan0\x00', 'bond_slave_0\x00', 'bond_slave_0\x00', 'bpq0\x00', @remote, [0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0xe8, 0x150, 0x188, [@devgroup={'devgroup\x00', 0x18, {{0x4, 0xfffffffffffff868, 0x4, 0x8}}}, @mac={'mac\x00', 0x10, {{@local, 0x1}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@random="c836183a035f", 0xfffffffffffffffe}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}]}, @arpreply={'arpreply\x00', 0x10, {{@link_local, 0xa858a8327d436805}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x20, 0x0, 'nr0\x00', 'lapb0\x00', 'ipddp0\x00', 'bond0\x00', @local, [0x0, 0x0, 0xff, 0xff, 0xff], @local, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0xb0, 0x120, 0x158, [@devgroup={'devgroup\x00', 0x18, {{0xc, 0xffffffffffffff80, 0x8001, 0x2, 0xfffffffffffffff7}}}]}, [@snat={'snat\x00', 0x10, {{@dev={[], 0x17}, 0xffffffffffffffff}}}, @arpreply={'arpreply\x00', 0x10, {{@local, 0xffffffffffffffff}}}]}, @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0x42be4a1f0836c669}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{{{0x11, 0x40, 0x1, 'caif0\x00', 'bpq0\x00', 'netdevsim0\x00', 'ip6erspan0\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff], @remote, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0xa0, 0x1d0, 0x200, [@state={'state\x00', 0x8, {{0x7}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x9, 'system_u:object_r:passwd_exec_t:s0\x00'}}}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x10}}}}]}]}, 0x730) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x6) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x105082) r2 = syz_open_dev$sndpcmp(0x0, 0x2, 0x8040) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000000580)=0xc) geteuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a00)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@broadcast}}}, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000280)={0x4, 0x2}) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000002) socket$inet_udplite(0x2, 0x2, 0x88) 18:39:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000002500)=[{&(0x7f0000000380)="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", 0x3e7}], 0x1) read(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, 0x0}, 0x0) [ 1156.037180] binder: 9072:9073 got transaction to invalid handle [ 1156.060981] binder: 9072:9073 ioctl c0306201 20000440 returned -14 [ 1156.103389] binder_alloc: binder_alloc_mmap_handler: 9072 20001000-20002000 already mapped failed -16 18:39:00 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x1ff}, 0x1c) 18:39:00 executing program 0: add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = accept(r0, &(0x7f0000000180)=@nfc, &(0x7f0000000200)=0x80) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xa1d}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r2, 0x1f}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000240)=0x522) connect$rxrpc(r1, &(0x7f0000000280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24) 18:39:00 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') preadv(r2, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/158, 0x9e}, {&(0x7f00000005c0)=""/248, 0xffffff96}, {&(0x7f0000000200)=""/186, 0xba}, {&(0x7f0000000400)=""/162, 0xfffffffffffffdf2}, {&(0x7f00000006c0)=""/35, 0x23}, {&(0x7f00000004c0)=""/68, 0xfffffffffffffeab}], 0x6, 0x10400003) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) [ 1156.190009] binder: 9072:9073 got transaction to invalid handle [ 1156.265006] binder: 9072:9073 ioctl c0306201 20000440 returned -14 18:39:00 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0xa3a, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000140)) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f00000000c0)=0x100000001) preadv(r1, &(0x7f0000000700), 0x13b, 0x10400003) socket$inet6_sctp(0xa, 0x5, 0x84) 18:39:00 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x1ff}, 0x1c) 18:39:00 executing program 0: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, 0x0, 0x200000000040003, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000200)={0x1, r1}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000001c0)={0x4, 0x0, 0x1, 0x2}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000240)={0x2, r2}) r3 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000100)) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) r4 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ftruncate(r4, 0x1000000) sendfile(r3, r4, &(0x7f00000000c0)=0xf10001, 0xeffffdef) syz_open_dev$cec(&(0x7f0000000340)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f0000000300)={0x34, 0x0, &(0x7f0000000280)}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) bind$alg(r0, 0x0, 0x2b66db71f52e4be1) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xf46) fanotify_mark(0xffffffffffffffff, 0x0, 0x8, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000640), 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x2, 0x4) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000140), 0x4, 0xffffffffffffffff, 0x8}) 18:39:01 executing program 5: r0 = syz_open_pts(0xffffffffffffff9c, 0x2) ioctl$TIOCSBRK(r0, 0x5427) r1 = inotify_init1(0x800) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0xc0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) socket$vsock_dgram(0x28, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) r5 = add_key(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0, 0x0) pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) keyctl$get_keyring_id(0x0, r5, 0x3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:39:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:01 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x98, "042c416223495bea661ea118759080ec92ece1c599e7db2bac4a9fa0890f987ae6a8eb291e5e49ebcd7f79fa47607179da1d433ff7e1d079af374de28db223a516c96a49260e643d562fc66e62e344baa600470ea883d1194a0acbc5c9808e8c2fdefbfd5483af16b4270ac3965c5cac0612c4815b56eed22623e1be29f7027f868d50a344133f2b052227fee6acb0977a837305c9cdc78e"}, &(0x7f00000001c0)=0xa0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r1, @in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x8a, 0x0, 0x4, 0x60}, &(0x7f00000002c0)=0x98) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/arp\x00') preadv(r2, &(0x7f0000000700), 0x13b, 0x10400003) accept4$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14, 0x80000) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000003c0)={@local, 0x2d, r3}) 18:39:01 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x1ff}, 0x1c) 18:39:01 executing program 2: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(0x0, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x1, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x400000, 0x1e9) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x1000000080001, 0x84) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) sched_setparam(r5, &(0x7f00000001c0)=0x1) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r4, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f0000000140)='*', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000300), 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='team_slave_0\x00', 0x10) sendto$inet(r4, &(0x7f00000000c0)="e6", 0x2eb, 0x0, 0x0, 0x1f4) ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000000000)) open(&(0x7f0000001680)='./bus\x00', 0x0, 0x100) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x3, 0xff, 0x5, 0x8, 0x800, 0xebe35bc, 0x101, 0x5a2e7dd0, 0x7e, 0xae, 0x95}, 0xb) [ 1157.032496] binder: 9132:9134 got transaction to invalid handle [ 1157.053574] binder_transaction: 6 callbacks suppressed [ 1157.053594] binder: 9132:9134 transaction failed 29201/-22, size 24-8 line 2994 18:39:01 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, 0x1ff}, 0x1c) 18:39:01 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002b00)={{{@in6=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000001340)=0xe8) getsockname$packet(r0, &(0x7f0000002c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002c40)=0x390) r5 = getgid() write$FUSE_CREATE_OPEN(r0, &(0x7f0000000340)={0xa0, 0xffffffffffffffda, 0x4, {{0x3, 0x2, 0x0, 0x72, 0xfff, 0x400, {0x2, 0x2, 0x7, 0x5, 0x8000, 0xf5ce, 0x7, 0x5, 0x7, 0x1, 0x7fffffff, r3, r5, 0x2, 0x3}}, {0x0, 0x4}}}, 0xa0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000140)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002c80)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000002d80)=0xe8) getpeername$packet(r0, &(0x7f0000002dc0)={0x11, 0x0, 0x0}, &(0x7f0000002e00)=0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@multicast2, @in6}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f00000002c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'nr0\x00', r7}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002f40)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000003040)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003080)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f0000003180)=0xe8) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000034c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003480)={&(0x7f00000031c0)={0x2c0, r1, 0x800, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0xb4, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffff3b30}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r6}, {0x1e8, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}]}, 0x2c0}, 0x1, 0x0, 0x0, 0xd0}, 0x4040080) preadv(r0, &(0x7f0000000700), 0x13b, 0x10400003) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) [ 1157.082603] binder: 9132:9134 ioctl c0306201 20000440 returned -14 [ 1157.115313] binder_alloc: binder_alloc_mmap_handler: 9132 20001000-20002000 already mapped failed -16 18:39:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000000)={0x0, {0x6, 0x10000}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000500)="240000001a0025e0046bbc04fef7001c020b49ff000000a6800008000800030001000000", 0x24) [ 1157.198538] binder: 9132:9149 transaction failed 29201/-22, size 24-8 line 2994 [ 1157.200846] binder: BINDER_SET_CONTEXT_MGR already set [ 1157.222355] binder: 9132:9149 ioctl c0306201 20000440 returned -14 18:39:01 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x1ff}, 0x1c) 18:39:01 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r0, &(0x7f0000000700), 0x13b, 0x10400003) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)=0x1, 0x4) 18:39:01 executing program 2: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x2, 0x0) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getuid() write$P9_RSTATu(r1, &(0x7f0000000340)={0x93, 0x7d, 0x1, {{0x0, 0x6a, 0x2, 0x7, {0x3b, 0x3, 0x4}, 0x1080000, 0x8, 0x800, 0x4, 0x7, 'selinux', 0x12, 'GPL!mime_typeuser]', 0x14, 'security.capability\x00', 0xa, '%$keyring,'}, 0x14, 'security.capability\x00', r2, r3, r4}}, 0x93) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000180)=@v3={0x3000000, [{0x7fff, 0x4}, {0x1000, 0x100}], r5}, 0x18, 0x1) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000100)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000600)="9cabbf0400cbb140419b80000800", 0xe}], 0x1}, 0x0) 18:39:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) ioctl$FICLONE(r0, 0x40049409, r1) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000013c0)="da8de002447bdcd10635889760955f131945e36b669257a065d80a2cb6377f7d51fad23dec726f34f3a518982fa7c235100762b6fd8435c8bf58ceaed5af2faea6e235411c95e4a21cb4452cd84557451db798690346228b09e5d079d29ad66fe829185b5dcbab88d010a7995ea9d6c1b2f78894026baef9fe37eaa23bc2035e311834202b639b557de016a160e225d0db9279e3b08bd2f722681f10c24bf7d5a20e592ca38505e53f22fce9609c376ee77686f334327fb60ff2716d9848405b8e60cf14a41a8a6bda3baf916633de1ccfb7e58edd549d01572198809971cf40717d7c260f71860fcb39357cd4e81edd178f08dbbab7d12baba7f531c717c3dfa95358703c43c4cc590d2e43047a744dc4e5c1013808070ecb957ff96779d0d5", 0x120}], 0x1}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x20000f40, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0xfffffffffffffd95}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) [ 1157.313952] binder: 9132:9134 ioctl 40046207 0 returned -16 18:39:02 executing program 5: inotify_init1(0x800) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000001c0)={r1, 0x80000, r0}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) add_key(&(0x7f0000000280)='rxrpc\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="86ec0fcb2f6afb10578218bf04e6b43d6bea90a20e3a5a8ad652c0070ef93285103699307b1e8d33a0c71970fc6fff7b15ffc5b73febc9345af41dfc105ba34d18dc93b108cb0fa469166c1aa66fea838a1cecbee889044274367ef7316686", 0x5f, 0xfffffffffffffff8) r5 = request_key(&(0x7f00000003c0)='rxrpc_s\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='\x00', 0xfffffffffffffff8) add_key(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffd76, r5) add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0, 0x0) pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) clock_gettime(0x7, &(0x7f00000004c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:39:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:02 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, 0x1ff}, 0x1c) 18:39:02 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r0, &(0x7f0000000700), 0x13b, 0x10400003) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000100)=0x10) 18:39:02 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0205648, &(0x7f0000000080)) arch_prctl$ARCH_GET_CPUID(0x1011) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x10041, 0x0) r3 = add_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x3) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000200)={0x0, @reserved}) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f00000000c0)={0x0, 0x3, 0x6, 0x4d, 0x6, 0x5f0}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000140)) 18:39:02 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a040407000000ebbd0fdf333f260005001a000500005a0005400001003c84000000e340900ea300000000000000000000000000000000"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x2b9, 0x802) getpeername(r1, &(0x7f0000001500)=@can={0x1d, 0x0}, &(0x7f0000001580)=0x80) sendmsg$xdp(r2, &(0x7f0000002a00)={&(0x7f00000015c0)={0x2c, 0x5, r3, 0x3d}, 0x10, &(0x7f0000002980)=[{&(0x7f0000001600)="61544c91f3b8119a2cd37e6b2d3013fd993135738e75d7a52a4b781c1a6eb9997f8beaa6da06c26678d814c048ed614e545de0f00cd8b9ca5a6bb34313eb970c53de41e2081277741d52992f044ff693a335c6f9301d53c234112a28d431b1a340597788579728f5d0deab0ff2d1c2760ddc4a82d10678728192c8fd5f86577568deab0e3dc8de0b5f8ba5bcb5f33eb8a0020e0b4f5b3fce03f924638f754d839ef55576e7320cd6d44a165ec484366ddf66a937da0d5dd74bd642bdfdd8a804688aa3112536311ef0f023ec885d3ca8f36f581c2a6b537c1f3ee4c97ae5b61f", 0xe0}, {&(0x7f0000001700)}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000002740)="62e982e35673abb1066a7a87f49936371c252570f7bde7fd44c07605f42fb3ffb9a93ecff4041bf163307271d5797822834b5798c6b43f998f3180d6f5cd10cd1f264f64a9427ca1507f", 0x4a}, {&(0x7f00000027c0)="04182c1350f7ab0497ec22773da436551ef533164df3625dbf6d9d440bdbc6b0513faabe927d7caf2cb0747cf6b7c584cad3aa898c260a9b46783b398543ec03b664123a44f1fa3a5ab8342d75d071a3401e1e639af1209cb8d970312a5c96d03e36b1101d719257b6182e529d6736ae67f1f5936ae18aabab7c80af41cfa805e0b5797719ede75b8254717120ae62c6470f8eb42b12b5a38f6a", 0x9a}, {&(0x7f0000002880)="98fa3b5bc82bfec2f229b4a9097073f159076cd13afe36db79da02cf79a85be6b50dd9e8e8390ca275b37d15f2158a8ea26262f14ccbb6d21b", 0x39}, {&(0x7f00000028c0)="a1567b3719f3bb21209b4dd88f28fcdfc4ea8d10e93e70e5a95487bac8f8c80b9de1916c6cdf1dfd75ed3c841bcf1f8f944da28ecda0f783fd84ced223612dd0e69a5639dc55ebee514d8c698fa5c923f373613499abfb8e565cec555c557f3b0d8da81220e1d3a84c49694ceefc05be14455be454069628a34683fbc20529ff016e129ab439f54b1f4336e73a9c570e56b540c0a0a85cafc0761a2604aab0df6dbedf7a91641f4234950dca99de29431a3389a78f3c87fa60", 0xb9}], 0x7, 0x0, 0x0, 0x800}, 0x4004001) 18:39:02 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r0, &(0x7f0000000700), 0x13b, 0x10400003) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x328, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) [ 1157.993988] binder: 9185:9195 transaction failed 29201/-22, size 24-8 line 2994 [ 1158.017166] binder: 9185:9195 ioctl c0306201 20000440 returned -14 [ 1158.025498] binder_alloc: binder_alloc_mmap_handler: 9185 20001000-20002000 already mapped failed -16 [ 1158.038743] binder: BINDER_SET_CONTEXT_MGR already set 18:39:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000140)=0x3, 0x43, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x101400, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080), 0x4) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x10) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x11) [ 1158.049729] binder: 9185:9195 ioctl 40046207 0 returned -16 [ 1158.076509] binder: 9185:9200 transaction failed 29201/-22, size 24-8 line 2994 18:39:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r4, &(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000000380)=0x80) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="b9800000c00f3235000100000f30c48315782c223e66460f38818200000000b9800000c00f3235000400000f30c40211a7ba85000000c4017d292ab9980b00000f3248b8d7000000000000000f23d80f21f835c00000500f23f8410f35420f01df", 0x61}], 0x1, 0x1, &(0x7f0000000240)=[@flags={0x3, 0x1000}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x32, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000540)={0xd0003}) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f00000004c0)=0x1) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)) getpeername$unix(r2, &(0x7f00000000c0), &(0x7f0000000500)=0x6e) ioctl$KVM_RUN(r2, 0xae80, 0x0) getpeername(r4, &(0x7f00000003c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000440)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x16, 0x7f, 0x0, 0x0, 0x2, 0xffffffffffffff9c, 0x6}, 0x2c) connect$packet(r4, &(0x7f0000000480)={0x11, 0x19, r5, 0x1, 0x0, 0x6, @dev={[], 0x10}}, 0x14) 18:39:02 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, 0x1ff}, 0x1c) [ 1158.097452] binder: 9185:9200 ioctl c0306201 20000440 returned -14 [ 1158.107291] binder_release_work: 7 callbacks suppressed [ 1158.107298] binder: undelivered TRANSACTION_ERROR: 29201 18:39:02 executing program 3: timerfd_create(0x1, 0x80800) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r0, &(0x7f0000000700), 0x13b, 0x10400003) [ 1158.158200] binder: undelivered TRANSACTION_ERROR: 29201 18:39:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) capset(&(0x7f00000005c0)={0x19980330}, &(0x7f0000000700)) socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x101, 0x2000) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000040)=0x3c4, 0x4) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', @ifru_data=0x0}) [ 1158.266150] net_ratelimit: 20 callbacks suppressed [ 1158.266159] protocol 88fb is buggy, dev hsr_slave_0 [ 1158.276316] protocol 88fb is buggy, dev hsr_slave_1 [ 1158.281446] protocol 88fb is buggy, dev hsr_slave_0 [ 1158.286546] protocol 88fb is buggy, dev hsr_slave_1 [ 1158.496152] protocol 88fb is buggy, dev hsr_slave_0 [ 1158.501272] protocol 88fb is buggy, dev hsr_slave_1 18:39:03 executing program 5: inotify_init1(0x800) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) add_key(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0, 0x0) pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:39:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:03 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x1ff}, 0x1c) 18:39:03 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x2, 0x2, {0xd5a8, 0x1, 0x3ff, 0x1}}) preadv(r0, &(0x7f0000000700), 0x13b, 0x10400003) 18:39:03 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='coredump_filter\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e, r1}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r2, 0x2, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x7f, @link='broadcast-link\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8801}, 0x80c0) getegid() ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000340)=""/179) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r2, 0x900, 0x70bd2a, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x4}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e24, 0xd9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, 0x1c) setsockopt$inet_mreqsrc(r0, 0x0, 0x2f, &(0x7f0000000540)={@empty, @multicast2, @multicast1}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000580)={@mcast2, 0x79, r1}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000005c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r0, 0x28, &(0x7f0000000600)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={r3, 0x8, 0x8}, 0xc) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sysfs$2(0x2, 0x9, &(0x7f00000006c0)=""/191) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000780)={0x0, 0x1, 0x80000001}, &(0x7f00000007c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000800)={r5, @in6={{0xa, 0x4e20, 0x8, @remote, 0x4}}, [0xfff, 0xb242, 0x0, 0x1b, 0x81, 0x989, 0x2, 0x3f, 0xfffffffffffffffe, 0x6, 0x401, 0x100000001, 0x8, 0x331, 0xfffffffffffffff9]}, &(0x7f0000000900)=0x100) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a00)={0xffffffffffffffff, r0, 0x0, 0x10, &(0x7f00000009c0)='coredump_filter\x00'}, 0x30) perf_event_open(&(0x7f0000000940)={0x3, 0x70, 0x3, 0x5, 0xac, 0x1000, 0x0, 0x7, 0x200, 0x1, 0x9, 0x8, 0x236, 0x6, 0xffffffff, 0x5, 0x81, 0x4, 0x5, 0x7fffffff, 0x7, 0x7, 0x0, 0x31, 0x2, 0x961, 0xdb, 0x80, 0x0, 0x1, 0x9, 0x7f, 0x7, 0xfff, 0x8, 0x10000, 0xe3, 0x81, 0x0, 0xfffffffffffff91a, 0x6, @perf_config_ext={0x100000000, 0x200}, 0x8, 0x4, 0x0, 0x8, 0x8, 0x1, 0x80}, r6, 0x6, r0, 0x2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x5) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg(r4, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a40)="36d8eb89ddc2f2af9ccad91969b7cf451b473f44fc9bc7174ff11ad2a37f4b593a46375d314d42d6a79d900b8a2e0cfb781d8f680ecf6a59f9ab3f36d55e979ff62fc569766f0f5471cf7031e755f4d12e8b30ac309c8fb2097a828ddb08d1fccf02c792def7beb8cfb5b380e9454e33cefb753f9c4a15cca504e502e0042ddb8163ad7733d4758d45e4962f0eae0335f295", 0x92}, {&(0x7f0000000b00)="9d72e1979776ba602308a39d3eadb524900c0092f92cc3834e46ab8bed37cb8b3545e22d48406e6f9364fe1b8b6df12e22cff6b273268731c389e15fc8d862f7e85d4973563036662837b0b3769d93b6889c09ea4ca359e2f91394337d46b6e8", 0x60}, {&(0x7f0000000b80)="5d5ea0474b04fc59f63016c3054ff614185c59267344b2ba405bbdd8b1d5f6d95dac878188c70c6ef2173b3c23d5ab15e05a2e30331a40ee2c83fe29c427ca6a5aa897006e6b71de9cc7f218018c5a2c9287ec3b8d799774b406f8cae0e9b5ce1d5a5e34c6459603039f5c11dd155bea7c19bc62af0db1324d1d2916e4c1c9ac70d5244b57058c1e8997271267c54e24c45b985ea72081d4b2a35ac386e1918b7007112b696739521861ccdb13d553e1252df855763e7bf9cfaeea734dc2c317a41bf31dcd", 0xc5}, {&(0x7f0000000c80)="0524185a48a3fa455312896004d0d831ab4f212d42ce381774496c64d1424958a131a748356d140ec06a386ebb69a36b4994141f9b38633a188da82f029d4ec3a7b38131012069ef5d1328af4e34cb6f696223a2dfc20fbfd32a24d3de14c6df441888a9dafe9fddb096461351caf4630131d3e2ac0ae3dfec64423fde1843794489d87312d5565331fe78a42b2084c28097de4a80ec042cc230", 0x9a}, {&(0x7f0000000d40)="c80bce4da090d58cd3995299f774c8eb958ab24a43e458ada52cabdb96ec5fe1fa67ec79847a5b64", 0x28}], 0x5, &(0x7f0000000e00)=[{0x110, 0x119, 0x7, "36e2d21f47d003926ebc3ebf7803780cd0339635025ae038f9805d3967dd490dfd77a2875d5ba8bbd35e473b4bfc9740c86b0b7a92cc589cdd631c2d17957a63b4a55e709f493915696532ab5a9458c75502b85b7efc0a787b13d5783bed937507e5a74eaca637249892c30c40aaf74939b0a839f53345512c7d4849d9b0df7e0d67470397389d829843b333e6fbd75451c4afb8c233f9b2569768f526a81d7b7f9137481233e0cdad3c887ba8d99fc5896b4813ce2c8fbd2539f2ac76f78b3fc045e29ab4b1d245c4a927797af3965ae49a76011c881b577695da834b290b7941ab83acf6ff2079fc8ff8037cc98580072e59ba0c0509c71f7a21e9946f77"}, {0xe0, 0x11f, 0x6, "2e3101c33cfeb2cfbc3e20e754b3747efb42edb9e865535db815fe3e17603c07395aeb12d38c0477180a6ae1107a896826ae258934b7ea68f1a4f3e2f03ab7aebd8dcb7af38234fbe298bc89e7065efdef1c4e369343cc850d36e1e34c27909cba6e88dd398974da9e8d9ad70ebddcef946a96fc74bfde1127631f26c6e34efec839c7b0618d57a9c2fe86681ce4df361d04961ffdc72d0b9f5e8398e0c097584f65b0eca646097d6c4f8816dff4c53ceebe60c2ce822c5cd5bfc0c288b5542a79bd41e1aed2f8c7da8294f8"}, {0xc0, 0x11f, 0x1000, "ee368b5bbac864b1b453404a605c8d4534cac7845b05ae9c682c111138a6714848a637bd9b2d1d48ebc014d982c3ef92842c6f9eaec234ab78b1eec768c0e3d10d66e9f32201150ed1cfc0523bfe4ad2800194c8caab7feb9207903e7e689a6477eb6548fcf40de382134c21a501ea49a01f57e3f476d0aef4709d9a3b52378e5054fb495f09d60abf4fe46b969dadbe06b73f1cb404d9aab7e62b6497e41c9572ebe21359ba74305cd6a176"}], 0x2b0}, 0xfff}], 0x1, 0x40851) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f0000001140)=@get={0x1, &(0x7f0000001100)=""/17, 0x80}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000001180)={{&(0x7f0000ff5000/0xa000)=nil, 0xa000}, 0x1}) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000011c0)=@assoc_value={r5, 0x3}, 0x8) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000013c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001380)={&(0x7f0000001280)={0xf0, r8, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x232e8661}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xde}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000001400)=[@in6={0xa, 0x4e20, 0x92d, @rand_addr="95d1dbe12c0b91b0bfc786fbb08b7609", 0x6}, @in6={0xa, 0x4e24, 0x1, @empty, 0x3}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}], 0x58) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001480)={r3, 0x0, 0x8}, 0xc) 18:39:03 executing program 2: r0 = socket(0x10, 0x20001400000003, 0x0) write(r0, &(0x7f0000000040)="170000001400070500e80000004c030002080300010000", 0xfffffffffffffde2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) [ 1158.934919] binder_transaction: 3 callbacks suppressed [ 1158.934929] binder: 9241:9243 got transaction to invalid handle 18:39:03 executing program 2: syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x80000000, 0x10000) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x20200, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000440)={0x6, 0x7, 0x80ea, 0x400}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x40902) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)='security.evm\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="0400f3faaaa1"], 0x1, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f00000002c0)={'\x00\x00\xfe'}, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) chroot(&(0x7f0000000300)='./file0\x00') ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0x0, 0x0) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10) clone(0x0, &(0x7f0000000680)="5109279a953a00f2c862a234f43192838ba16fbd94607baeff02cf4fb2c05b45ec98d8e259487d821fb26bbde26f7e0a94364a71e5f5f8606235d71f71", 0x0, 0x0, 0x0) 18:39:03 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, 0x1ff}, 0x1c) [ 1158.975103] binder: 9241:9243 transaction failed 29201/-22, size 24-8 line 2994 [ 1158.993074] binder: 9241:9243 ioctl c0306201 20000440 returned -14 18:39:03 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000600)='/dev/cec#\x00', 0x2, 0x2) accept$packet(r0, 0x0, &(0x7f0000000640)) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x0, &(0x7f0000000680), &(0x7f0000000780)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'bridge_slave_0\x00', 0x3}, 0x18) preadv(r1, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/111, 0x6f}, {&(0x7f0000000180)=""/39, 0x27}, {&(0x7f00000001c0)=""/221, 0xdd}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f0000000340)=""/73, 0x49}, {&(0x7f00000003c0)=""/85, 0x55}, {&(0x7f0000000440)=""/19, 0x13}, {&(0x7f0000000480)=""/111, 0x6f}, {&(0x7f0000000500)=""/37, 0x25}, {&(0x7f0000000540)=""/138, 0x8a}], 0xa, 0x10400003) [ 1159.034222] binder_alloc: binder_alloc_mmap_handler: 9241 20001000-20002000 already mapped failed -16 [ 1159.088819] binder: 9241:9254 got transaction to invalid handle [ 1159.088862] binder: BINDER_SET_CONTEXT_MGR already set [ 1159.094921] binder: 9241:9254 transaction failed 29201/-22, size 24-8 line 2994 [ 1159.094960] binder: 9241:9254 ioctl c0306201 20000440 returned -14 18:39:03 executing program 0: getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000480)) r1 = creat(0x0, 0x90) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x10f, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) add_key$keyring(&(0x7f00000017c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) request_key(&(0x7f0000001840)='user\x00', &(0x7f0000001880)={'syz', 0x2}, &(0x7f00000018c0)='Y\x00', 0xfffffffffffffffe) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000040)) fcntl$getown(0xffffffffffffffff, 0x9) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) syz_open_dev$sndpcmc(0x0, 0xfffffffffffffffa, 0x1) add_key(&(0x7f0000000200)='logon\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0x0) getresgid(&(0x7f0000000440), &(0x7f0000000580), &(0x7f0000001640)) request_key(&(0x7f0000000540)='rxrpc\x00', &(0x7f0000001680)={'syz', 0x1}, 0x0, 0xfffffffffffffffa) move_pages(0x0, 0x0, 0x0, &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0], 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 18:39:03 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_GET_DUMPABLE(0x3) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) openat$cgroup_ro(r0, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r1, &(0x7f0000000700), 0x13b, 0x10400003) [ 1159.131832] binder: 9241:9243 ioctl 40046207 0 returned -16 [ 1159.137784] protocol 88fb is buggy, dev hsr_slave_0 [ 1159.137839] protocol 88fb is buggy, dev hsr_slave_1 18:39:03 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0x1ff}, 0x1c) [ 1159.264186] binder: undelivered TRANSACTION_ERROR: 29201 [ 1159.297072] binder: undelivered TRANSACTION_ERROR: 29201 18:39:04 executing program 5: inotify_init1(0x800) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) add_key(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0, 0x0) pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) rt_sigtimedwait(&(0x7f0000000040)={0x2}, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x8) 18:39:04 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x3080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) clone(0x140100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1000, 0x0) 18:39:04 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x4400, 0x1b) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @multicast1, @loopback}, &(0x7f0000000140)=0xc) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0x1a}, @rand_addr=0x2, r1}, 0xc) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0xfffffd77}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') ioctl$VT_ACTIVATE(r2, 0x5606, 0x9) preadv(r2, &(0x7f0000000700), 0x13b, 0x10400003) 18:39:04 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x1ff}, 0x1c) 18:39:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:04 executing program 2: rt_sigaction(0x1, 0x0, 0x0, 0x8, &(0x7f00000002c0)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x280, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0x8d, 0x0, {0x0, 0x3, 0x7f, 0x3, 0x5}}) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000140)="cf183a3dbfde1874205c4e5745f597f2e5f1f863c5d713a76d075ba073f0b1eee20c9792b6fba22ac51538a69bfbb284520f79ae9418f702f36ee329cc64cdea3f887735e22ac447d4edcfc1e7541c4ca7f532bc5d0d74d3e07495743a72b41ae229e6a3fac595fd93ec90dae1331eae06f88d51f8091c1b00eb65bb80c8346c7bfa17b0ea7d0f4de2beb3d2fd45e49c21b0b300c51ab7109c0970518b9ad64e6b59e2") [ 1159.865182] binder: 9286:9288 got transaction to invalid handle [ 1159.916355] binder: 9286:9288 transaction failed 29201/-22, size 24-8 line 2994 [ 1159.946717] protocol 88fb is buggy, dev hsr_slave_0 [ 1159.952104] protocol 88fb is buggy, dev hsr_slave_1 18:39:04 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0x1ff}, 0x1c) 18:39:04 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) preadv(r0, &(0x7f0000000700), 0x13b, 0x10400003) [ 1159.969464] binder: 9286:9288 ioctl c0306201 20000440 returned -14 [ 1160.005071] binder_alloc: binder_alloc_mmap_handler: 9286 20001000-20002000 already mapped failed -16 18:39:04 executing program 2: clone(0x8000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000001500)='./file0\x00', 0x40, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x284, r3, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x24, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc0}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}]}, @TIPC_NLA_LINK={0x20, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_LINK={0x100, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5e9}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7daa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffe28f}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40000000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffff8}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x799}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff00000000}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x46f267d5}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9103}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc87a3bcc000}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044000) rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f00000000c0)={0x1b, 0x3, 0x7}) open(&(0x7f0000000080)='./file0\x00', 0x300, 0x0) [ 1160.090557] binder: BINDER_SET_CONTEXT_MGR already set [ 1160.096601] binder: 9286:9288 ioctl 40046207 0 returned -16 [ 1160.136835] binder: 9286:9319 got transaction to invalid handle [ 1160.142932] binder: 9286:9319 transaction failed 29201/-22, size 24-8 line 2994 [ 1160.242387] binder: undelivered TRANSACTION_ERROR: 29201 [ 1160.253355] binder: 9286:9319 ioctl c0306201 20000440 returned -14 [ 1160.266392] binder: undelivered TRANSACTION_ERROR: 29201 18:39:04 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = dup(r0) setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x208, 0xa5) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x8, 0x0, "9fc72b543b28dd4728c3988b7adea76fa59f716c731782304d2a8b2baf8c1724fb01b86d7c1d88f3c7322926d8f0fcdb51b5df3ba8b696320eb85ae1bd8e6af048c54f27e0dad819d7cb50aaa2bc300f"}, 0xd8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f00000000c0)=0xe6d) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) sendto$inet6(r0, 0x0, 0xffffff91, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x6e) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000280)) ftruncate(r3, 0x7fff) sendfile(r2, r3, 0x0, 0x8000ffffbffe) 18:39:04 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r0, &(0x7f0000000700), 0x13b, 0x10400003) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x110, 0x70bd2c, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, &(0x7f0000000380)="3ede1748b88000c0fe000000000f23d00f21f835300000080f23f845aef2440f1b6f010f01370fc759730f380422430fc71cd9c461fe121648b8d1494512000000000f23d80f21f835400000e00f23f8", 0x50}], 0x1, 0x20, &(0x7f0000000440)=[@dstype0={0x6, 0x5}], 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400008}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x8, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48891}, 0x10) 18:39:04 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, 0x1ff}, 0x1c) [ 1160.453900] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:39:05 executing program 5: r0 = inotify_init1(0x800) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r5 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r6 = dup2(r5, r4) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0xd) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) add_key(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0, 0x0) pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000004c0)={0x8, 0x120, 0xfa00, {0x2, {0x1, 0x9, "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", 0xd1, 0xffffffff, 0x1f, 0x7, 0x81, 0x0, 0xdd2, 0x1}, r8}}, 0x128) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:39:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:05 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r0, &(0x7f0000000700), 0x13b, 0x10400003) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x63, "697ea702f5d5ec4e496197033519434cf9f16fd688b869faf8f340de60a6e28eccb035c40e0d90c6e00410b612f0f872a0f3ef132ab4732db1f20a3f016795d66902d98a8c7967dda8284ed6a5e337f2c0c409db84116f36187c4ceb9a605127f37f5e"}, &(0x7f0000000180)=0x87) 18:39:05 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0x1ff}, 0x1c) 18:39:05 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000083000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x11) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="000026bd7000fcdbdf250d00f47f8de01be48592d85778cd7c5a00003c000200080206000010000008000700c976ca7fcf5460000027e4a1020700080006007d0000"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, r0, 0x0) r6 = fcntl$dupfd(r5, 0x606, r1) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) recvfrom(r3, &(0x7f0000000000)=""/136, 0x88, 0x2000, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x4, 0x0, 0x0, {0xa, 0x0, 0xffff, @loopback, 0x4}}}, 0x80) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000540)={0x87, 0x29, 0x1, {0x101, [{{0x0, 0x3}, 0x2, 0x100000001, 0x7, './file0'}, {{0x2, 0x1, 0x4}, 0x8000000000000000, 0x4, 0x7, './file0'}, {{0x8, 0x4}, 0x8, 0x3, 0x7, './file0'}, {{0x0, 0x3, 0x2}, 0x6a, 0x8, 0x7, './file0'}]}}, 0x87) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0) ioctl$VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000240)={0xf, 0x1, 0x1, 0x4000, r4}) dup2(r7, r7) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000083000/0x1000)=nil) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000500), 0x4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r8 = socket$inet6(0xa, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r6, 0xc010640c, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000400)='security.capability\x00', &(0x7f0000000440)=@v2={0x2000000, [{0x9, 0x26}, {0x9, 0x1000}]}, 0x14, 0x3) write$binfmt_aout(r8, &(0x7f0000000600)={{0x10f, 0x41, 0x3, 0x8d, 0x31a, 0x790000, 0x21a}, "8d11fef2f9faff4e7a6ac0d7d6e2648b980e89f7b055aaa6733ceb678dae10df731d37de64125a1b363e02e1e4640e7ac30c3b6c9ccf657de68f9047446b772eb78ca16c77abe212e21bc077e20c39261957520082847301dd41b626d7a75324cd5fdbeb479ac8a22c2fcfe4b6d5003c7cf92ab225001f73a88e47d507fccb6478c16c41995f706ba70d6297892a91b7709d317ba5ad75d6cf5ed6af8e59df831421ce971266ad7910bfee8444976bcc9b7f537e480caaaa028e561b3fe24258c3c045c45e3e087e3b1fbbeea31fe5", [[], [], []]}, 0x3ef) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) 18:39:05 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r0, &(0x7f0000000700), 0x13b, 0x10400003) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r1, 0x301, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x20}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004004}, 0x20000010) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000140)={0x2, 0x7f}) mq_timedsend(r0, &(0x7f00000000c0)="bae1b869ca2e6135aeb50acf86c2567b994e563859baec1e7d071b8f5186abb901dac6dced25f89422d1c5102a4a5f8ae13d52f6600959dd249925bdc98c47f08f90656ba06aa5026cf20a03451623caa711af549cedea65196b363c2775d98e5df75df0038bfc1cce2e73acc4", 0x6d, 0x1, 0x0) [ 1160.778815] binder: 9350:9358 got transaction to invalid handle [ 1160.784946] binder: 9350:9358 transaction failed 29201/-22, size 24-8 line 2994 18:39:05 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc000000]}, 0x1ff}, 0x1c) [ 1160.858978] binder: 9350:9358 ioctl c0306201 20000440 returned -14 [ 1160.897189] binder_alloc: binder_alloc_mmap_handler: 9350 20001000-20002000 already mapped failed -16 18:39:05 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe800000]}, 0x1ff}, 0x1c) 18:39:05 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000083000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x11) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="000026bd7000fcdbdf250d00f47f8de01be48592d85778cd7c5a00003c000200080206000010000008000700c976ca7fcf5460000027e4a1020700080006007d0000"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, r0, 0x0) r6 = fcntl$dupfd(r5, 0x606, r1) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) recvfrom(r3, &(0x7f0000000000)=""/136, 0x88, 0x2000, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x4, 0x0, 0x0, {0xa, 0x0, 0xffff, @loopback, 0x4}}}, 0x80) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000540)={0x87, 0x29, 0x1, {0x101, [{{0x0, 0x3}, 0x2, 0x100000001, 0x7, './file0'}, {{0x2, 0x1, 0x4}, 0x8000000000000000, 0x4, 0x7, './file0'}, {{0x8, 0x4}, 0x8, 0x3, 0x7, './file0'}, {{0x0, 0x3, 0x2}, 0x6a, 0x8, 0x7, './file0'}]}}, 0x87) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0) ioctl$VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000240)={0xf, 0x1, 0x1, 0x4000, r4}) dup2(r7, r7) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000083000/0x1000)=nil) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000500), 0x4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r8 = socket$inet6(0xa, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r6, 0xc010640c, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000400)='security.capability\x00', &(0x7f0000000440)=@v2={0x2000000, [{0x9, 0x26}, {0x9, 0x1000}]}, 0x14, 0x3) write$binfmt_aout(r8, &(0x7f0000000600)={{0x10f, 0x41, 0x3, 0x8d, 0x31a, 0x790000, 0x21a}, "8d11fef2f9faff4e7a6ac0d7d6e2648b980e89f7b055aaa6733ceb678dae10df731d37de64125a1b363e02e1e4640e7ac30c3b6c9ccf657de68f9047446b772eb78ca16c77abe212e21bc077e20c39261957520082847301dd41b626d7a75324cd5fdbeb479ac8a22c2fcfe4b6d5003c7cf92ab225001f73a88e47d507fccb6478c16c41995f706ba70d6297892a91b7709d317ba5ad75d6cf5ed6af8e59df831421ce971266ad7910bfee8444976bcc9b7f537e480caaaa028e561b3fe24258c3c045c45e3e087e3b1fbbeea31fe5", [[], [], []]}, 0x3ef) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) [ 1160.947153] binder: BINDER_SET_CONTEXT_MGR already set [ 1160.952884] binder: 9350:9376 got transaction to invalid handle [ 1161.007908] binder: undelivered TRANSACTION_ERROR: 29201 [ 1161.017853] binder: 9350:9358 ioctl 40046207 0 returned -16 [ 1161.057335] binder: 9350:9376 transaction failed 29201/-22, size 24-8 line 2994 [ 1161.083378] binder: 9350:9376 ioctl c0306201 20000440 returned -14 [ 1161.097804] binder: undelivered TRANSACTION_ERROR: 29201 18:39:05 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec00000]}, 0x1ff}, 0x1c) 18:39:05 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/192, 0xc0}, {&(0x7f0000000180)=""/188, 0xbc}, {&(0x7f0000000240)=""/149, 0x95}, {&(0x7f00000005c0)=""/138, 0x8a}, {&(0x7f0000000400)=""/152, 0x98}, {&(0x7f0000000580)=""/64, 0x40}], 0x6, 0x10400003) 18:39:05 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000083000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x11) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="000026bd7000fcdbdf250d00f47f8de01be48592d85778cd7c5a00003c000200080206000010000008000700c976ca7fcf5460000027e4a1020700080006007d0000"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, r0, 0x0) r6 = fcntl$dupfd(r5, 0x606, r1) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) recvfrom(r3, &(0x7f0000000000)=""/136, 0x88, 0x2000, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x4, 0x0, 0x0, {0xa, 0x0, 0xffff, @loopback, 0x4}}}, 0x80) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000540)={0x87, 0x29, 0x1, {0x101, [{{0x0, 0x3}, 0x2, 0x100000001, 0x7, './file0'}, {{0x2, 0x1, 0x4}, 0x8000000000000000, 0x4, 0x7, './file0'}, {{0x8, 0x4}, 0x8, 0x3, 0x7, './file0'}, {{0x0, 0x3, 0x2}, 0x6a, 0x8, 0x7, './file0'}]}}, 0x87) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0) ioctl$VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000240)={0xf, 0x1, 0x1, 0x4000, r4}) dup2(r7, r7) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000083000/0x1000)=nil) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000500), 0x4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r8 = socket$inet6(0xa, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r6, 0xc010640c, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000400)='security.capability\x00', &(0x7f0000000440)=@v2={0x2000000, [{0x9, 0x26}, {0x9, 0x1000}]}, 0x14, 0x3) write$binfmt_aout(r8, &(0x7f0000000600)={{0x10f, 0x41, 0x3, 0x8d, 0x31a, 0x790000, 0x21a}, "8d11fef2f9faff4e7a6ac0d7d6e2648b980e89f7b055aaa6733ceb678dae10df731d37de64125a1b363e02e1e4640e7ac30c3b6c9ccf657de68f9047446b772eb78ca16c77abe212e21bc077e20c39261957520082847301dd41b626d7a75324cd5fdbeb479ac8a22c2fcfe4b6d5003c7cf92ab225001f73a88e47d507fccb6478c16c41995f706ba70d6297892a91b7709d317ba5ad75d6cf5ed6af8e59df831421ce971266ad7910bfee8444976bcc9b7f537e480caaaa028e561b3fe24258c3c045c45e3e087e3b1fbbeea31fe5", [[], [], []]}, 0x3ef) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) 18:39:06 executing program 5: inotify_init1(0x800) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x100, 0xa1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x0, @time, 0x100000000, {0x5, 0x7fffffff}, 0x6, 0x1, 0x1}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000640)="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", 0x1000) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) accept4$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001640)=0x14, 0x800) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000001680)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7, r4}) ioctl$RTC_EPOCH_READ(r3, 0x8008700d, &(0x7f0000000540)) write$FUSE_INIT(r0, &(0x7f0000000300)={0x50, 0xfffffffffffffff5, 0x1, {0x7, 0x1c, 0x400, 0x82000, 0x43d67665, 0x0, 0x1000, 0x101}}, 0x50) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0xfe, 0x4) socket$vsock_dgram(0x28, 0x2, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f00000003c0)=0x5) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) r7 = add_key(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000400)={r7, 0x5, 0x3}, &(0x7f00000004c0)={'enc=', 'pkcs1', ' hash=', {'cbcmac(tea)\x00'}}, &(0x7f00000016c0)="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", &(0x7f0000000440)=""/9) pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:39:06 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}, 0x1ff}, 0x1c) 18:39:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:06 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000083000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x11) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="000026bd7000fcdbdf250d00f47f8de01be48592d85778cd7c5a00003c000200080206000010000008000700c976ca7fcf5460000027e4a1020700080006007d0000"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, r0, 0x0) r6 = fcntl$dupfd(r5, 0x606, r1) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) recvfrom(r3, &(0x7f0000000000)=""/136, 0x88, 0x2000, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x4, 0x0, 0x0, {0xa, 0x0, 0xffff, @loopback, 0x4}}}, 0x80) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000540)={0x87, 0x29, 0x1, {0x101, [{{0x0, 0x3}, 0x2, 0x100000001, 0x7, './file0'}, {{0x2, 0x1, 0x4}, 0x8000000000000000, 0x4, 0x7, './file0'}, {{0x8, 0x4}, 0x8, 0x3, 0x7, './file0'}, {{0x0, 0x3, 0x2}, 0x6a, 0x8, 0x7, './file0'}]}}, 0x87) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0) ioctl$VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000240)={0xf, 0x1, 0x1, 0x4000, r4}) dup2(r7, r7) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000083000/0x1000)=nil) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000500), 0x4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r8 = socket$inet6(0xa, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r6, 0xc010640c, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000400)='security.capability\x00', &(0x7f0000000440)=@v2={0x2000000, [{0x9, 0x26}, {0x9, 0x1000}]}, 0x14, 0x3) write$binfmt_aout(r8, &(0x7f0000000600)={{0x10f, 0x41, 0x3, 0x8d, 0x31a, 0x790000, 0x21a}, "8d11fef2f9faff4e7a6ac0d7d6e2648b980e89f7b055aaa6733ceb678dae10df731d37de64125a1b363e02e1e4640e7ac30c3b6c9ccf657de68f9047446b772eb78ca16c77abe212e21bc077e20c39261957520082847301dd41b626d7a75324cd5fdbeb479ac8a22c2fcfe4b6d5003c7cf92ab225001f73a88e47d507fccb6478c16c41995f706ba70d6297892a91b7709d317ba5ad75d6cf5ed6af8e59df831421ce971266ad7910bfee8444976bcc9b7f537e480caaaa028e561b3fe24258c3c045c45e3e087e3b1fbbeea31fe5", [[], [], []]}, 0x3ef) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) 18:39:06 executing program 0: getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000001c0), 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_open_dev$amidi(0x0, 0x8, 0x0) socket$inet(0x2, 0xe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00\xc0\x87\xeaU\x01\x1e\x14\xc9\xe3G\xdd\x1fU\xa6\x02j\x1c\xb7\xe0g\xf3\xc5w\x98\x1c\t\x94\xa1\xe8\r\x90\xd4\x9dh\xbd\xbc\x91\xfa\xb9\xc1\xc7\xf0c\xe6v\xe80x0, 0x100, 0x30}, &(0x7f0000000280)=0x199) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000400)={r5, @in6={{0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}}, 0x84) keyctl$assume_authority(0x10, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002540)}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:39:06 executing program 3: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x80, 0x100) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f00000001c0)=0x7f) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='\x9c;\xc0&&4\xc9~\xbf`\xfeR\xed<\xbc\xac\xaf\xfb\x95\xe8Fj\xd7s\xed\x94\x04\x1bx\x00\x00\x00^\x18/\x1f\x00\x00\x00\x00t\xe0AD(-\x8c\xc0\xbf\xfd\x1c(\x1f\x9a\xf5M\xbc\x88\xb3O\xe4\xef\x86c\x13V\xa9\x12O\xaa\t\xa9>\x95\x9f\x14+\xc1Y\xac\xe6t0\xdd`L>\xec\x99I\xe6\x1f\xba[\xfc\xb42l\xbf3\xd8\xcd\xf1\\\x14L\xb8P\xae\x1a/\xc2N\xce\x8d\x13\x86\xca\xbd\x00\xfe\xf4\xaa\xf2\xa4\x8e\xc6\x03x9o\x82}\xcb\x16\x027\xfb\xc9\x01u=#\xd2T!\x06-p\xcct_') r3 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setstatus(r3, 0x4, 0x447ff) preadv(r2, &(0x7f0000000700), 0x13b, 0x10400003) [ 1161.581593] binder: 9413:9424 got transaction to invalid handle 18:39:06 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000]}, 0x1ff}, 0x1c) [ 1161.636491] binder: 9413:9424 ioctl c0306201 20000440 returned -14 [ 1161.687973] binder_alloc: binder_alloc_mmap_handler: 9413 20001000-20002000 already mapped failed -16 [ 1161.728151] binder: BINDER_SET_CONTEXT_MGR already set 18:39:06 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f00000000c0)=0x7) preadv(r0, &(0x7f0000000700), 0x13b, 0x10400003) ioctl$KDSETMODE(r0, 0x4b3a, 0x47b) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) [ 1161.733602] binder: 9413:9424 ioctl 40046207 0 returned -16 [ 1161.739524] binder: 9413:9429 got transaction to invalid handle [ 1161.759458] binder: 9413:9429 ioctl c0306201 20000440 returned -14 [ 1161.793236] binder: undelivered TRANSACTION_ERROR: 29201 [ 1161.800257] binder: undelivered TRANSACTION_ERROR: 29201 18:39:06 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0x80024321, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x569d, 0x286081) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 18:39:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:06 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x1ff}, 0x1c) 18:39:06 executing program 3: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x101000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x21000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x501, 0x70bd2a, 0x25dfdbfe, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x1, 0x2, 0x4d, 0x40}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000240)) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') ioctl$TCSBRKP(r2, 0x5425, 0xfffffffffffffff9) preadv(r2, &(0x7f0000000700), 0x13b, 0x10400003) getdents(r2, &(0x7f0000000340)=""/201, 0xc9) [ 1161.955939] binder: 9447:9448 got transaction to invalid handle [ 1162.016614] binder: 9447:9448 ioctl c0306201 20000440 returned -14 [ 1162.046008] binder_alloc: binder_alloc_mmap_handler: 9447 20001000-20002000 already mapped failed -16 [ 1162.147456] binder: 9447:9455 got transaction to invalid handle [ 1162.156706] binder_transaction: 3 callbacks suppressed [ 1162.156725] binder: 9447:9455 transaction failed 29201/-22, size 24-8 line 2994 [ 1162.182646] binder: BINDER_SET_CONTEXT_MGR already set [ 1162.184852] binder: 9447:9455 ioctl c0306201 20000440 returned -14 [ 1162.206151] binder: 9447:9448 ioctl 40046207 0 returned -16 18:39:06 executing program 5: inotify_init1(0x800) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) add_key(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000100)={0x1b7, 0x0, 0x0, 0xfd, 0x0, 0x800000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:39:06 executing program 0: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e657720640868e6d5910537a87365723a6e6f6465762030303030303537"], 0x1, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) keyctl$update(0xb, r0, &(0x7f0000000000), 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200002, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x8) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000040)=0x1fd4) keyctl$set_timeout(0xf, r0, 0xffff) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0xfffffffffffffd88) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) socket$inet(0x2, 0x5, 0x0) 18:39:06 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000100)={0xf5, 0x0, [0x86, 0x7, 0x557, 0x3]}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000080)={0x7, {0x2, 0xffffffffffffff01, 0x4, 0xfffffffffffffff7}, {0x1f, 0x9, 0x1, 0x1}, {0xffffffffffffffc0}}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f000000d000)={0xa, 0x4e20, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000200)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) fcntl$notify(r1, 0x402, 0x2) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f00000001c0)=0x3ff, 0x4) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 18:39:06 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x1ff}, 0x1c) 18:39:06 executing program 3: r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xffffffff, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x401, 0x4, 0x8, 0x3ff, 0x9}, @ldst={0x1, 0x0, 0x1, 0x3, 0x6, 0x0, 0xffffffffffffffff}, @generic={0x81, 0x7fff, 0x7, 0x8, 0x866}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x98, &(0x7f0000000180)=""/152, 0x41100, 0xd5862d77819d8ad1, [], 0x0, 0x3}, 0x48) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) fallocate(r0, 0x15, 0x1, 0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r1, &(0x7f0000000700), 0x13b, 0x10400003) 18:39:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1162.358955] encrypted_key: master key parameter 'dhæÕ‘7¨ser:nodev' is invalid [ 1162.370493] binder: 9470:9471 transaction failed 29201/-22, size 24-8 line 2994 18:39:06 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, 0x1ff}, 0x1c) [ 1162.400176] binder: 9470:9471 ioctl c0306201 20000440 returned -14 [ 1162.407263] encrypted_key: master key parameter 'dhæÕ‘7¨ser:nodev' is invalid [ 1162.421363] binder_alloc: binder_alloc_mmap_handler: 9470 20001000-20002000 already mapped failed -16 [ 1162.440046] binder: BINDER_SET_CONTEXT_MGR already set 18:39:07 executing program 3: munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000000200)=""/173, 0xad}, {&(0x7f00000003c0)=""/74, 0x4a}], 0x3, 0x10400003) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x5, 0x2) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f00000000c0)=0x100000001) 18:39:07 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x8100, 0x0) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getpid() capset(&(0x7f00000003c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000007640)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000200)={{0x0, @empty, 0x4e22, 0x1, 'lblc\x00', 0x1, 0x0, 0x64}, {@remote, 0x4e24, 0x0, 0x7ff}}, 0x44) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x80000, 0x0) r2 = open(0x0, 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000980)={0xa, 0xa, 0x7f, 0xffff7ffffffffffd}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000300), &(0x7f0000000340)=0x4) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') mlock2(&(0x7f0000318000/0x1000)=nil, 0x1000, 0x1) preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000280)={0x3, 0x5, 0x6, 0xf6f, '\x00', 0x1832bea}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="b805000000b9008000000f01c1f080a4b000600000000fc3180f09c744240000000000c744240200080000c7442406000000000f0114240f08f3a5650f050f20da0f01cf", 0x44}], 0x1, 0x0, 0x0, 0x0) [ 1162.460584] binder: 9470:9471 ioctl 40046207 0 returned -16 18:39:07 executing program 2: prctl$PR_SVE_GET_VL(0x33, 0xf5a4) r0 = socket$inet(0x10, 0x3, 0xa) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e280000000b0a43ba5d806055b6fdd80b40000000140001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x14}, 0x10) 18:39:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:07 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x1ff}, 0x1c) [ 1162.718740] binder: 9502:9503 transaction failed 29201/-22, size 24-8 line 2994 [ 1162.741549] binder: 9502:9503 ioctl c0306201 20000440 returned -14 [ 1162.774106] binder_alloc: binder_alloc_mmap_handler: 9502 20001000-20002000 already mapped failed -16 [ 1162.814262] binder: BINDER_SET_CONTEXT_MGR already set [ 1162.836315] binder: 9502:9508 transaction failed 29201/-22, size 24-8 line 2994 [ 1162.843861] binder: 9502:9508 ioctl c0306201 20000440 returned -14 [ 1162.850563] binder: 9502:9503 ioctl 40046207 0 returned -16 [ 1163.296165] net_ratelimit: 20 callbacks suppressed [ 1163.296191] protocol 88fb is buggy, dev hsr_slave_0 [ 1163.306260] protocol 88fb is buggy, dev hsr_slave_1 18:39:07 executing program 5: inotify_init1(0x800) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) openat$vnet(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vhost-net\x00', 0x2, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg(r0, &(0x7f0000001980)={&(0x7f0000000400)=@ethernet={0x7}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000640)="ccb2dd52a63ac5be34aa96ef706002e5d1d536a288c8623e807e29ce9d07c062a28fc458fed558a5a4ab591b96a26aada76a235a56204572c53661d5455e1baf8f4f8e1e42130e181447fd", 0x4b}, {&(0x7f00000006c0)="84fcea086edd5a91853252591cea1dbcd7ed0c747a209c06cad81cee96c8994c057a81c8ddbecc34dfd1ea8979e84282056e3563d8516707a36858ca63d08f79f28294b219624186f80160d97a7a58cfd18e5b174c0b191478582b7aa83e87364cfdc50994cb1d8e6c97e740c29b4e85546ee205315728", 0x77}, {&(0x7f0000000740)="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", 0xfb}, {&(0x7f0000000840)="68bdabda763ce151f5d143cb7ea75fb69a424efa816378a3fdfd9853cd27fb1f0e82276c771c0d8cc736d72054d201b15b9564ff9dbbfc478a9183b6fb988db5e87087a09b76fe4d218f4205a6fdb08cdacaa517d022acd88b6022fcd13576d4a300d227d1a18494204a24a85824affb887f05c7f497704c7986262ca076920a865b8593f5a6a1f5c9e167f0b9b983bf508aaae6238fc747887a48c70036af1dde62f8c6d1354d66c2612d421d0b02ece34709c3919dc8ef2fc5fd6c36299f6869e69f07a5d39cfe44f263f43668567974c4b4ebf78a54d1d06b0b00e66557165be2de18d63eb40a249e4fd410cb8eead9bf9d421fd83ee525c7c96a1b814fd49f55ed6eae4e9fcaf2865faf67a68bd13c524624c2b8bee6c02a341b1de5af031ff20cb2ca11dd6b2591b0b1b50fadf4206e5ca2e6d0ecdf1a234d242c6ee6790a870f0c3d25f14945509a18821927f94dd0b04a3ce9fc53bc0394745dce42ab88bad26a630db611d4c13c2d5bfa05ec7a32fbb6afcab787e8339b388bc61ed15932d94bbd69e13bc7a4a6c1c25f0005fb506e70e64289fa094d176e09df2c354d1b52dafc560e5c29dde3d062abf8bb123018a2cc754710ea2470807800885ccf0e1c606840b43e7d87b402db08cd67020af18aac99f03e0e2e6723fcde5986fa516cac302ac70267ba199b753e8685658bc5a205391b43613018d20e9a70557573829e034fa56153cda5f4332c4592c84dde2a6842e5eac3c26270e49ca88a50c5748c1979d89aa231f2575e25287e99399d91ef503991b18bc421ae1ab61a3847a41725f408a7330a1e326d36361f78e16cc55f039df6df17f9746f74848fb7f8ab26861d3bf124ffcf121bbc84dcedd6b554cedcb0b30f6d140a555719136fa29f73d3bc567fbdbf54f00b8c777a66bd317707b9b16ccc4a5ba15a4f14e97683f109e7e58faa894c52bd6bb96c06fff23323fda92f99bd4bd9b506d97f9bbce558e944510a675b0eccc9a427fb10dbd5d611f8d98d2dc4a4b455796d1353c2889de6314e8fba1f751e20dd809ea911a4388f3bf872507cb08119d2245c64e85e5197d753a0dea48f7236de1087549c7f37143bcb3fd4275139db1dd395af79675584fe05412add27b799d93b151d4f05b16c176d4ba805ae31d9bdb53c8361775173cfa35a5e30015fd5ec3d048fdad68ac4f064da2e6efd743ab3bd0bd57565501a13ffcd8f7d3ec6611bfa46c1e2fe1c6dde4504fb1c591becf8cabfa4cffa888065ac47d545c01eca1a034b3982cb458544bf9b71a20be3805ff205810176ca6f9cf802f6bc6762ddba824962ba26cd2df3e4384cae1ec0af8bae64f5c1d15d9730b3ba045af97935af0bc5f9cdb89b07b4fbd8f29af647578fc3f95542b521937ad91454d16a6676b479730fa430f98328ba48990737e4270009b5ebc5637f35e64a549c2d6080e4c4cae06e9500001e0d1f648b02150feb37666d5763b9dfa055f00abd5cdb5314e4ea3a97b96bf2011def435058444bb37832c2106fbcb1e196df6fb3631f4aa617433ba10e261a57adeae7bc8f48d36e705d927a035d748d1496c52dfb14f1a867f84fd3235390b95df9e99052dfafabfdc4859687578a35e7b6e0a72d0fb17a12204959dd6c8b77d19f3ef9600ae1cde4d01e848027e36a7a4c67cf7bc13d50b795127e636e3c2a7239efe20db5dcd2513f12005a654c544b2ed55d4b7d30dc6c108b52cb77252b73e066ca716e04cf8cc91f349c6c2b6ec30b7a96b1efe653e3073d6012742c284d2c46e09f2c0bc0c6c963e992953ae168b865d2e55af550e06d10b4def8877cde16e311e8061586bd44659c53ede9456f1786bf99cedfb4123377492d39cad779e21dce611131cc82f83efd205652234fadaa63c67665283316dcd3b4a74bedda092fec63e5391ccb73a8230060bef2ab4dc88b4b017fb17ff7b22ef93a71b059536aec7e34ef0e7bfca7c83b78d78ebf9f24c7b80a7988e613e1d49b38c3a2a3325fe6555fe86e304fa3aad12fe05a1b2cfe6efac0dfcd0be860f85a0aecd3ce557bd6cceffcf00dc26a87e3b48950293fc96d20d417f7cc9800f4fe76d32b9a4f2af2b6676a28a72cb45a4c54f88bd8bbb6ac8a90391ed2d803a200e1f2702e5f7c1da2956f4645e9883fd6dce3c92150220348010ac6420f2b1d1060c32dc5a10513f0a60981ff4562d2863c8fb82f991a3e0b623bc592833e3354eef49e40480921b6e1256f770c88bafe4ecd45b18d36ef38c787e646f607e22e19da7bde9846b19aaa9e6532e902a13734dd32372fa55d4ce4c9fee7ace23d24007fcb1110d8cba15bedb618ec4f15e8d9dac6a06311c7c8d249d4f9b69460342d79f57e03ef7c0b03bdf1bba92350904d195a8213e6c205a005ffb26bf1b1d1eb878e4502e88eb7ce2f4f2b9d636355ce98006a948276eabe9763e95d968edb746de64913d01b4ccf7f14bb522e874b89acbae27af6570168e17c49f08592c7d7ccc92b16b517b66b5d1deef05c84cae34c6dbd962ef7dfdfe527db5868ecad13065603103230b924d45b06541085825db50e5b9bfe5190218276918a982e49ac68039996638bad1031c88eb2b8daa0805db8a9bbdfbb109d340976b56c9a2e2b761b71f86ed61c44884eafa9df9a7868fa4334436a2b0b90fb7fd2439ee199bfb0bc491a418d63626b87424d49352b0e46efe398d07299800fffe98f357c4eb2b054a9bd3272d8fa9fcbcc37b3b4b78650c9a22866b6f3712cf107977cd8f8dc3af463b2ff49a83ebdd1735a8ff1128fde33db0e8e348f3680ae47ddcc5c9dc77ef254d48101aadacc135f9026d106b3032c866dda8925c55866279d27cabf0f2c50ed41604cb6e9d711cbec9a57c2a732e7f52a84b0d7953968064ee9b78fb6b71bc2386cfbe7dbd0f3ea45df4ca036633096cc7d5305d01ca1f406490efc5588505e868db5b8fa4a29a246e5e582423840bf4f43ed1ce62e03a09154b9bb93f18c1825d8815080e37af3fff4427712f5976b94fbb6d8260bca5ddbc7f0fb3c95c0e439575bd11511fac53415241d2977e05563584cef9f27fd0b80819e241fac8637edb98654bff0870c724934ca1cf762e2dfad6a3a60e0e6c1d419e1ce92012f62e9da016191d65eda0938b40cd60f7123090f4c2e723ca47d5598b3f2915bf043b4d92f8f7ded989a96f2b435788e1f56659b4ad4f3aec5c9f3f15aff80a9812f76eae68ce3b7130f4bedb817d96aae63d30466ecbce8897dbd9e6b434a3577e9deb83b7e07e5640669b23e8627b721af45ae56b97f3fba5080d3bbc00d1dac4366e8ca2284e4d8f3228e9598a8106aca54de8e1d9a77931928d9acbc4f0b63567466f95979031df4fd161f9c0801ae22471db86136a7bed35beba1557e69f9a89ec4b4dbac82111f6d614a4db14bf15be38ae77c548ba2855d625fd1852d1077b9ef055d2068b6b0c45a221f82d8554116a9ca2388c9663c780c78604137685b51b5c9afc2ae8f90a16f924ac9d53572cd14e5915c10a9a178ebd273bd92588c649673af99f97ff2c78ac3c138803f88132772b09f7cd727d0124167e6cd37dd88d8744474bf7bfc7ca8a9e04f4a4caa962cdd57b8d4beaa8c23e69551cecd60631daca4a98e5ce30caeb0fb217d118578134872feb52c42d2c55006051a0bf63147583186929e4b7652da6ec33aa31a1def0e907aea0c751aed4da4c4f8fdac2ba09478f5ac437fb47f9b54ef36008edb243e8f92e2096cddb5a5d55423c4e68e42049331299204b2a78bd8b9aeffc526f1c985f74d7618687c5da0d501a977e89943e2c67e2ee96a42e5a109c5ec5fbaa60bec8c240848057d16b5100ef17a1a97f94a0603bc6531bb848b55d9a3fc56088df0bb8d0b6b57916bcedf89ba6ec928e6fba257d5deb69d08fcea9de8bce4b18613d79705ff7365afe36dbeb82c419a7b32a02689497104dd5e5f49af178af312d4245a8150165e763be27fac3584978d6e2e16afc8e3412fbca4c3f1d76fb04b1ee14e0cb17bbfa0415711c1c65ea7a3c55f964fc33587fbc894247171927b1b4cdf4b5b923cd1515a1745691a04047cf1478dfa5763d205270e725cd0b1918d51617e29001e1fc3e58a6620df4717a34574f7e8731e1c3bcd8c76d20994e5fc83d2eb7a13d86e6799f565f166aef1144e69d04099a6fd1406b03fccfd5577b7dd5a5a9856c217ff34ac6d1c60c6b40085efa919065e24191eb7be303897d2f830f2c4d61750d31102f44e8141c10be33a73ccac79cca2de1d19d1e49ef9b1a53b8645dc3340166e8e29fb15a1acea0fa67b8d47c95a958431bbc200ced60cbd04fb07630156ea651e95c8a400cd54a3d582b3eb22c0a8a83f1017f2794a6a29ea7fd7b828b3b5b4ec4efd4f566de25fe4186040d33c3f81d8c2969ad5edd158424237be20d577efe196cb01fa4906bf8f0c5b48d83ae6b2a1a564ef0046e25b35c60638867b496757f5dcd3bfed5e3636dfbd6236afce1be4639cec98f28f8aa1fba13abb386e2241e7986d0350ed1782157136f065b2dd2bd399800f56bc818f3876455b86f4a2d9ffaeecf89eeaefac899eda4cd65e6bee6badfbf88505439267f916f7bb03f96e427ba5bf7b9b662a5984c989bfdcabcab0f314a8338b90db87e9e515f52942b41fc249cd373c946bb9b52e477526b77854155bcf48b7d69bcb83d64c46704b9440ac3c1b66d056c407b76c94bcda75baf738c5fb085b455e628e1e43b42b7788c9cb86bba13165cb4255b56fc5bcb29f8a36b93408f3f5367c1e60b438eb22ee977ac3dc6f6804f969cb803025b3d54e2a45e28ced5cdbe3ea8dab5f37b121942051997497d451894c76ce1bc8ab050c1ae7b3426f397d1784eb6edef54f1072f624624a409555ea384a646f433437b666580aff7f6c3af6ce710373c2b70df4713db38513d2aec91d33cea82e8c1bb14b5b7e9d892b3c512ab39ff86c9943f5558b8c420f284bb78a506c3513f7d086e515853aa5771f3816d498a1f72675a12fa25ac39947d9faabc8828b130a30f3f4ebc09e45ee19efc6510bf15e755a64e570762283483dc645e58a3471608f025371e5d4ed5f004988decfbd67cddd6a09797a8606ec95b82b0f08ebe593489059ae69806d476cec111f88f685344adb9a9fd8651f179a70c3c3e7ba49bc1dddb0974999e82d6cff00cdccd71a8ad26a16cf46afe091315e97d5b06b08e0f132ac12cbe3dec0bfd160049e82d17c985409693e2125cf1e9578c5bfaa1d7628d30890fa4f1c98d79721f76b39e63215ce82685253063efc4652174a3e597459b258603dfa686e0775cf55ba49f296e3118d1f1b6cfbbf621c0e8de94ec7877ea79241247ed29ac94658c40ba5a43638b81f5219d528bcfa35aa4dc5fe53d452483ab0b1b07f1bd61271f024097fb6e32fa1e0e35f89359aa38da09ee24fc963c511e169fb27c7dba4bf5bdc45386bcfd17df830607053895acd51678e9a13978e5e1e21ad1297c71ca11024fd1528476753a27ba1bc02b225a14066fe1c3dac9ef1f56f211df5b366f49a102e2b95515d8aedb3af693ef174b76d6189b29044caa3dbca4f0a25ef93ecb61865977f68bafd33ce6d14438c01261673643f831c228bc39e47141b059ab4d879f7963f65bf4dcc6d6ab720924163a22790edbc80401364f440afe121e6d4fd7681f07b087a04f2d4d4ceb9f853eb9e7182f5f7a3fdf941618ba678d7e7087c6bdf9dd7f975cbf48c641327840291bc334ed9dbed", 0x1000}], 0x4, &(0x7f0000001840)=ANY=[@ANYBLOB="10000000000000000d0100000500000008010000000000001e010000000046409952959b672f8b207d0a7c93bfb8519e247924737e65f52c90ef3d09f1b4e70232d6d88f8c030066f35fb50fb4c730b8e1baf4ec9272e5249b3808451b3b531341c18fd6f27977ac31695bbcf84b7fce828ebb97a4ce70c2a00f69877a52862bc9568ffa4e431d62d13ba0dd1aa2f4a1fdf8e00fc26867b33cb4812f9d20ae0cf998008a8be979895fb7c26329bd5faf8bc95e9c93c3b4b31d1657966555972436920e3079421abf26970f5a14d4d1e140b9bb84697e61e1adb58ccfd6b3958d8a5958892142ff894cad673762875ac40e4facc7278955c5aa0206c644a9fdebbfa5f9fdf600000000000000"], 0x118}, 0x40) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000280)={{{@in=@local, @in6=@ipv4={[], [], @local}}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) clock_gettime(0x1, &(0x7f00000004c0)={0x0, 0x0}) r4 = add_key(&(0x7f0000000240)='syzkaller\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000500)="619fcdfcfead24867fb93aaa86f0ce49d4e3d1c2274dd95113f2367945036f7cd5e97975078e5447521a799e2c6669989c1df11b9df53e0c81dd7c398592b233840d03be1e4461730655437506d240c6088bdbfef7f65efc96d6888bab013e362e816ff597666718164d08f396a50dcc3fa867addb29e2f4ddd51cf87ef10d879f4649", 0x83, 0xffffffffffffffff) add_key(0x0, &(0x7f00000019c0)={'syz', 0x1}, 0x0, 0x0, r4) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000001c0)={0x10001, 0x703}) add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0, 0x0) pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:39:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x307100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:07 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x400) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000100)={0xa3be, 0xfffffffffffffffc, 0xb6, 0x6, 0xff}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000240)=0x0) r2 = syz_open_procfs(r1, &(0x7f00000005c0)='timerss\x1db~\t\\\x85#\x8b|\xfa*\x10\x9dt\x00\x85\x9d\x1d\x03\x98W\xda\r\x00\x00\x00\x00\x00\x00\xd3\x97\xdb\xd45\xfb\xdc\x16\x00\xbf\xe2\x8c\xc4p\x8e\x8c\xca\x97\x84\xe8_\xaa\xc5\xbc\xf5\xf8<\xa6A\x81\xca\xaarx[#X_d\xfb\xf8\x97\x8e\t3\xa2\xec\'G\b\nj\b\xd0\x88K\'R\xd9\xffY~\xe1\xbb\xadW\x1bkfv\xab$\x90.\xb9\xee5\x955z\xfbQOg\xa6V\xd2z17\x91\x02\xbe\xea\x82Rs\xa8\xf7w\x96k\xa8\xe5\xf3W\xe9J\xd8\x1es\x9c\xf0\tn\x9cF\x10\r\xae\xa7sN\x9c\x87\x00\xa6\xf8\xd4\xfa\xd0L\x9fO1\x95ko\xbf\xa3\xcc\xc0\x934\xf5\x19\xb6\xdd\xc3\n\x04\xaa\xcaQ\xe0v\x94?A\x15\\\xbc\xe5\x0f\xd4\x00R\x9b\xe7e\'\x03\x00\x91A#\x9e+\xf7M\xae\xac\xfaO\x06k\xa1\xa8m\x9f7c\xf9\xfa\x15\xaf\xc2T\xd2\xd9\v\xeb.g\xb6\xcc\xb9\xc9\xa9\xf7H\xbe\xeb\xe0g\x83na2\xb7\x96\x8ek\x10H?u\x0e\x93\xfa\xc1`\xe0w\xfaa\x1f\x05\x02\t$\xcc\x9cV\xef\'H\x84\xba\x10\xc2\xf6\x10m/\xb7\xcfzefF\vs\x809\xbeG\xad\xcaV\x90\xc3\xfd6V\x0e\xf6+V\xdbr\xd0\xd9w\xf8\xe45^0h\xc7Y\x8b\xf1\\;\x141\x17\x16\xccxz\xba\xee=\x90\xafy3\x15\xa2\xe3\xbc\x80\xf5\xe6:\xbb\x8c\xef\xc4[\x9d\xb3\x8e\xe8E\x8a\xbf\xc2\xa6\x1e\"\xc1\x0f\x02\xcb+\xb8\xd4>\x1d\xdf\x82\bo\xe6\x19\xb6\x97\xac\xf3\xc9G\xe85\xaf\x05!\xb5\xac\xdb\x84b@\x9c\n\x94t\xad\xc9h\xde\xeft\xcb\xc3\xce\x0f.\x87\xf0\xb0K\xe47\xfb~\xfa\xd3$\x1c\xa4p0x0, 0x5}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r1, 0x6}, &(0x7f0000000240)=0x8) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000280)='ip6erspan0\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x7ff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000140)={r3, 0x9, 0x30000000000}, 0x8) preadv(r2, &(0x7f0000000700), 0x13b, 0x10400003) [ 1163.616603] binder: undelivered TRANSACTION_ERROR: 29201 18:39:08 executing program 0: timer_create(0x0, &(0x7f0000000040)={0x0, 0xe, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x20000, 0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x4000000) r1 = gettid() syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace(0x4208, r1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x2000000000000015) 18:39:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) 18:39:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:08 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x1ff}, 0x1c) [ 1163.785268] binder: 9553:9554 transaction failed 29201/-22, size 24-8 line 2994 [ 1163.836385] binder: 9553:9554 ioctl c0306201 20000440 returned -14 [ 1163.879254] binder_alloc: binder_alloc_mmap_handler: 9553 20001000-20002000 already mapped failed -16 [ 1163.915980] binder: BINDER_SET_CONTEXT_MGR already set [ 1163.916200] binder: 9553:9561 transaction failed 29201/-22, size 24-8 line 2994 [ 1163.922037] binder: 9553:9561 ioctl c0306201 20000440 returned -14 [ 1163.929010] binder: 9553:9554 ioctl 40046207 0 returned -16 [ 1163.942193] binder: undelivered TRANSACTION_ERROR: 29201 [ 1163.949477] binder: undelivered TRANSACTION_ERROR: 29201 [ 1164.096168] protocol 88fb is buggy, dev hsr_slave_0 [ 1164.101291] protocol 88fb is buggy, dev hsr_slave_1 [ 1164.106431] protocol 88fb is buggy, dev hsr_slave_0 [ 1164.111554] protocol 88fb is buggy, dev hsr_slave_1 18:39:08 executing program 5: inotify_init1(0x800) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) add_key(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000040)=[0x5]) add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0, 0x0) write$ppp(r0, &(0x7f0000000280)="ff0463092d1beeec75bc1c3773cbf62a7a801a158f808ed63db37478643fba45007c5327c407ed5e8d159dffd032f499c455ccba14c5dded1d586c65ca756902bd7f2ac7f2b6253f486265e408703f67a7d0de87ac2836452851ad328447b3121680636fcabe590610a8030a46cf948999d7ff70b92cd25f89ca73d9a91ffac1752c6fd4e900fdca9cabe85b3cebf6228fb06fcced60c61bb0d770057f77a2605fc22726bebdc8bb85f8ce7330fbc98f2d2347218de4d6022fbdd4fba52d3af8247e035673dd9604891715", 0xcb) pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:39:08 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r0, &(0x7f0000000700), 0x13b, 0x10400003) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000000c0)={0x7, 0xc4d5ca7, 0xffffffffffffffff}) 18:39:08 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000880)='/proc/self/net/pfkey\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_udp(0x2, 0x2, 0x0) open_by_handle_at(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="c300000001010000ed43bd526087b9202d6eaa0aea401bbcc7fe5f62cd33d48bb5007bf26e9a7587c33d705ec4741a71a48b635fc296d036a75fb12e671ba8edc6e08c8e91b6cd3a19d7a2c52bed5bc581fc22a7209a9f227c63be601077028dfddb465546e551bc4e9c76296a7e5501000000010000000a0eb89b74a2c86a9cf601670117e4ab275b105619c635713ccb22b56f0b5750b4bb3e6ad35c0c5a67043a510557bcb7f182f2e188e6e19df8c241596c179fe7b715e5b8dbfa1276091058fa"], 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)) poll(&(0x7f0000000140)=[{r1}, {r1}, {r2}, {r2}, {r1}], 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, 0x1c) pipe(&(0x7f0000000240)) poll(&(0x7f0000000080)=[{r2}, {r2}, {r2}], 0x2000000000000073, 0xffbffffffffffffe) 18:39:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x10000, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300), 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$inet(0x2, 0xa, 0xffd) connect$inet(r0, &(0x7f0000000580)={0x2, 0x4e20, @remote}, 0x10) r2 = semget(0x1, 0xfffffffffffffffd, 0x0) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000680)=""/144) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x2, 0x1) r3 = syz_open_dev$audion(&(0x7f00000005c0)='/dev/audio#\x00', 0x80000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x52) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x9, 0x200, 0x0, 0x8, 0x8001, 0x4, 0x10001, 0xc04, 0xfffffffffffffffb, 0xff}, 0xb) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x3, 0x2, 0x6}, 0x10) r4 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x8000, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x105082) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000240)=0xb) fanotify_mark(r3, 0x200020000000009f, 0x9, r0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in=@loopback, @in6=@loopback}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000500)=0xc) r7 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f00000004c0)='/dev/loop#\x00', 0xb, 0x1) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000540)=""/51) sendfile(r4, r5, &(0x7f00000003c0), 0x8000) pipe(&(0x7f0000000040)) 18:39:08 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x1ff}, 0x1c) 18:39:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x50a000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:08 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, 0x1ff}, 0x1c) [ 1164.235877] binder_transaction: 7 callbacks suppressed [ 1164.235886] binder: 9571:9574 got transaction to invalid handle 18:39:08 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r0, &(0x7f0000000700), 0x13b, 0x10400003) socket$isdn(0x22, 0x3, 0xb582894d9c633a7a) 18:39:08 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "7f84c079eb46fcbf"}}, 0x48}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) ptrace$peekuser(0x3, r1, 0x20) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1f}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3a82626995fa97dd"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "934341c138c7f1bf"}}, 0x48}}, 0x0) [ 1164.306130] binder: 9571:9574 transaction failed 29201/-22, size 24-8 line 2994 [ 1164.337188] binder: 9571:9574 ioctl c0306201 20000440 returned -14 [ 1164.363690] binder_alloc: binder_alloc_mmap_handler: 9571 20001000-20002000 already mapped failed -16 [ 1164.394793] binder: 9571:9589 got transaction to invalid handle 18:39:09 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x1ff}, 0x1c) [ 1164.441300] binder: undelivered TRANSACTION_ERROR: 29201 [ 1164.443143] binder: 9571:9589 transaction failed 29201/-22, size 24-8 line 2994 [ 1164.468826] binder: 9571:9589 ioctl c0306201 20000440 returned -14 18:39:09 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r0, &(0x7f0000000700), 0x13b, 0x10400003) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/180, 0xb4}, {&(0x7f0000000180)=""/57, 0x39}, {&(0x7f00000001c0)=""/71, 0x47}, {&(0x7f0000000340)=""/217, 0xd9}], 0x4, 0x0) [ 1164.496164] protocol 88fb is buggy, dev hsr_slave_0 [ 1164.501262] protocol 88fb is buggy, dev hsr_slave_1 [ 1164.506423] protocol 88fb is buggy, dev hsr_slave_0 [ 1164.511499] protocol 88fb is buggy, dev hsr_slave_1 18:39:09 executing program 2: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="230000005e0081aee4050c00000f00000000a300001832e0b58bc609f6d8db51260185", 0x23}], 0x1}, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) r3 = getegid() r4 = getgid() r5 = getegid() stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() getresgid(&(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0)) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02000000010002000000000002000600", @ANYRES32=r1, @ANYBLOB="040002000000000008000200", @ANYRES32=r2, @ANYBLOB="08200500290abdb4556ba426daba6eecc5fb16538c0936c0d89a00477890ac32b102e36d17e3818b2e6024f64a9e9f79b27dd280d1bb61efae0d0be8031592b67c963e44ede9f327188e6171acf48af64dc0435bd89bad0679ae7681c30d831622e2138818f8f862c80046d075255c9e28b25ae29a0cbb7ed6829e1e3b370bdb45c76e52e079b73b904bdc29578575a61f55cb3c5d1937dfe81254a87f4fbc382d33597ef1078d9838a0c7c07fd26a10b497fda6e54470e7ba57590aef89457c712cebcd09399f758cd980c7f825eeec77a80e0f20b0a74817bbcb82097feb58e568432dab87da954ed4f9", @ANYRES32=r3, @ANYBLOB="08000400", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r5, @ANYBLOB="08000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000400", @ANYRES32=r8, @ANYBLOB="10000400000000002000010000000000"], 0x64, 0x2) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 1164.537893] binder: undelivered TRANSACTION_ERROR: 29201 18:39:09 executing program 5: inotify_init1(0x800) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000280)={0x6, {{0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x88) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0xd7, &(0x7f0000000040), &(0x7f00000001c0)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) add_key(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0, 0x0) pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:39:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x10000, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300), 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$inet(0x2, 0xa, 0xffd) connect$inet(r0, &(0x7f0000000580)={0x2, 0x4e20, @remote}, 0x10) r2 = semget(0x1, 0xfffffffffffffffd, 0x0) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000680)=""/144) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x2, 0x1) r3 = syz_open_dev$audion(&(0x7f00000005c0)='/dev/audio#\x00', 0x80000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x52) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x9, 0x200, 0x0, 0x8, 0x8001, 0x4, 0x10001, 0xc04, 0xfffffffffffffffb, 0xff}, 0xb) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x3, 0x2, 0x6}, 0x10) r4 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x8000, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x105082) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000240)=0xb) fanotify_mark(r3, 0x200020000000009f, 0x9, r0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in=@loopback, @in6=@loopback}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000500)=0xc) r7 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f00000004c0)='/dev/loop#\x00', 0xb, 0x1) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000540)=""/51) sendfile(r4, r5, &(0x7f00000003c0), 0x8000) pipe(&(0x7f0000000040)) 18:39:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x70a000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x10000, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300), 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$inet(0x2, 0xa, 0xffd) connect$inet(r0, &(0x7f0000000580)={0x2, 0x4e20, @remote}, 0x10) r2 = semget(0x1, 0xfffffffffffffffd, 0x0) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000680)=""/144) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x2, 0x1) r3 = syz_open_dev$audion(&(0x7f00000005c0)='/dev/audio#\x00', 0x80000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x52) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x9, 0x200, 0x0, 0x8, 0x8001, 0x4, 0x10001, 0xc04, 0xfffffffffffffffb, 0xff}, 0xb) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x3, 0x2, 0x6}, 0x10) r4 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x8000, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x105082) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000240)=0xb) fanotify_mark(r3, 0x200020000000009f, 0x9, r0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in=@loopback, @in6=@loopback}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000500)=0xc) r7 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f00000004c0)='/dev/loop#\x00', 0xb, 0x1) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000540)=""/51) sendfile(r4, r5, &(0x7f00000003c0), 0x8000) pipe(&(0x7f0000000040)) 18:39:09 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}, 0x1ff}, 0x1c) 18:39:09 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000180)=0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x100000000, @empty, 0x2}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e20, 0x81, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}, @in6={0xa, 0x4e23, 0x5, @rand_addr="0737fd460d2f1ec539e7db6cc9870cd3", 0x9}, @in6={0xa, 0x4e23, 0x0, @remote, 0x1}, @in={0x2, 0x4e22, @rand_addr=0x4df5}, @in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @in={0x2, 0x4e22, @local}], 0xbc) r2 = syz_open_procfs(r0, &(0x7f0000000200)='net/dev\x00') preadv(r2, &(0x7f0000000700), 0x13b, 0x10400003) 18:39:09 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000140)='\xa1\"!,\x05\xec\xc7rp\x00\x10\xeaQ\xcb\x81lj\xc2]\x97O\xcd\xf9g&!\xc6\xe8\xa74\xc1t\xd5.6\x18\xdb\xc7\xbf\xe0e\x97\xc3\xda [\xa4\xee\x96\xf2\x9b\x81h\xb8aM\xb8t\b\x98xi\xc4\xe7\xf5\x81\xe3\xc5,c\x8e\x95(\x1ckk\x97\xfb\xe5C\xa8\xd7\xaa\xbb\xb6m\fB\xf3V\xe1c\x12o;7\xc3\xe2q\xf2[{\xb17*\b\x7f\x13\x04\xd5\xfcW7\xf9\xf6') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000200)=0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='\x00') preadv(r1, &(0x7f0000000700), 0x13b, 0x10400003) [ 1165.308319] binder: 9619:9620 got transaction to invalid handle [ 1165.330194] binder: 9619:9620 ioctl c0306201 20000440 returned -14 18:39:09 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000]}, 0x1ff}, 0x1c) [ 1165.360180] binder_alloc: binder_alloc_mmap_handler: 9619 20001000-20002000 already mapped failed -16 [ 1165.385304] binder: BINDER_SET_CONTEXT_MGR already set [ 1165.394654] binder: 9619:9620 ioctl 40046207 0 returned -16 18:39:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x10000, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300), 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$inet(0x2, 0xa, 0xffd) connect$inet(r0, &(0x7f0000000580)={0x2, 0x4e20, @remote}, 0x10) r2 = semget(0x1, 0xfffffffffffffffd, 0x0) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000680)=""/144) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x2, 0x1) r3 = syz_open_dev$audion(&(0x7f00000005c0)='/dev/audio#\x00', 0x80000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x52) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x9, 0x200, 0x0, 0x8, 0x8001, 0x4, 0x10001, 0xc04, 0xfffffffffffffffb, 0xff}, 0xb) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x3, 0x2, 0x6}, 0x10) r4 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x8000, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x105082) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000240)=0xb) fanotify_mark(r3, 0x200020000000009f, 0x9, r0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in=@loopback, @in6=@loopback}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000500)=0xc) r7 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f00000004c0)='/dev/loop#\x00', 0xb, 0x1) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000540)=""/51) sendfile(r4, r5, &(0x7f00000003c0), 0x8000) pipe(&(0x7f0000000040)) [ 1165.426716] binder: 9619:9634 got transaction to invalid handle [ 1165.443428] binder: 9619:9634 ioctl c0306201 20000440 returned -14 [ 1165.446584] binder: undelivered TRANSACTION_ERROR: 29201 18:39:10 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000700), 0x13b, 0x10400003) 18:39:10 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaaaafeffaaaaa8]}, 0x1ff}, 0x1c) [ 1165.481896] binder: undelivered TRANSACTION_ERROR: 29201 18:39:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x10000, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300), 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$inet(0x2, 0xa, 0xffd) connect$inet(r0, &(0x7f0000000580)={0x2, 0x4e20, @remote}, 0x10) r2 = semget(0x1, 0xfffffffffffffffd, 0x0) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000680)=""/144) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x2, 0x1) r3 = syz_open_dev$audion(&(0x7f00000005c0)='/dev/audio#\x00', 0x80000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x52) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x9, 0x200, 0x0, 0x8, 0x8001, 0x4, 0x10001, 0xc04, 0xfffffffffffffffb, 0xff}, 0xb) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x3, 0x2, 0x6}, 0x10) r4 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x8000, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x105082) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000240)=0xb) fanotify_mark(r3, 0x200020000000009f, 0x9, r0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in=@loopback, @in6=@loopback}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000500)=0xc) r7 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f00000004c0)='/dev/loop#\x00', 0xb, 0x1) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000540)=""/51) sendfile(r4, r5, &(0x7f00000003c0), 0x8000) pipe(&(0x7f0000000040)) 18:39:10 executing program 5: r0 = inotify_init1(0x800) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) write(r0, &(0x7f0000000640)="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", 0x92e80af6a2bf8ba1) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)="7ee54fd2d0ae607ab2d436e8397ca30753c0c2c1c74e0cd2b40b811cda9e04d7c05e24012f404b3d7854e611e09fae9c66b9a53144242a508da62b710d0ce9ae19f29cd6603aae4e9c0c5ddad7643db049a645d7089599420471db3178e7041ab2915fad5419a4", 0x67, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000300)={r3, 0x1000, 0x4}, 0x0, &(0x7f0000000340)="b492ba2028ef2d8fc13cc5a8b22836685171ad105d1ffaccdf", &(0x7f00000003c0)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) add_key(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0, 0x0) pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f00000003c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000400)={0x1, 0x1, 0x4, 0x6, 0x2, 0xfffffffffffffffd, 0x5, 0x9, 0x0}, &(0x7f0000000440)=0x20) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000004c0)={r5, 0x8001, 0x9, 0x3f}, 0x10) 18:39:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x713000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:10 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100, 0x9) sendmsg$netlink(r0, &(0x7f0000000080)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff, 0x2000080}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x8000) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000100)=""/148, 0x94}], 0x3ad, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000700), 0x13b, 0x10400003) 18:39:10 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)=@buf={0x1000, &(0x7f0000000180)="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"}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs_stats\x00\xa9\x05a\x1e\x94\xf6X\x8b\v\x82\xe1\xd6S\x8d\xa7\x9e#\xcfw\x03)!\x9a\xbek\xa1Qu\xcb\xc7\x81\x9c\x93|\xc5H\xcf\xd3c\xff+J*]s#1\xd0\xafZth\x8f\xf9U\xe9\xcd\x90\xbc\x02GLA\x19\x946\x0eUl\x16\xc2\xad4\x10\x14[JWcD\x87\x14<\xe2\xb7,\v=\xc1bd\x89\x9c\f}\x11\x8a\x1f\xa5\x13\xef\xcc<\b\xcd\x8b-\xf7\xfa~n\xae\xa0\x94=\xb2\x7fG[\x18\xeb\x81\xb3\xc1\xa9\xc1\a\x98\f\x18\xfb)\xedsKF\x9f\'\xa5u\xc9\'\x93W:rfI]\xce') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[]}, 0x10000) socket$alg(0x26, 0x5, 0x0) preadv(r1, &(0x7f00000017c0), 0x183, 0x400000000000) 18:39:10 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x1ff}, 0x1c) 18:39:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x10000, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300), 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$inet(0x2, 0xa, 0xffd) connect$inet(r0, &(0x7f0000000580)={0x2, 0x4e20, @remote}, 0x10) r2 = semget(0x1, 0xfffffffffffffffd, 0x0) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000680)=""/144) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x2, 0x1) r3 = syz_open_dev$audion(&(0x7f00000005c0)='/dev/audio#\x00', 0x80000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x52) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x9, 0x200, 0x0, 0x8, 0x8001, 0x4, 0x10001, 0xc04, 0xfffffffffffffffb, 0xff}, 0xb) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x3, 0x2, 0x6}, 0x10) r4 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x8000, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x105082) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000240)=0xb) fanotify_mark(r3, 0x200020000000009f, 0x9, r0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000740)={{{@in=@loopback, @in6=@loopback}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000500)=0xc) r7 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f00000004c0)='/dev/loop#\x00', 0xb, 0x1) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000540)=""/51) sendfile(r4, r5, &(0x7f00000003c0), 0x8000) pipe(&(0x7f0000000040)) [ 1166.351740] binder: 9670:9677 got transaction to invalid handle 18:39:10 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x3, r0}) write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14, 0x11, 0x1, {0xd, 0x4, 0x2}}, 0x14) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000080)) accept4$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x1c, 0x80000) 18:39:10 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}, 0x1ff}, 0x1c) [ 1166.392217] binder: 9670:9677 ioctl c0306201 20000440 returned -14 [ 1166.421918] binder_alloc: binder_alloc_mmap_handler: 9670 20001000-20002000 already mapped failed -16 [ 1166.466716] binder: BINDER_SET_CONTEXT_MGR already set 18:39:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x200) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xc21c, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xa77}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffe}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x20004804) signalfd(r1, &(0x7f0000000280)={0x1000}, 0x8) [ 1166.487124] binder: 9670:9677 ioctl 40046207 0 returned -16 18:39:11 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000100)={0x1, 0x7, 0x5, 0x8, [], [], [], 0x3ff, 0xe6, 0x7f, 0xfffffffffffffffd, "863c3afb0165b6517288006e401209c7"}) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r1, &(0x7f0000000700), 0x13b, 0x10400003) 18:39:11 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}, 0x1ff}, 0x1c) 18:39:11 executing program 2: r0 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x10004, 0x7) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)=""/105, 0x69}, {&(0x7f00000001c0)=""/148, 0x94}], 0x2, &(0x7f0000000280)=""/178, 0xb2, 0x3de}, 0x40010000) getpeername$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000000380)={{0x0, 0x2}, 0x2}, 0x10) ioctl(r2, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = memfd_create(&(0x7f00000003c0)='\x00', 0x3) fstat(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r5, 0x400454cc, r6) socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000040)={{}, {0x0, @link_local}, 0x0, {0x2, 0x0, @multicast1}}) r7 = getpid() getpgrp(r7) [ 1166.536782] binder: 9670:9701 got transaction to invalid handle [ 1166.545501] binder: 9670:9701 ioctl c0306201 20000440 returned -14 [ 1166.554422] binder: undelivered TRANSACTION_ERROR: 29201 [ 1166.562655] binder: undelivered TRANSACTION_ERROR: 29201 18:39:11 executing program 5: r0 = inotify_init1(0x800) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) vmsplice(r0, &(0x7f0000000940)=[{&(0x7f0000000280)="e6d2aadee3227c6651fa954f6da0d6636b6f8bad2327b2da6f1f50eb14604ed2fd8d6f1945444bd3782df5a288c00620f2c910714c74a61c262ab28d0e5cde3e1daee2f010441c0f40d84fd54e96110ef329df58b01647fb0e1037cbcbadccf735373598d00d2e7612bc3266813e5d222160f0f9504bace326d1592873fafd3afa3b6d408f93311b39eb244c913dfc1a8329cf2c612fd78d44fa197addfb7ff1774f204b1e48e26b56c0aeb9fe14c358d262f1d7a3251d2c75b7a5414bb0", 0xbe}, {&(0x7f00000003c0)="85d6274193111660a5ad306133a6853f13791f5247b48c760c3a14d62a7945c993d43adff837b79418818cdd0c81e61983b579472b2e56edc8a8e9805459d5820927db1ef73a21058e5e5dd99ff8e7865e29c2bbc80de4e53749671f1c0050163fa674e79fcab92e30e111b3626c2087090e8bf3e4492393d651f6d2c90c449947b02151ec224283e0cfe4d232872eccc3da54fe1d2ecb283374253588445faa0087ba2f1554f845b5560ed461460ffca7126611b8114829a41ce0bb9ae286a88e3ed49bf704c5c1be659cc93a44bb04765b86f4224d52432918b40dcd03a5ccab5f377ed2dce7eb63", 0xe9}, {&(0x7f00000004c0)="ecbfb98f3c35badcd29aeca489345c3c2a5897fc1c9437a252a9032715676560cfa40b824a2b71ba6dcf8a6b06c4fa167edda93a39c25ce2f80f57a012d56d9ca57959722a951144f33c00c7170bf15469cb6a574a66f92183", 0x59}, {&(0x7f0000000540)="02eadf7c65bb50d6c374b78fe39e1eac8ae3a4cd57b144538def68ab0fbb72fd4420060fc589a483defac9084e605046b80817cffdbd492c1bf329e05b7a4e4fd5e7ae3f76e83a10896821620aa8af1cd4e3ff8de7f06d0176a1bd767a847fc5bd82e2c60becb0cf36adabe1e2", 0x6d}, {&(0x7f00000001c0)="95a06a6e2233449d6bc058ab5c8b8a761e46a4a1c2bbd5", 0x17}, {&(0x7f0000000640)="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", 0xff}, {&(0x7f0000000340)="f4801e61c715186dad07541dffd951766c84970cc0571da680d64525453b6589f9dc5ac19eb934ef8f7e86f757663425a2be13a04e310322da36e09c", 0x3c}, {&(0x7f0000000740)="bed9537152c5b7ab517d1ff50836c1b1dd8714f68e3b1c0715a4190e16a17680dd513ecc328e4360233bb9650c3240e3f668a172b747a0e79f28d5262cde4c5285f513031bf5d20d345fafbeba617fc45cc842d6ee5679a404345e45ef011ea423192b65058753d1c3b51d172a1b2a8f3ac0b63d4455a6f69caae17c7dcc6a5dcdfe41cd0c74b9994fefbb3b2132dbb5beb8461f6a01d63bcdbeea222eb8eef469b6bbd838211ffe1550ca2305bc93e36c41f65caed6153467886adfe1ea3fb3e3abfde1d6fc1077518a246fd642d4d710b643cff34876548f55e817de85203c5c1e1ba16b", 0xe5}, {&(0x7f0000000840)="0597eed8bcc602b1e00e79a21743817f40dc3f4dbda50248161566d5a941b8a026561fd34c5c5bd6424963c9909869586e0c536ead08c00af3f1b2056ad9af15af8f0684f67d0d41910fdf685f31f58e7eff33881110438ea9c5549994e709330d841dc5eb01e4135dcea3bcda0bab6da680d9a7aad0470213919817572c31d8020ed3a5357abd2390ab23a1f557dd8be55b16f020903fb648c11409f7d1080f12339b8a0ef380c4842c900143dd7ebfb2118d8884433cfaf46e913533af36678e8f63c0cf196e399563b57f31f366f872f24122f0b2ff44430973769508cd47bd71daa138", 0xe5}, {&(0x7f00000005c0)="f0", 0x1}], 0xa, 0x2000000000000001) socket$vsock_dgram(0x28, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) add_key(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x8}, 0x0, &(0x7f0000000100)={0x1b7, 0x0, 0x0, 0x0, 0x0, 0xb69, 0x0, 0x4}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) pause() vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:39:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x740000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:11 executing program 3: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0xfcb4, 0x40000) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x8, 0x0, 0x30c, 0xfffffffffffffffa, 0x16, 0x100000000, 0xec0, 0x1f, 0x6, 0xdb, 0x7ff, 0x5}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0xffff, 0x1, 0x6, 0x1}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180)={r1}, &(0x7f00000001c0)=0x8) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r2, &(0x7f0000000700), 0x13b, 0x10400003) 18:39:11 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10aaaafeffaaaaa8]}, 0x1ff}, 0x1c) 18:39:11 executing program 2: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000240)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000080)=0x80) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={r1, @remote, @broadcast}, 0xc) syz_emit_ethernet(0x216, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c000000000004907809000000ffffffff00000000000890f8"], 0x0) 18:39:11 executing program 0: openat$pfkey(0xffffffffffffff9c, 0x0, 0x48000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) getpid() ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, 0x0) set_tid_address(0x0) ptrace(0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000005, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000200)=0x7, 0x4) getsockopt$inet_buf(r1, 0x84, 0x20, &(0x7f0000dcffe8)=""/24, &(0x7f0000000080)=0x18) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/216, 0xd8}, {&(0x7f0000000000)=""/6, 0x6}, {&(0x7f0000000240)=""/157, 0x9d}], 0x3, 0x0) 18:39:12 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000003500)=[{{&(0x7f0000000200)=@tipc=@id, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)=""/38, 0x26}, {&(0x7f0000000340)=""/180, 0xb4}, {&(0x7f00000002c0)=""/57, 0x39}], 0x3, &(0x7f0000000440)=""/235, 0xeb}, 0x80}, {{&(0x7f0000000540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000880)=[{&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f00000006c0)=""/179, 0xb3}, {&(0x7f0000000780)=""/21, 0x15}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/7, 0x7}, {&(0x7f0000000800)=""/61, 0x3d}, {&(0x7f0000000840)}], 0x7, &(0x7f0000000900)=""/233, 0xe9}, 0xe63}, {{&(0x7f0000000a00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000a80)=""/10, 0xa}, {&(0x7f0000000ac0)=""/79, 0x4f}, {&(0x7f0000000b40)=""/253, 0xfd}, {&(0x7f0000000c40)=""/74, 0x4a}, {&(0x7f0000000cc0)=""/7, 0x7}], 0x5}, 0x8000}, {{&(0x7f0000000d80)=@nfc_llcp, 0x80, &(0x7f0000001140)=[{&(0x7f0000000e00)=""/14, 0xe}, {&(0x7f0000000e40)=""/180, 0xb4}, {&(0x7f0000000f00)=""/183, 0xb7}, {&(0x7f0000000fc0)=""/74, 0x4a}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f0000001040)=""/241, 0xf1}], 0x6}, 0x3}, {{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f00000011c0)=""/255, 0xff}, {&(0x7f00000012c0)=""/44, 0x2c}, {&(0x7f0000001300)=""/84, 0x54}, {&(0x7f00000033c0)=""/51, 0x33}], 0x4, &(0x7f0000003440)=""/174, 0xae}, 0x8}], 0x5, 0x103, &(0x7f0000003640)={0x77359400}) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000037c0)={0x0, 0x55, 0x4, 0x5077, 0xfffffffffffffe01, 0x4, 0x161, 0x0, {0x0, @in6={{0xa, 0x4e22, 0x101, @mcast2, 0x401}}, 0x3, 0x3, 0x1, 0x6, 0x7fff}}, &(0x7f0000003740)=0xb0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000003780)={0x3, 0x2, 0x400, 0x1, r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r2, &(0x7f0000000700), 0x13b, 0x10400003) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000100)=r2, 0x4) read(r0, &(0x7f0000003680)=""/13, 0xd) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e24, 0x100, @mcast1, 0x800}}}, &(0x7f0000000840)=0x84) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f00000000c0)) 18:39:12 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, 0x1ff}, 0x1c) [ 1167.408469] binder: 9730:9731 got transaction to invalid handle [ 1167.442530] binder_transaction: 4 callbacks suppressed [ 1167.442548] binder: 9730:9731 transaction failed 29201/-22, size 24-8 line 2994 18:39:12 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='*\x00', r1) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x806}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) 18:39:12 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x10000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x200000003, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3ff, 0x301000) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e23, @broadcast}, {0x6, @random="924f108eaf84"}, 0x34, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, 'tunl0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x8) exit(0x0) timer_delete(0x0) [ 1167.542271] binder: 9730:9731 ioctl c0306201 20000440 returned -14 [ 1167.568488] binder_alloc: binder_alloc_mmap_handler: 9730 20001000-20002000 already mapped failed -16 [ 1167.584296] binder: BINDER_SET_CONTEXT_MGR already set 18:39:12 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}, 0x1ff}, 0x1c) [ 1167.592677] binder: 9730:9731 ioctl 40046207 0 returned -16 [ 1167.612031] binder: 9730:9757 got transaction to invalid handle 18:39:12 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x80000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r1, &(0x7f0000000700), 0x13b, 0x10400003) [ 1167.655502] binder: 9730:9757 transaction failed 29201/-22, size 24-8 line 2994 [ 1167.699502] binder: 9730:9757 ioctl c0306201 20000440 returned -14 18:39:12 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') fcntl$notify(r0, 0x402, 0x4) preadv(r0, &(0x7f0000000700), 0x100000000000002b, 0x10400006) 18:39:12 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x2, 0x0, 0x7c3ff2c8) mprotect(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x9, 0x0) write$P9_RSTATFS(r4, 0x0, 0x0) fanotify_mark(r3, 0x5, 0x400000000000003, r4, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000500)=ANY=[], 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r6 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x5, 0x20080) r7 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x2}}, 0x90) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x0, 0x100}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) ioctl$BLKGETSIZE(r7, 0x1260, &(0x7f0000000440)) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000a80)="d85e678e676090b1343eb9c52bd02479d0747d8b2ab1410220300dba233c5193d6240d4a4d3d2a693cc7b07ce79ebbae29f214bee98043109616a4205ae885b9fa8c3b79353fa61bf3da3d814e673a4e0524a241d81a07f6dd09e1d0e34871ddf209e2e0ea4539e15d", 0x69}], 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000140)='\x00') sendmsg$TIPC_NL_PEER_REMOVE(r6, 0x0, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r5, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x169) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) ioctl$VIDIOC_SUBDEV_S_EDID(r7, 0xc0285629, 0x0) bind$xdp(r7, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x2f, r4}, 0x10) 18:39:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x940000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) lseek(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40000, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0xc536}, 0x2) 18:39:12 executing program 5: inotify_init1(0x800) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) add_key(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000040), 0x198, 0x0) pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:39:12 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000]}, 0x1ff}, 0x1c) 18:39:13 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) getpgrp(0xffffffffffffffff) gettid() fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000180)) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000240)='Set\x1f\x00rp\x00\x13A\xba\xc6\xa3\x17\xf0B\xd6\xb5\x11!\x80\xba\xc6e\xf5c\xa3?N\\M\xf9\xcd\xa0\xd6\xa2x\'\x9f\xf9\xf2\xb9f\x88\xdd\xed^F\xe9a\x98\x1a\"l\x994\x82\x97i\xce') preadv(r2, &(0x7f0000000700), 0x13b, 0x10400003) 18:39:13 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}, 0x1ff}, 0x1c) 18:39:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0x9, 0x974f, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0), 0x4) dup2(r1, r2) [ 1168.445955] binder: 9789:9790 got transaction to invalid handle [ 1168.460799] binder: 9789:9790 transaction failed 29201/-22, size 24-8 line 2994 [ 1168.473737] binder: 9789:9790 ioctl c0306201 20000440 returned -14 18:39:13 executing program 0: setxattr$trusted_overlay_opaque(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000580)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x3) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000003c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[]}}, 0x0) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x2a8}}, 0xfffffffffffffffd) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x889, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$media(&(0x7f0000000640)='/dev/media#\x00', 0x3, 0x101000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000680)) connect$inet6(r2, &(0x7f0000000500)={0xa, 0xffffffffffffffff, 0x1, @remote}, 0x3b4) connect$l2tp(r0, &(0x7f0000000480)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21}, 0x1, 0x2, 0x2, 0x1}}, 0x26) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000200)='bridge_slave_0\x00') r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x1c, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8080) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x1, 0x800000000000000a}, {}, {0x0, 0x0, 0x1000000000000002}, 0x0, 0x0, 0xfffffffffffffffd}, {{@in=@multicast1, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) mkdir(&(0x7f0000000540)='./file0\x00', 0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYBLOB="3f00020400005948"], 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000100)=0x8, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f00000006c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000600)) signalfd4(r4, &(0x7f0000000800)={0x1ff}, 0x31, 0x20000000800) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x0, r6, 0xfffffffffffffffd}, 0x10) [ 1168.530306] binder_alloc: binder_alloc_mmap_handler: 9789 20001000-20002000 already mapped failed -16 [ 1168.582280] binder: BINDER_SET_CONTEXT_MGR already set [ 1168.607284] binder: 9789:9790 ioctl 40046207 0 returned -16 [ 1168.625187] binder: 9789:9811 got transaction to invalid handle 18:39:13 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000]}, 0x1ff}, 0x1c) 18:39:13 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000700), 0x13b, 0x10400003) [ 1168.647783] binder: 9789:9811 transaction failed 29201/-22, size 24-8 line 2994 [ 1168.657225] net_ratelimit: 20 callbacks suppressed [ 1168.657251] protocol 88fb is buggy, dev hsr_slave_0 [ 1168.667861] protocol 88fb is buggy, dev hsr_slave_1 [ 1168.673862] protocol 88fb is buggy, dev hsr_slave_0 [ 1168.674502] binder_release_work: 2 callbacks suppressed [ 1168.674509] binder: undelivered TRANSACTION_ERROR: 29201 [ 1168.679301] protocol 88fb is buggy, dev hsr_slave_1 [ 1168.685325] binder: 9789:9811 ioctl c0306201 20000440 returned -14 [ 1168.730961] binder: undelivered TRANSACTION_ERROR: 29201 18:39:13 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0086dd60093a0600022b00fe0000bbff0200000000000000000000000000010000000000080000000000000000000000000000"], 0x0) pause() prctl$PR_CAPBSET_READ(0x17, 0xd) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40, 0x0) 18:39:13 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15aaaafeffaaaaa8]}, 0x1ff}, 0x1c) 18:39:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xa05000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1168.896177] protocol 88fb is buggy, dev hsr_slave_0 [ 1168.901358] protocol 88fb is buggy, dev hsr_slave_1 [ 1168.918588] binder: 9830:9833 transaction failed 29201/-22, size 24-8 line 2994 [ 1168.956360] binder: 9830:9833 ioctl c0306201 20000440 returned -14 [ 1168.966559] binder_alloc: binder_alloc_mmap_handler: 9830 20001000-20002000 already mapped failed -16 [ 1168.977059] binder: BINDER_SET_CONTEXT_MGR already set [ 1168.982624] binder: 9830:9833 ioctl 40046207 0 returned -16 [ 1168.989102] binder: 9830:9835 transaction failed 29201/-22, size 24-8 line 2994 [ 1169.009554] binder: 9830:9835 ioctl c0306201 20000440 returned -14 [ 1169.016382] binder: undelivered TRANSACTION_ERROR: 29201 [ 1169.026314] binder: undelivered TRANSACTION_ERROR: 29201 18:39:13 executing program 5: inotify_init1(0x800) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) add_key(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040)=0x7, 0x4) pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:39:13 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000100)="0b36a570cafb7f51c12d4276a98cbc3ff9f54df46430bb31ef33ff3798707b1f36d8bbf8", &(0x7f0000000140)="c7e62ac395ced3f046361fef4cc72ddfbbb01126598c26e470cbf7aa17d315052e2933c5cf", 0x24, 0x25}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x2) preadv(r0, &(0x7f0000000700), 0x13b, 0x10400003) 18:39:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000180)=0x80) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28) r2 = open(0x0, 0x0, 0x0) getsockname$netlink(r2, &(0x7f0000000140), 0x0) recvmmsg(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) accept4$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14, 0x800) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@empty, @in6=@rand_addr="33f51cc87b32a50b59193e1d4d7dd817", 0x4e20, 0x7, 0x4e23, 0x20, 0xa, 0x80, 0x80, 0x2f, r3, r4}, {0xffffffffffffffff, 0x40, 0x7fff, 0x2, 0x5, 0x7, 0x9, 0x1}, {0x8, 0x8, 0xfffffffffffffffb, 0x100000000}, 0x8, 0x0, 0x2, 0x0, 0x3, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4d2}, 0x0, @in=@remote, 0x3500, 0x4, 0x3, 0x101, 0x9, 0x8000, 0x6}}, 0xe8) shutdown(r0, 0x0) 18:39:13 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600000000000000]}, 0x1ff}, 0x1c) 18:39:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xa07000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1169.187372] binder: 9839:9840 transaction failed 29201/-22, size 24-8 line 2994 [ 1169.208324] tls_set_device_offload_rx: netdev lo with no TLS offload [ 1169.211399] binder: 9839:9840 ioctl c0306201 20000440 returned -14 18:39:13 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') ioctl$FICLONE(r0, 0x40049409, r0) preadv(r0, &(0x7f0000000100), 0x0, 0x103fffff) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000000c0)) 18:39:13 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16aaaafeffaaaaa8]}, 0x1ff}, 0x1c) [ 1169.257658] binder_alloc: binder_alloc_mmap_handler: 9839 20001000-20002000 already mapped failed -16 [ 1169.286407] binder: BINDER_SET_CONTEXT_MGR already set [ 1169.291895] binder: 9839:9840 ioctl 40046207 0 returned -16 [ 1169.345580] binder: undelivered TRANSACTION_ERROR: 29201 [ 1169.351517] binder_transaction: 3 callbacks suppressed [ 1169.351526] binder: 9839:9850 got transaction to invalid handle 18:39:13 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r0, &(0x7f0000000700), 0x13b, 0x10400003) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000000c0)=0x6) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000100)={0x0, 0x9, 0x70}) preadv(r0, &(0x7f0000000100), 0x0, 0x0) 18:39:14 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1700000000000000]}, 0x1ff}, 0x1c) [ 1169.417536] binder: 9839:9850 transaction failed 29201/-22, size 24-8 line 2994 [ 1169.478337] binder: 9839:9850 ioctl c0306201 20000440 returned -14 [ 1169.520457] binder: undelivered TRANSACTION_ERROR: 29201 [ 1169.537128] protocol 88fb is buggy, dev hsr_slave_0 [ 1169.542727] protocol 88fb is buggy, dev hsr_slave_1 18:39:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000001040)='net/tcp6\x00') read$FUSE(r0, &(0x7f00000010c0), 0xfffffff2) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/195, 0xc3}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f00000002c0)='sched\x00') ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x5) sendmmsg$unix(r2, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) 18:39:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xb09b02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:14 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17aaaafeffaaaaa8]}, 0x1ff}, 0x1c) [ 1169.784707] binder: 9880:9882 got transaction to invalid handle [ 1169.812454] binder: 9880:9882 transaction failed 29201/-22, size 24-8 line 2994 [ 1169.833687] binder: 9880:9882 ioctl c0306201 20000440 returned -14 [ 1169.859980] binder_alloc: binder_alloc_mmap_handler: 9880 20001000-20002000 already mapped failed -16 [ 1169.872118] binder: BINDER_SET_CONTEXT_MGR already set [ 1169.883058] binder: 9880:9882 ioctl 40046207 0 returned -16 [ 1169.890564] binder: 9880:9884 got transaction to invalid handle [ 1169.903209] binder: 9880:9884 transaction failed 29201/-22, size 24-8 line 2994 [ 1169.912505] binder: 9880:9884 ioctl c0306201 20000440 returned -14 [ 1169.932333] binder: undelivered TRANSACTION_ERROR: 29201 [ 1169.946181] binder: undelivered TRANSACTION_ERROR: 29201 18:39:14 executing program 5: inotify_init1(0x800) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) add_key(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f00000003c0)='\brusted\x00\xafS\x1c!O.\x92[\f\a\xfa@,\xee\x8c?\xf6\x8e\xc3\xb6U\x92\x19\xf4\xae\x85\xa8\xfc\xee\x85^\x00\x00\x00\x00\xc3\xa5\xb4\x10\x81\xe4\x88\x98\xa6\xc2\\JD\xd0\xe2\xc0Z}\x96=\x836\xa0f\x11\x81-\x17\xb2\x16$\xed)%\t?4#\xfd\x9ewu\x15<-\xf3\x00\x02\x88\xe3\xd6\x83\xa1\x14gT\xed\x8c\xaaU7\xd7\x86&\xc76\x00\xfa\'\xd22f\xf0\x1e\xfcs\x83\xc8\x00\x00\xcb\xc6,U\xacE\xc9Ln\xa3\xd4]S\t\xb8\xa3\x83\x913\xf8\t{\x181\x06\x1b*\\O\x9c\xad\xbc\x87VJo\x92\n\xcd\x7f\x12O=vc\xbe\x12\xe5\x11\xaa\x85\xc3\x7f*\xfc\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0)="68c491a5b1d7067561706d875a37767888bec5c2f7569686d52bc932e37a3b6e69a0071866e5ffff862adf7844683068d9f5e7c6ea2b0e4365b9c816e7a2ecb140f56c822489288827527334467d1c1de947abfa9b75cf77553039b700c79ec022236174361ee933c1a837e75ac8685a4506ba972facf715ebb21e61d048ea040898c33745808bac533b9bedd552c2eebe92530785c529a51592f8e1340eb4f058e8c777ad8f096c3d1a413905fa46b8cb3bfe6962b63224847182242c213ce12ce28a5b9eee7d37d8fdefe53d3775ef9560047b0000000000000000009c2606c7724e07b07c00000000000000000000000000", 0xf3, 0x0) pselect6(0x3aa, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x4e20, 0x80000001, @local, 0x5}}}, 0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000640)={0x0, @in6={{0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}}, 0x7, 0x100000000}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000340)={r6, 0x7}, &(0x7f00000005c0)=0x8) 18:39:14 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x40041, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r0, &(0x7f0000000700), 0x13b, 0x10400003) 18:39:14 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000]}, 0x1ff}, 0x1c) 18:39:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x1) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xd09d02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:14 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000800)={0x0, 0xfffffecd, &(0x7f00000007c0)={&(0x7f0000000740)={0x5, 0x1, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5963fa4133fe8b2c"}}, 0x48}}, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x80) eventfd2(0x8, 0x800) [ 1170.201615] binder: 9895:9896 got transaction to invalid handle [ 1170.218423] binder: 9895:9896 ioctl c0306201 20000440 returned -14 [ 1170.235242] binder_alloc: binder_alloc_mmap_handler: 9895 20001000-20002000 already mapped failed -16 18:39:14 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004000), 0x1}, 0xfffffffffffffffe) [ 1170.263516] binder: BINDER_SET_CONTEXT_MGR already set 18:39:14 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000080)=0xc) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000100)) r2 = syz_open_procfs(r0, &(0x7f0000000000)='net/arp\x00') preadv(r2, &(0x7f0000000700), 0x0, 0x10400003) [ 1170.286729] binder: 9895:9896 ioctl 40046207 0 returned -16 [ 1170.301346] binder: 9895:9905 got transaction to invalid handle 18:39:14 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18aaaafeffaaaaa8]}, 0x1ff}, 0x1c) [ 1170.327323] binder: undelivered TRANSACTION_ERROR: 29201 [ 1170.336185] protocol 88fb is buggy, dev hsr_slave_0 [ 1170.341345] protocol 88fb is buggy, dev hsr_slave_1 [ 1170.353106] binder: 9895:9905 ioctl c0306201 20000440 returned -14 [ 1170.399457] binder: undelivered TRANSACTION_ERROR: 29201 18:39:15 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000001c0)=0x8200000000, 0xfffffe0e) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x2000000) munlockall() add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x15a) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040), &(0x7f00000002c0)=0x18) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000140)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000480)={{0x8, 0x0, 0x8, 0x2, 'syz0\x00', 0x100000001}, 0x4, 0xf, 0x9, r3, 0x6, 0x4, 'syz1\x00', &(0x7f0000000180)=['/vboxnet1\x00', 'syz0\x00', 'vmnet0[#vboxnet1\x00', '/dev/rfkill\x00', 'keyring\x00', 'security\x00'], 0x3d, [], [0x3, 0x14df, 0xffffffffffff90d3, 0x7ff]}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f0000000240)=""/16, 0x10}, &(0x7f0000000300), 0x3a}, 0x20) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rfkill\x00', 0x28040, 0x0) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0x4e, r0, 0x0, 0x0, 0x8, 0x0, 0x0, r2}]) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 'syz1\x00', 'syx1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00W1\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x17\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x11c) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100), 0xa) 18:39:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:15 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1900000000000000]}, 0x1ff}, 0x1c) [ 1170.584053] binder: 9927:9928 got transaction to invalid handle [ 1170.619836] binder: 9927:9928 ioctl c0306201 20000440 returned -14 [ 1170.647181] binder_alloc: binder_alloc_mmap_handler: 9927 20001000-20002000 already mapped failed -16 [ 1170.675715] binder: 9927:9936 got transaction to invalid handle [ 1170.693360] binder: BINDER_SET_CONTEXT_MGR already set [ 1170.703499] binder: 9927:9928 ioctl 40046207 0 returned -16 [ 1170.710314] binder: 9927:9936 ioctl c0306201 20000440 returned -14 18:39:15 executing program 5: r0 = accept4$unix(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='bridge_slave_1\x00', 0x10) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80000) 18:39:15 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f00000005c0)={0x7, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}]}) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) syz_open_procfs(r1, &(0x7f0000000100)='smaps\x00') ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000640)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x5, @broadcast}, {0x2, 0x4e24, @loopback}, 0x280, 0x0, 0x0, 0x0, 0x8001, &(0x7f0000000600)='veth0\x00', 0xaa, 0x1000, 0x80}) 18:39:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x1) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:15 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19aaaafeffaaaaa8]}, 0x1ff}, 0x1c) 18:39:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x97, 0x101000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x58, 0x4f, &(0x7f0000000100)="eadf126425196d207fc9f97570b483ec78ea5bb23bc31b832e4507c91e8eff22f61dc52f1a29a85f2fbf22790f2197ad9e442856b56ab8b9b161902ea9dd2dd983ccf1d9f99a1ff7b6b56ba5e1d34c1e49b1f66aa02db266", &(0x7f0000000180)=""/79, 0x7}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm], 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6) write$binfmt_elf32(r0, 0x0, 0x0) fcntl$getown(r0, 0x9) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000240)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000002c0)={r2, 0x800}, 0x8) 18:39:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:15 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00000000000000]}, 0x1ff}, 0x1c) [ 1171.234257] binder: 9948:9949 got transaction to invalid handle 18:39:15 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x5, 0xa0000) fsetxattr$security_ima(r0, &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@md5={0x1, "29c76560242bfe99eaf40ef0dc4a2b04"}, 0x11, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r1, &(0x7f0000000700), 0x13b, 0x10400003) [ 1171.283293] binder: 9948:9949 ioctl c0306201 20000440 returned -14 [ 1171.352592] binder_alloc: binder_alloc_mmap_handler: 9948 20001000-20002000 already mapped failed -16 [ 1171.432629] binder: BINDER_SET_CONTEXT_MGR already set 18:39:16 executing program 2: ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x6) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000000)={0xfffffffffffffff7, 0x7ff, 0x9, 0x6}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0)) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x7fffffff, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:39:16 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1aaaaafeffaaaaa8]}, 0x1ff}, 0x1c) 18:39:16 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xabf8, 0x400) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) r1 = gettid() fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x2, 0x1, 0x5, 0x8f, r1}) r2 = socket$inet6(0xa, 0x80003, 0xff) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x40}, {r3, 0x2200}, {r2, 0x8000}, {r0, 0x80}, {r0, 0x4000}, {r3, 0x6010}], 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x7, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x3140000000, 0x1, 0x100000001, 0x4, 0x10000}, 0xc) 18:39:16 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) r1 = accept$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0xfffffde4) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000140)={r2, 0x0, 0x7fff, 0x2, 0x9}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r3, &(0x7f0000000700), 0x13b, 0x10400003) [ 1171.457608] binder: 9948:9949 ioctl 40046207 0 returned -16 [ 1171.478302] binder: 9948:9980 got transaction to invalid handle [ 1171.484435] binder: 9948:9980 ioctl c0306201 20000440 returned -14 18:39:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x1) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:16 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') fcntl$dupfd(r0, 0x0, r0) preadv(r0, &(0x7f0000000700), 0x13b, 0x10400003) 18:39:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x29bb000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:16 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00000000000000]}, 0x1ff}, 0x1c) 18:39:16 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5, 0x80000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x8, 0x80000001}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)={r1, 0x1e, "dfc634ca7fc8f6f6d193073f39d38f122900e923459c8ca0aa47e31910fd"}, &(0x7f0000000100)=0x26) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000deff00000000000aecffffff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0) 18:39:16 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) eventfd(0x80000001) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000200)=0x44) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x200000002, 0x0) setsockopt$inet_int(r1, 0x0, 0x3f, &(0x7f0000000080)=0xffffffffffffffff, 0x4) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00000000c0)={0x6, {{0xa, 0x4e23, 0x200, @empty, 0x2}}, {{0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0xc}, 0x8}}}, 0x108) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000300)=""/231) [ 1171.907668] binder: 10009:10011 got transaction to invalid handle [ 1171.929838] Unknown ioctl 19264 [ 1171.964840] Unknown ioctl 19264 18:39:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002400190000000000720200000000000000001ee85902d394acfa191e7f42b73dda8cf9ab85afbef22a957db6d08dc144aeeb2185b8167c8a14d190db3158fd7b48527546a5d58f86505b47321e49a63dd383a2b0da30d27ba65de8d049000000d9", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00\x00'], 0x2c}}, 0x0) 18:39:16 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1baaaafeffaaaaa8]}, 0x1ff}, 0x1c) 18:39:16 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f00000000c0)={0x4a, 0x209d8000}) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x100000000) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x40000, 0x0) preadv(r1, &(0x7f0000000700), 0x13b, 0x10400003) [ 1171.989741] binder: 10009:10011 ioctl c0306201 20000440 returned -14 18:39:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000680)="0adc1f123c123f3188b070") r1 = dup(0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, 0x1e}, 0x0) r3 = semget(0x0, 0x5, 0x100) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000140)="863ff13f9ccf43e2e325c774bc52ad55c714142a26c0e8f3bde92147c7b689efb81ac67ff924d18e0f9fdd97c5b4cd4a351b2d7b473a7e42ca186811e2e3599a180884ce10199c34efdff5", 0x4b}, {&(0x7f00000001c0)="e5bc2548581c98827035c650970c6cbc729ab249a157d176f146fbe6b76e25614b5f719f4c0944c3126f6b5acb1a0ebf94a9714d0287ac92961c062d8214abf8e8b92688c261956992421a8c9ea23a7c3b6189", 0x53}, {&(0x7f0000000240)="a324201dc027fd4581a88dd0a1f614679b5c10173e86a631824ab1e5106464f5426e1868ab8fcd84dabab4abd98d5f", 0x2f}, {&(0x7f0000000280)="87fb22c20b0a4fd403b6a3fca43c400b4e23da80dd58973c6d1139d491f4f9cd05004ce5d172883a92ffdd8946da784d1f61e7ebd9d90bc633b697bcf71922144fa2276d0df8e1c6fbb1ce221ebb2dd9c00ef24732ae169175bd1b42d90de1a6d044ecc935f8f0c93c839fdbf82a836ca5a142e4d5ca4779b400461c411c7553e0b6d2a4876d4a2f6e23778726b20d28b1f0e9ff76e79dfef67a27ef7d5189", 0x9f}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f0000000340)="a7999e97631ce79c089680534bf0c5e804e05345df9fc3e959179308e5e36dc3a8cc829377ca586faaa5e173e34f2f6b5eaff5b30f50d040c05f4ad7d7d0861f537f378e19792e9f", 0x48}, {&(0x7f00000003c0)="8666462896f6b6da941af0ce0f827ebbe90ace45f536d82b7072fa15bf55de2594e237b113771a985e297c8eea", 0x2d}], 0x7) semtimedop(r3, &(0x7f0000000040)=[{0xc3e27d67b405ef56, 0xfffffffffffffffb, 0x1800}, {0x0, 0x0, 0x800}, {0x2, 0x2, 0x1000}, {0x0, 0x9, 0x1800}, {0x0, 0x7ff, 0x1000}], 0x5, &(0x7f0000000100)={0x0, 0x1c9c380}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffffffffb9, &(0x7f0000000080)) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000000)=0x400) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) [ 1172.063352] binder_alloc: binder_alloc_mmap_handler: 10009 20001000-20002000 already mapped failed -16 [ 1172.133546] binder: BINDER_SET_CONTEXT_MGR already set 18:39:16 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c00000000000000]}, 0x1ff}, 0x1c) 18:39:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x1) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1172.186278] binder: 10009:10011 ioctl 40046207 0 returned -16 18:39:16 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x8, 0x51b981) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000100)={0x1c0, 0x1f, 0x7}) preadv(r1, &(0x7f0000000700), 0x13b, 0x10400003) [ 1172.244261] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 18:39:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x29dd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000c80)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0)={0x0, 0x7fffffff}, &(0x7f0000000640)=0xffffffffffffffeb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000c40), 0xffffffffffffffff) prctl$PR_GET_SECCOMP(0x15) getsockname$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000580)) execve(&(0x7f0000000d40)='./file0\x00', 0x0, &(0x7f0000000d80)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000540)=0x8000000000000, 0x4) stat(&(0x7f0000000800)='./file0\x00', &(0x7f00000005c0)) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000140)={0x0, 0x5, 0x7, &(0x7f0000000000)=0x8000}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x2, 0x0) get_mempolicy(&(0x7f00000003c0), &(0x7f0000000400), 0x3f16, &(0x7f0000fff000/0x1000)=nil, 0x4) getgroups(0x0, 0x0) getegid() socketpair$unix(0x1, 0x10000003, 0x0, &(0x7f0000000440)) ioctl$sock_proto_private(r0, 0x89e2, &(0x7f0000000340)="94212ed47190d32d03faa3d382058205c8b76845642dcf03508cb005d938eead79f8be37a649ad72f88b") readlink(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000840)=""/171, 0xfffffffffffffd80) ioctl$RTC_WIE_OFF(r1, 0x7010) r2 = request_key(&(0x7f0000000040)='.dead\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r2) 18:39:17 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ca039feffb3f33c]}, 0x1ff}, 0x1c) [ 1172.415532] binder: 10046:10049 ioctl c0306201 20000440 returned -14 [ 1172.477851] binder_alloc: binder_alloc_mmap_handler: 10046 20001000-20002000 already mapped failed -16 18:39:17 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='V\x17\xf3N[{qU\x97|d\x9b]j\xd5\x93\xe1\xd0\xdb\a*\xae\xc1\x88d \xfePu\x83\x10G~3\xa2\xe6\x825C\x8a\xb5r?\xed\x83\xcf.\xb8$\x0fI\xd1DU\xdah\xfc\x1c\xbc<2\xec\xe0b\x99\xf1\xc4&\x93}K\xd3\xc5\xdd\xb2zlw0\xd6\x06Ro\x17w\x907\xf1\xb1\xae\xdf\x82\xbc]\xb7\x01B0\x90\xf6\xbb\x1c\x89\x85\xb7\xe0\x9c\x00G\xae\xe8)&\xbb\xdf\x9a-\xdc\xa9p\xd2\x91\xe4\x04\x97F\x9d\xad\xbfo\xea\\FH\x05\xb1\x82\x05\x00\x81\xa17\x9d*c:[\xd8\x83\xce4}\xc1\x97\x01\xcd\r\xe7\xcc\xed\xbe+%\xc3\xbd\x96\xf8^\xb0\'\xd81\xd8<\xebRQ\x9a\xe50\x93\x8d\xa9\xff\xd8U\xad\xb24\"\b\xd9=\x9dg?\xe9\xed\xcf\a\x0e\"\xc2|\xe1/Q\xce5\xde\xef\x89\x98\xf3') preadv(r0, &(0x7f0000000700), 0x13b, 0x10400003) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x5, 0x2, 0x1000}, 0x4) [ 1172.551714] binder: BINDER_SET_CONTEXT_MGR already set 18:39:17 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000080), 0x4) r2 = epoll_create(0x40000000002) r3 = dup(r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000140)) [ 1172.616315] binder: 10046:10049 ioctl 40046207 0 returned -16 [ 1172.626369] binder_transaction: 8 callbacks suppressed [ 1172.626386] binder: 10046:10065 transaction failed 29201/-22, size 24-8 line 2994 18:39:17 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x20040) write$FUSE_LSEEK(r0, &(0x7f0000000100)={0x18, 0xffffffffffffffda, 0x7, {0x200}}, 0x18) clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() pipe2(&(0x7f0000000000), 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1047, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0x10, r1) tkill(r1, 0x23) 18:39:17 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1caaaafeffaaaaa8]}, 0x1ff}, 0x1c) [ 1172.692995] binder: 10046:10065 ioctl c0306201 20000440 returned -14 18:39:17 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100)) getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f00000001c0)='vboxnet1proc\x00'}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000180)='mounts\x00') preadv(r1, &(0x7f0000000700), 0x13b, 0x10400003) 18:39:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:17 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d00000000000000]}, 0x1ff}, 0x1c) 18:39:17 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x204400, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000140)) finit_module(r0, &(0x7f0000000180)='veth1_to_bond\x00', 0x3) r1 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0xffffffbd, &(0x7f0000000100)={&(0x7f0000000040)=@setlink={0x4c, 0x13, 0x501, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x18, 0x16, [{0x14, 0x1, [@IFLA_VF_RATE={0x8}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x418}}, 0x0) [ 1172.894749] ptrace attach of ""[10084] was attempted by "/root/syz-executor.2"[10090] [ 1172.946519] binder: 10094:10095 transaction failed 29201/-22, size 24-8 line 2994 18:39:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$int_out(r0, 0x2, &(0x7f00000000c0)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(r2, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) fstat(r0, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/152) dup3(r1, r0, 0x0) 18:39:17 executing program 2: socketpair$unix(0x1, 0x200000000000805, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x00\x01', &(0x7f00000001c0)=ANY=[@ANYBLOB="0a000092ae1c7a30105ed6fa5ca40000000000000f00d2cf88fc6c5ae0e957070000000000000001000000000052429b000000000000000000000000009c0fcd0c3a7d6a451e04a8273606d75d705a073e912527cc67b9968db4c0f527fc"]}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x28000, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000280)={0x3, 0xc773, 0x2}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000000c0)={'bond_slave_0\x00', {0x2, 0x4e22, @remote}}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x20000, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000140)={'security\x00\x00\xff\xff\x00'}, &(0x7f0000000080)=0x54) 18:39:17 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r0, &(0x7f0000000700), 0x13b, 0x10400003) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) r5 = getuid() fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = geteuid() stat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000540)=0xe8) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000600)=[0xee01, 0xee01, 0xee01, 0x0]) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000900)) getresgid(&(0x7f0000000700)=0x0, &(0x7f0000000740), &(0x7f0000000780)) fstat(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000840)={{}, {0x1, 0x4}, [{0x2, 0x1, r1}, {0x2, 0x1, r2}, {0x2, 0x7, r3}, {0x2, 0x7, r4}, {0x2, 0x2, r5}, {0x2, 0x3, r6}, {0x2, 0x7, r7}, {0x2, 0x1, r8}, {0x2, 0x4, r9}], {0x4, 0x4}, [{0x8, 0x5, r10}, {0x8, 0x2, r11}, {0x8, 0x1, r12}, {0x8, 0x4, r13}, {0x8, 0x2, r14}], {0x10, 0x4}}, 0x94, 0x0) [ 1172.987556] binder: 10094:10095 ioctl c0306201 20000440 returned -14 18:39:17 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1daaaafeffaaaaa8]}, 0x1ff}, 0x1c) [ 1173.047342] binder_alloc: binder_alloc_mmap_handler: 10094 20001000-20002000 already mapped failed -16 18:39:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1173.126327] binder: BINDER_SET_CONTEXT_MGR already set [ 1173.142061] binder: 10094:10095 ioctl 40046207 0 returned -16 [ 1173.164549] binder: 10094:10123 transaction failed 29201/-22, size 24-8 line 2994 [ 1173.173240] binder: 10094:10123 ioctl c0306201 20000440 returned -14 18:39:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:17 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00000000000000]}, 0x1ff}, 0x1c) [ 1173.227967] input: syz1 as /devices/virtual/input/input39 18:39:17 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) getpgid(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)='@!.&proc(+\x00'}, 0x30) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x600000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000180)={{0xc8a, 0x2}, {0x8, 0xffff}, 0xff, 0x1, 0x4607}) r2 = syz_open_procfs(r0, &(0x7f0000000300)='\t\x10_%\x0f\x80ne') preadv(r2, &(0x7f0000000700), 0x13b, 0x10400003) 18:39:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1173.315004] binder: 10130:10132 transaction failed 29201/-22, size 24-8 line 2994 [ 1173.382425] binder: 10130:10132 ioctl c0306201 20000440 returned -14 18:39:17 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1eaaaafeffaaaaa8]}, 0x1ff}, 0x1c) 18:39:18 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') r1 = getgid() fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f00000003c0)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xee00, 0xee01, 0xffffffffffffffff, 0xee01]) setgroups(0x3, &(0x7f0000000400)=[r1, r2, r3]) preadv(r0, &(0x7f0000000700), 0x13b, 0x10400003) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c01b58b", @ANYRES16=r4, @ANYBLOB="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"], 0x11c}}, 0x4000) 18:39:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1173.429853] binder_alloc: binder_alloc_mmap_handler: 10130 20001000-20002000 already mapped failed -16 [ 1173.496938] binder: BINDER_SET_CONTEXT_MGR already set [ 1173.527415] binder: 10130:10132 ioctl 40046207 0 returned -16 [ 1173.563914] binder: 10130:10152 transaction failed 29201/-22, size 24-8 line 2994 [ 1173.614341] input: syz1 as /devices/virtual/input/input40 [ 1173.626586] binder: 10130:10152 ioctl c0306201 20000440 returned -14 18:39:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:18 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}, 0x1ff}, 0x1c) 18:39:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:18 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@caif=@dbg, &(0x7f0000000340)=0x80, 0x80800) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000003c0)={'bcsh0\x00', &(0x7f00000004c0)=@ethtool_rx_ntuple={0x35, {0xb, @esp_ip4_spec={@broadcast, @broadcast, 0x0, 0x9}, @hdata="dcd6564c6519fe651cdf2c5b9e3ea8227ba4efb1bca036e452b54bc0895a5d55a1fd0de3fcb78804014ffa9d3d8848864b706e12ec5c6b0845e9aa2233e1bbc032d2a0a4e8cec7eb", 0x9, 0x8d, 0x1, 0x8, 0xffffffffffffffff}}}) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000001c0)={r1, r1, 0xe6b, 0xef, &(0x7f00000000c0)="6ffb860f786c33e0902104ff199cd5b7370f4abc91f462fc802869d7f3d2ab7c3b1a9d482f58d1bd2024f6ab2b4dda63aac63bd1e1c3170894e931ecdfdea9f65bd161f26dd7c01d410d5196965b3fd0c5d86b7296717290c0009a0e32308be5baeec9e5b7fcf3ebc85e269df139f5552a1061caa8d9b045d56f1c8f69d2d613a2bc5b27f2178f580de349608a7eca13ff88a2b7070a4609886e9f62df871c4920a9c84b681630f77fa6f0b216c43d9ecb53fd56ea468ca534c66db22d3c5d1b6012960d954a23fc9cb7f4d3052b1f74a357701c4de678aac742c394a1e4779a9e45b9b68cc916e85f96e36668b8b2", 0xc21, 0x7ff, 0x3f, 0x5, 0x6, 0x2, 0x9, 'syz0\x00'}) preadv(r1, &(0x7f0000000700), 0x0, 0x4) [ 1173.696117] net_ratelimit: 20 callbacks suppressed [ 1173.696125] protocol 88fb is buggy, dev hsr_slave_0 [ 1173.706303] protocol 88fb is buggy, dev hsr_slave_1 18:39:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:18 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x10800, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000180)=0x8) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xfffffffffffffff7, 0x20100) write$UHID_INPUT(r1, &(0x7f0000000200)={0x8, "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", 0x1000}, 0x1006) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$FICLONE(r2, 0x40049409, r2) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000001240)=""/32) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000040)=ANY=[@ANYBLOB="cb000000000000000000000000640782b6c79b30a70000000000000000000000f139000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000003b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1a1, 0x0) [ 1173.794068] binder: 10162:10165 transaction failed 29201/-22, size 24-8 line 2994 18:39:18 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r0, &(0x7f0000000700), 0x13b, 0x10400003) getpeername$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x1c) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000000c0)={0x80000, 0x0, [0x8000008, 0x0, 0xff, 0x5, 0x101, 0x8, 0xffffffffffeffffe, 0x3]}) 18:39:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:18 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1faaaafeffaaaaa8]}, 0x1ff}, 0x1c) [ 1173.844805] binder: 10162:10165 ioctl c0306201 20000440 returned -14 [ 1173.878534] binder_alloc: binder_alloc_mmap_handler: 10162 20001000-20002000 already mapped failed -16 [ 1173.923684] binder: BINDER_SET_CONTEXT_MGR already set 18:39:18 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fstatfs(r0, &(0x7f0000000340)=""/4096) ioctl$TIOCMGET(r0, 0x5415, &(0x7f00000000c0)) r1 = socket$inet(0x2, 0x801, 0x100000000) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000280)={'filter\x00', 0x0, 0x2, 0x7f, [], 0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000200)=""/127}, &(0x7f0000000300)=0x78) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001340)=0x0) ptrace$getsig(0x4202, r2, 0x3, &(0x7f0000001440)) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000013c0)={{0x2, 0x4e21, @rand_addr=0x7}, {0x307, @dev={[], 0x13}}, 0x8, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth1_to_team\x00'}) r3 = fcntl$getown(r0, 0x9) fcntl$getown(r1, 0x9) r4 = syz_open_procfs(r3, &(0x7f00000001c0)='net/arp\x00') ioctl$CAPI_SET_FLAGS(r4, 0x80044324, &(0x7f0000000000)) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$TIOCCBRK(r4, 0x5428) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f0000001500)) ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f00000014c0)=0x1) preadv(r4, &(0x7f0000000700), 0x13b, 0x10400003) 18:39:18 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}, 0x1ff}, 0x1c) 18:39:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1174.024056] binder: 10162:10165 ioctl 40046207 0 returned -16 [ 1174.070197] binder: 10162:10189 transaction failed 29201/-22, size 24-8 line 2994 [ 1174.072130] binder_release_work: 11 callbacks suppressed [ 1174.072168] binder: undelivered TRANSACTION_ERROR: 29201 [ 1174.107323] binder: 10162:10189 ioctl c0306201 20000440 returned -14 18:39:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffdbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x1f, 0x2) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f00000030c0)) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000410}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)={0x70, r2, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x5, 0x487c, 0x183, 0x1]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x0, 0x4, 0x2]}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x800}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x9c5}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x40) lsetxattr$security_selinux(0x0, &(0x7f0000004ec0)='security.selinux\x00', 0x0, 0x0, 0x2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000003080)={'gretap0\x00', {0x2, 0x4e22, @multicast1}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000004f00)='bbr\x00', 0x234) recvmmsg(r0, &(0x7f0000004c00)=[{{&(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000140)=[{0x0}, {&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f0000000500)=""/164, 0xa4}, {&(0x7f00000008c0)=""/130, 0x82}], 0x4}, 0x7fff}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f00000035c0)=""/183, 0xb7}, {0x0}], 0x2}, 0x8000}, {{0x0, 0x0, 0x0}}], 0x4, 0x40002041, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000004d00)={0x0, @in6={{0xa, 0x4e20, 0x3, @remote, 0xfffffffffffff46c}}, 0xfa, 0x80}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000004e40)={r3, 0x0, 0x0}, &(0x7f0000004e80)=0x10) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) r5 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000003100)={r4, @in={{0x2, 0x4e21, @empty}}, 0x10000}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000007c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000200c400f7badc0b9f90139b546cb41b75d291d65252caa0fa8734164516b98779ac3d1614f7203877a44fde93103bc74677d5aac1c2fd1c6ebe358931346f3dcd8a277794c478fedf380c6b19c5110ee95ee7ccac613897689a4bba8c92d5ebedbe77c6c3607a2b58e038c9f95ec00b16fd341bac4a66706ee06175a53550d12c96de049205f1357c19129c491c9d08a65ea87d1639d6861ffb3c8d9a3de9bd8d778009"], 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000003300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r6, 0x400454cc, 0x0) 18:39:18 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xa) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) sendmsg$kcm(r2, &(0x7f00000004c0)={&(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e23}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)="640d5ff2666ab00c61790f7ae26f9654a54a5c2d18768685e12de37cad5f044a7f48489d87ff5ee082d0be8631979d0b7fb1ce8cd552d688a114795f8769feb1d816979036f772cbbfa138b1b79f0251c3", 0x51}, {&(0x7f0000000240)="f6feb0aec88187ec830a1d7bca15183fe4cf81359dce1454a89a878e9ee828cfe9f602c6d6979d1d775e14fcad3470b1b5e517b66f67d7a79160069a19be56369f5fa23561ebfde93d09c10f79b7c4da46638e32bdfdb7de12849d8e40e24a4f5dda4284cf187bf6266331f251fde9970e76ee4f8c70b16472b4f602327e92cf84d9730615dc01b761b8c8448ade9fa29ee8a92e8e835b41c1995392b681dd5b6f975d18d5714ddc6dae7b7de7ac25de2c672fb06a08f2db4083a7320db03f2dc0acfb1d48f5d492ffe19fc96e40c9ca5dcf", 0xd2}, {&(0x7f0000000340)="057490a30b4a39abd2b69307bf5e7d3f0626dcef519d4dd19421bdcc64183035a5bd5e0c81a2f9dd3f4aa0ac7469d93e4b2973b56a8515ddb632a18e881ba985e011deda80ee02adacb66a10e96c7acdd30342eb99f477de73c935d6dc4f9b5d6cc70644c44b8e6a50e2c18a1df0e2076757717d2370549a11aca2cab33ce8c44f3472b48cba01b07502ad32b064620b51e30daff0f4b2f03c9b34c592ac5991094211a571c1575e8fbea640e45d55be060febb828fd0227ac4fff9109fc31495642643f053a761c69c801ca2188ab9a0eff5300df59d21ca04e8046ed911c8a691a870e96315088c2f3db3a", 0xec}, {&(0x7f0000000440)="96f27c3604ced4d739455ab9e9358312a1683b71592d0e6959c1022b122a731fbf05ba0bb18289e6d69c4fc8953cc01facb8dbc77b87065b77af51b1c580503e336ff98de797d306063d31b00b5d81cb524dc60ce24bbf2a6039e34b1715", 0x5e}], 0x4, &(0x7f00000021c0)=ANY=[@ANYBLOB="500000000000000000000000008000006a6ecaef4b8b5a34da89a47429ad009f87ac64f1afd6cc4e6f427523a501e018b8fce8af843f190e107f753494dae3a3a07a61046a4c3cb77cd2078517000000480000000000000006010000f30000007e939b190b852bc85883f12e26ba70ba6d6e8ccf40748c579acdbd95ada04bbfc317c07de2ee5f333e5d1c4740806d0115b32de0430f6400b0000000000000001401000001000080b466f0ac5b88716135055f40eb4088834e715a02522890d6cf4857efebfad00756cc14de925d3c98eea2209d2921729948f863a114bc5802a21a477ca405143f68b3f7bf5ff2559591fa944876f605ee079c8e7e19f531bb46264b39108fcae1b7456bf15c077ac9c027e0c5ed82152d6a2903411a36a7fa024af900ca88197640018951fdc8ec09f67268498577d675094b6acc039fdc9a966d00000000000010100000000000001d0100000700000027faaeb2ce79959552eac77b712cbc23e7e57b2a17386bd4b531ce32c6d1ea2eb3d5346391249daf5d06644fe1627b63b5f0b8356a7ebb48d7bf6e90cb917c3aa23415072bc4bc135d286d20aca29b1b02ad51baf40c2803c529308e76c0c9bc5f978b5f9d02cb505fd6509bb63e07e2036a771704b1ac98e6120d189ae6af7e4eddde331018e9fcf7b3a5cca5e78e8e85ef31075fa263988e0211fa2ec29c67f310a26d475bfed831e0b6343dacf10ee0feab82a3dfa8468eb1fb78c8be6354c7aec25d4f07e567032611fe5527e0191b32fb9839f3fbec6eef6d55166c8e556600bd56aa82546fef1290ca1e8ebee898c2d139e3d18cd34e255afc2f4c53dd100990fa1c70a3194290949faeea0eed2874c1ba951a38bff58cce1293863ab8f950423b69f603da20ac7c0c9c349cd97a3f30693e1ac911d80a0603d68dc76c138cbc06a5adf4deedd9a08749c77a2bbee14d2318aa39f0a7370c10c12704a0854fe90837c614ad1a8ddf180b2aa6cbed803c1708d4815eeb78e1d6c67e968bd332913287bf1f1b25b65381a4f2817c3ce48b7e7fcfdb00bd7595932bd926ecabcd2fb27561b716c66f46205e8716e20f45feb545e5c9988c98d1628fc61e5243e55eec6de3672b95000bfecaf14f39231005b1484ad8ecbdd03bf090b2637908be5299c25b66943467530e69d2c490f8814739fbb09793d8a20a4f2911e3547993561ab0d9d77adbeab3d816247d0f243654ca0bac3a84d088fc85fcb564d8ad505586a7183066291e8f102dc92e35ba44494306f20f791a2136ce0a6521a5d0eca87aeeb6f13e1a2375d207766a610380c194d6b7e94741dd7c2d156b9ea1266c941c9dad408cdb6fb37e3c7d4beb8601790041a29bca00e8c0a5eaf5595aa122e3cd3ca583df6450c8c23841e14c7b8b67fcb14307f6da94461e13212c23b151ecb6433be338292a954235c7f42999fc8824be9d647d40f7febde12844757a9ba49bb71035286fdd3387a097a921bdbbfd639e197c4e3ea219a5e47a6f9d16014315c93147cf9f629ce1d81f41e96839c5b23b25f3f597456181d1053ab8a19bef8f94f988c9748ed647fc1b1fc3532515f9f95820652bd6627c97797845bde693a4d2f1133eaae28751adddcf800aa9e88f7aa3049f559773a67cbb1f9535779af4c65a61fe8babec555cc84eba68a1258c4b7b8940647520a51f5b547a6b937ade0479d02bd8d57d2b172459c716e7272a37d66d3518a98146047635443bc93de3f7447dbb765cf45dda86cfd39ad28b21e805b65be96b549e50ffaef4d937920caaa522f5d07a1b90e68d4ceb05ff7504617c2c8b70363a57693a687a788305bfebd34b7e0b1f1009e787f431f5b6b2ac70396e21a150b3f90637227c544fee8522bd34a1049123be9765f7ab82a180c2e4a532044435f6c8bafe0becb798ec3b13f33cba65de66c009e7e849fda05034745e92156145f1650e1b6d63a9b11182dd6083b56636d52d6ee6b39c56c298dceeaaddd10ee6d218041056d73e5c42aaeae0383807a8a5dc78414c17177db195a45eee39a095fb1666401dc84dbebcd66623f5642a174d36c99d6a78b1bf5d868b3efe6a92d45b79e17cfc07176c6ece42673c9754a8baae1033abf089840c43d506bd98ddac2affc2fb2c9fbf424c7ad7da44d17f5f3e5b14ba61b1759acc69c493ec63d24da731fc842f7357991b12b2a10907fa24b477d4b425ee7cf2844662879d2b67cbc4faff40e29554d984ee52f318d3716913ec3be8849e08bc4b9fc82ab40e354bb037dfc488a8fd6e58c3fec8de5c2eda772c8faf28a4e93fbcabd977707cb1639b48e94d5d62e5a23b0845aa8702f294cd92fdb73c2a1fa615af9c59afc1587fdcb9a7dd83ca9d99d8620e36797d33aac7ab3745fabf11040f7ed0ded5cf7e682a76e2b3f9edb3060d468f2d2762c877ddf831860370ed62b8b52e8689213b8d94e4b042e3275e45642f779f7ca9843a260856b0fc06b000fbe8724607922ec84e366a30c8e1682378d29d37044843ca0286c810b59541e5ce97f5611aa8469f045db66835cc45f078d1e295bec4384f78bf55554b465a7ec452e81fd722b17c6bb9ee0af960b7b9d57b8adf4214875c299f81ce147c68dffb6df3084f023ec60863ece9dc5dd69bc9f544ea1f848951dc96c42caf8da87272b9402a544f926932e066f82aa028effea77e25f67b9cc16d82d0dd7f5219974fac41b3cb2952a68ed3ca203491790d2b386dd0fbb4537c3d741f9f89066c1e5cbd07413abeb2297281a94232b157fd3f22720c983aaee529335ecafcf68e033b81a4224389a8baddeb139ee9ad22ffe59616b23cef5810ba02ca63df39eaf72153da55708b8f56522a19ad883a63f3abe5c9aa7f0e3bd4a4c777b748e05f1ab91d308c71a5de3fe068c6e5d90253fdbb35bbeac545bf93d6cefb21e1e68ca376040fe136729994c95a3b515c62b2c94d07ba25b72bca6b2b7bec9afb82e5c4fdab81477720c1b25beb9aae6ed3bfb459d34737dacf627d221d1e4d9a52f8a3048d89304df2d23182d81bf49f0727c385245b49324e7347e106958be7a693ad35612f1c505d4761bc6cc3b273d32c9d86a19f5a873d926692c9bb4ebe3c4dc5acf46221df30ff03b31d38a8478774c4e15b85e69d699929550230d1e71cf014a8189ae2894a9e492d1281bb2de299c90b802c2c24361d754cdaa350c9085437af81efc674956e34ca62e04e2d7cd3c259308953d2a33556028a6f136c993e72727bc49e7afe76654a877a70a5fbe66c60484a58ef391cbb3711eeca55c6650cb2eabb440c01d254788711de48402bf0d3eea38c8abaadbf9d200a38580d63adb1c04dc1b7e5f319a295acb57b64a65e969be28590bbeac33823fc4f43afb98e4c4e3462e0206f66dbd886531ae0427174e72348f586424af0d72d663afa86ec166d44326be4cade00cf118eec9f606828c0407231d8b970003e3bd72fdbb2270a7aaaef5dc6039bc97eb398ac95d816bbf0de82a56981db9a7849e736f0f9e67e2185d93530d2cb0abbfa5a72100befbc273d905e260c0bcbfdef000e4679e8754d34f75577dcac4916fad7e142157f701c52ea7ac711aca8ea016954999b2f7f6171c41284cca8d8accda2c5c4977d95e4885dd928e3a098a852776733fe22ee056b8de197f4f9a74aafd87777c64ba2c99cf83364128d5643eaf01833374d44ad4313181a1100e9b6cd9372bc010e937a6bcdcff2b998e0194df495db7e5f7bc727532a6ffaca2cff08d55297ac75c30739faa79fb44534d6fa673aa683b97583c859ba8e1b0ba52c298ac9ecc3d3f3d192fb5e364ff65aed690d11d1635e13aa08b892f28a155c9aeca9abef900cfb52b284bebf4325b8e8cc4eeaa438dca444212c74779a04b4b56ce9ee5eb37e0bd96bb728a977b4d29f47e10105bd4150eb448eeea687c8778fb062d33ae4008a15a8bb34e8dd6f760565b9142e08c274d23d321b7acbc5c9e19249f0c95e7c8a05480f2dabae22aa087eb4beb5d840962fc712a7787210b21a637f5900fc0aa21a318fc4ff0d40d44b9a78e1cbaf75cd928f108ea299dcf03691186debf5917dcd0115b64d70148a59ca3a2db12e738a5719e6cb465704205a8af2ef7c47dea8c620168d472a31db1ac95d9cb8a35f5f7f4b45fc7af32dcc45b543a7659756a718105314684db82baf6481972c9a759441924ae1514ff28c06a2e571b730faf9f63099747db6c33859ea3059647edc5a2fb492a52d251efeb3b6c28bdbe11ba6e3754acaec4f0bd79bf3877783e42e3380626ee502915d7566a7178707b266df3e8662ee7a340505823883a7ed299e124eec45c3b25255e39b9d55653d13c8c839eab0dc9e10de7e3f0076b9dea563f0c4c9a59567d3c02638b3833d0ea21a71c5d3e97258d7118606a0ab5757cf227bbbf74b1f92207d09d89f4f41c6f2a0e6b2081b75f3ee92139a83f548c057fb8fffc42fc45712b5f30fafe6f0ad72d2f225ee9e35e3135401ae8141d27c8bf340d562034529fb787fa90e084a70b736cd76deb2dc04ea2b286d2669376ff943d73d993a2df0ff0f623c9bea2f0bd9fa38c0f017acc221495b086f48e2c2402f3cc706d942e4942a5c325a735af5f8a5768cb2e68b308b2147a4cec267b8046ce593a7493e9b7f4a6a0eebe9e264edf13f05e4c0828f0a4af067f1bd7322f45c11cfce925d412db9c3c5c65d3b8fba7789b687c8e908d47fca5b36a10a1aa9fcb727ed69bbb50ac80627b6b44959258764f6810bf680ab61aeccbf7cfbccbe05eeacaad373880093466fe30f215cbd8837aac3b9bff2d0529883a3641922593b91af1084a67a3bfdbfbf49a5a0513e0cb945d704c5f41e255c6b81c0990a10f12bf322f9414f15a21801bcc2151d1604d40c84d8d1d8b90c062142ebf98002d0a3b86c7030aa0500e176de3af390393470886c0cc58509e5daa8949f0a8a96cbeab408cfbf72e237d7a233a124fc8b9eccf46b6639c22fd926d7258840a0aa3b4cdb24088da340df35b0f287ee171c8603112d1cdd7f2ec92cbb5ddd75e807d363f735deb978c0a3bf6e1db4f5cd0c24b5764dabed8df5bf5ff1eae45c7acba0a5b6cc338cb094ea33811ec27deb3650e02c71b8550bc1e164faaf2e382d875807c764670d88de21c856e34783ad339d43740e984ea88d05157ef38bfd4afacfd723ef876c1247b3ee35d909a22ceb22757b5fec23b659b93cc036028345b52ed183eb6d6c99b4445d0fefbfce3b2582b7fedd955118609ca9b9ac131ae54092bfcb58a36af155c2e4a67084b2eb20e982abd4e2641e3c199b656c27fb4b8bc93334b73164d83afdf48a8f844c7c5c88f0d9533db3d2c7e4e659e3051db0efcc732ff8b18f353aae8235e070f9f8d678b22b8e000c78ce694c5c1929f6e85af4c49d4c5b0ddc8e9005c7a68de94ee34094540ee1a0dac21bac2eb7ff7736fc48ecbb508f8f81b852f1b96545da541f412d579c576318d1dc8f0243867a81571be48776af53d4562bf050e39193251ec75dec87e6f717d3ce88ba135769770a456c12076cd97b6251cbdbdc2e1ab7c283865fecd88f4092110f25d7e3244c29a34962e41ba22d7f60e1f3747f5ba9cc1a25538ee1ed18fb63111d8cea8c8c40132f61d2511d51aba70b8dc9ce6fd86e773c838417953a44ed46880b89a70b26b29993307a5c9f1cfbd8e40b0c783958450f0b397d2582fd9768754a288f5d6e887c12d2958cc875e0e5a21cf92333b4c4d9f707c989484141d0c520d9f0fbc87a311e9cbeaa1279b0e02a970dba301cca7c31a911e116c169399a66b1188019cef59c23ce54821299bddfcfdbfc02d5c93d58218951be5ade291741a5e685906c1d51602afba4f7078d8289319e97085b2d12a4532f829d82e74d2e587a9af882bf93ca405fb7bb0700a66f0924759cbfbbbabdf4facf3ac143b5c038a9e558683a53927888242bc5922de854cf5a9c09d0ba1a3a26630fe35a9021acade201d4e189bb9b6acb39c4b9f4640f98bf2a83883efa20f9ab57c025fe18c7196aa7469b2b0bf12addee33232091adb6932d9b2df9805330b55959bb0fe68f522e6829c8fa78a616dac75aa757341863b5e0268659a723aded641f9a92b536df63c6748f319b72bade0b26e8414ad2c411e54b25050000dde62b14164c51925946fa50ff34620de91c14b6f3c81fb32e75080aa748d9d6a01c66f8f3a1e4ed8ceccf48f83509500000000000000001010000010000009dbdfe4298ac526da3c90e4363a6ac801af88bccf8796db12fbd12a3498edb17a75eda8cd6cd756a1b21d368c1f4a6e63f21be887b0c494c76b222000000000098000000000000000001000005000000bfd7aaf6905901bbc7d6b362d627768191466a6e0e7c8fff333e22b4d2ccaa5fc06870b2b33e9ac27ecd4ccd86a20497968faad49b5bfc229c022d337fdbee2ea587039a31bceefd58fb04b5f9df3676fe12142281b0163a4d308e41381e488d7c56dc66bf113dd8783342c0a5a3c80f8858aac5599570ac6360250f4dda02f7144930ad0000005da0fae204f82158caccb18b095b39b18790e6b37d2c3df0ae109cfd841c7add669f16fc4c9b0f9b082140b0a840ffff93fa00ce3ea334e2783765372f61346bfd801c7aee6dfbb366b036c307fda28b4fc8f1274c3db03ff497c12dcf29fa9bc9ed2ebb904791d0a3e915eafbe09d959b0bd1904c43bc4de2201d3544d72002a69b87608e3d500751f9de83a49336999af1acfe764d61979d4fcb4e69f28aa9d06a6fd0d769eed770432262c0515384a4a4d61c3fd85c3ad71900"], 0x1240}, 0x4000000) recvmmsg(r2, &(0x7f0000006980)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x6}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000d40)=""/118, 0x76}], 0x1, 0x0, 0x0, 0x3}}], 0x2, 0x0, 0x0) 18:39:18 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20aaaafeffaaaaa8]}, 0x1ff}, 0x1c) [ 1174.156526] binder: undelivered TRANSACTION_ERROR: 29201 18:39:18 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r0, &(0x7f0000000700), 0x100000000000014a, 0x10400003) 18:39:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:18 executing program 0: r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:18 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') close(r0) preadv(r0, &(0x7f0000000700), 0x13b, 0x10400003) 18:39:19 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100000000000000]}, 0x1ff}, 0x1c) 18:39:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1174.402920] binder_transaction: 8 callbacks suppressed [ 1174.402931] binder: 10219:10220 got transaction to invalid handle [ 1174.429491] binder: 10219:10220 transaction failed 29201/-22, size 24-8 line 2994 [ 1174.493839] binder: 10219:10220 ioctl c0306201 20000440 returned -14 [ 1174.506110] protocol 88fb is buggy, dev hsr_slave_0 [ 1174.511238] protocol 88fb is buggy, dev hsr_slave_1 [ 1174.516417] protocol 88fb is buggy, dev hsr_slave_0 [ 1174.521494] protocol 88fb is buggy, dev hsr_slave_1 18:39:19 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21aaaafeffaaaaa8]}, 0x1ff}, 0x1c) [ 1174.566716] binder_alloc: binder_alloc_mmap_handler: 10219 20001000-20002000 already mapped failed -16 [ 1174.606751] binder: BINDER_SET_CONTEXT_MGR already set [ 1174.642114] binder: 10219:10220 ioctl 40046207 0 returned -16 18:39:19 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r0, &(0x7f0000000700), 0x13b, 0x10400003) write$P9_RREADDIR(r0, &(0x7f00000000c0)={0x49, 0x29, 0x1, {0x7, [{{0xb1, 0x4, 0x1}, 0x3, 0x6, 0x7, './file0'}, {{0x0, 0x3}, 0x1, 0x4, 0x7, './file0'}]}}, 0x49) 18:39:19 executing program 0: r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1174.767294] binder: 10219:10242 got transaction to invalid handle [ 1174.776488] binder: 10219:10242 transaction failed 29201/-22, size 24-8 line 2994 [ 1174.828114] binder: undelivered TRANSACTION_ERROR: 29201 [ 1174.835947] binder: 10219:10242 ioctl c0306201 20000440 returned -14 [ 1174.856279] binder: undelivered TRANSACTION_ERROR: 29201 [ 1174.896161] protocol 88fb is buggy, dev hsr_slave_0 [ 1174.901428] protocol 88fb is buggy, dev hsr_slave_1 [ 1174.906726] protocol 88fb is buggy, dev hsr_slave_0 [ 1174.911808] protocol 88fb is buggy, dev hsr_slave_1 18:39:19 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000740)='/dev/vcs#\x00', 0x8000, 0x4000) write$P9_RSETATTR(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000680)=""/174, 0xae) r2 = socket$inet6(0xa, 0x40000080806, 0x0) io_getevents(0x0, 0x8001, 0x1, &(0x7f0000000240)=[{}], &(0x7f0000000280)={0x0, 0x989680}) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x20000000) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = mq_open(&(0x7f00000000c0)='bdev\\\x00', 0x40, 0x40, &(0x7f0000000100)={0x0, 0xfff, 0x0, 0x0, 0x6, 0x3, 0xb555}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000500)={0x0, 0x3}, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r5 = accept4(r2, 0x0, &(0x7f0000000000), 0x0) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x6685) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000640)={0x6, &(0x7f00000002c0)=[{0xfffffffffffffffc, 0x1f, 0x9, 0x3}, {0x7, 0xe23, 0x4, 0x4b}, {0x7d, 0xba2, 0x4, 0x14c1}, {0x8, 0x9, 0x9, 0x7}, {0xfffffffffffffffd, 0x8, 0xff, 0x5e}, {0x2, 0x4, 0x8, 0x4}]}, 0x10) setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000040), 0x4) accept$inet(r5, &(0x7f0000000540)={0x2, 0x0, @loopback}, &(0x7f0000000580)=0x10) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000001c0)) ioctl$sock_ifreq(r2, 0x89b3, &(0x7f0000000200)={'nr0\x00', @ifru_data=&(0x7f0000000080)="bae8f5e59a6301624afafbe366188ec15a1567badd04bab804c40ca3aaca49f2"}) clock_gettime(0x0, 0x0) write$FUSE_LSEEK(r1, &(0x7f0000000440)={0x18, 0x0, 0x5, {0x3}}, 0x18) mq_timedreceive(r4, &(0x7f0000000380)=""/60, 0x3c, 0x7f, &(0x7f0000000400)) sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0x700, 0xea010000, 0xea010000}, 0x0, 0xe803000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}, 0x2000000}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000340)={'eql\x00'}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f00000004c0)) r6 = getpgid(0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f0000000480)) stat(&(0x7f0000000300)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000003c0)={r6, r7, r8}, 0xc) 18:39:19 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000400030006000200000002000000e000000100000000000000020800120002000200000000007d220000180000000303000000000300000000000000001f03000000160000000311000000000000000000000000000000000000030005000000000002000000e00000010000000000000000"], 0x80}}, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) memfd_create(&(0x7f0000000000)='cgroupvmnet1(}\x00', 0x0) 18:39:19 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200000000000000]}, 0x1ff}, 0x1c) 18:39:19 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x41, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r1, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x224b, 0x6000) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) 18:39:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:19 executing program 0: r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1175.474849] binder: 10256:10257 got transaction to invalid handle [ 1175.515301] binder: 10256:10257 transaction failed 29201/-22, size 24-8 line 2994 18:39:20 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:20 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22aaaafeffaaaaa8]}, 0x1ff}, 0x1c) [ 1175.556538] binder: 10256:10257 ioctl c0306201 20000440 returned -14 [ 1175.588073] binder_alloc: binder_alloc_mmap_handler: 10256 20001000-20002000 already mapped failed -16 18:39:20 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2300000000000000]}, 0x1ff}, 0x1c) 18:39:20 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)}}, 0x378) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000240)={r3, 0x3}) 18:39:20 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1175.647776] binder: 10256:10270 got transaction to invalid handle [ 1175.677762] binder: BINDER_SET_CONTEXT_MGR already set [ 1175.722094] binder: undelivered TRANSACTION_ERROR: 29201 [ 1175.731160] binder: 10256:10257 ioctl 40046207 0 returned -16 [ 1175.772707] binder: 10256:10270 ioctl c0306201 20000440 returned -14 18:39:20 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x239664feff08d478]}, 0x1ff}, 0x1c) [ 1175.829401] binder: undelivered TRANSACTION_ERROR: 29201 18:39:20 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000740)='/dev/vcs#\x00', 0x8000, 0x4000) write$P9_RSETATTR(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000680)=""/174, 0xae) r2 = socket$inet6(0xa, 0x40000080806, 0x0) io_getevents(0x0, 0x8001, 0x1, &(0x7f0000000240)=[{}], &(0x7f0000000280)={0x0, 0x989680}) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x20000000) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = mq_open(&(0x7f00000000c0)='bdev\\\x00', 0x40, 0x40, &(0x7f0000000100)={0x0, 0xfff, 0x0, 0x0, 0x6, 0x3, 0xb555}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000500)={0x0, 0x3}, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r5 = accept4(r2, 0x0, &(0x7f0000000000), 0x0) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x6685) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000640)={0x6, &(0x7f00000002c0)=[{0xfffffffffffffffc, 0x1f, 0x9, 0x3}, {0x7, 0xe23, 0x4, 0x4b}, {0x7d, 0xba2, 0x4, 0x14c1}, {0x8, 0x9, 0x9, 0x7}, {0xfffffffffffffffd, 0x8, 0xff, 0x5e}, {0x2, 0x4, 0x8, 0x4}]}, 0x10) setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000040), 0x4) accept$inet(r5, &(0x7f0000000540)={0x2, 0x0, @loopback}, &(0x7f0000000580)=0x10) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000001c0)) ioctl$sock_ifreq(r2, 0x89b3, &(0x7f0000000200)={'nr0\x00', @ifru_data=&(0x7f0000000080)="bae8f5e59a6301624afafbe366188ec15a1567badd04bab804c40ca3aaca49f2"}) clock_gettime(0x0, 0x0) write$FUSE_LSEEK(r1, &(0x7f0000000440)={0x18, 0x0, 0x5, {0x3}}, 0x18) mq_timedreceive(r4, &(0x7f0000000380)=""/60, 0x3c, 0x7f, &(0x7f0000000400)) sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0x700, 0xea010000, 0xea010000}, 0x0, 0xe803000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}, 0x2000000}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000340)={'eql\x00'}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f00000004c0)) r6 = getpgid(0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f0000000480)) stat(&(0x7f0000000300)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000003c0)={r6, r7, r8}, 0xc) 18:39:20 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:20 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400000000000000]}, 0x1ff}, 0x1c) 18:39:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x200000, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000280)=0x4) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) r2 = perf_event_open$cgroup(&(0x7f0000000180)={0x3, 0x70, 0x62, 0x200, 0x2000000000, 0xfffffffffffffffb, 0x0, 0x8000, 0x14281, 0x1, 0x0, 0x1, 0x2c, 0x8, 0x3, 0x4, 0x1f, 0x89, 0x7fff, 0x0, 0x3, 0x3, 0x8, 0x7ff, 0x1, 0x3f, 0x7f, 0x4581, 0x8, 0x474, 0x9, 0xffff, 0xb9, 0x1000, 0x1, 0x0, 0x5e0e568a, 0x1, 0x0, 0x100000000, 0x2, @perf_config_ext={0x2, 0x80000000}, 0x2000, 0x8, 0xffffffff00000000, 0x8, 0x0, 0x7, 0x4}, 0xffffffffffffffff, 0x6, 0xffffffffffffff9c, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x5) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, &(0x7f0000000300)={0x0, @src_change}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000001400)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = gettid() tkill(r4, 0x13) write$apparmor_exec(r1, &(0x7f0000000200)={'stack ', '/dev/video35\x00'}, 0x13) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980914, 0xfdfd}) 18:39:20 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x41, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r1, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x224b, 0x6000) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) 18:39:20 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2443f8fffed409cb]}, 0x1ff}, 0x1c) 18:39:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1176.386743] binder: 10306:10308 got transaction to invalid handle [ 1176.406351] binder: 10306:10308 ioctl c0306201 20000440 returned -14 [ 1176.423885] binder_alloc: binder_alloc_mmap_handler: 10306 20001000-20002000 already mapped failed -16 18:39:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:21 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24aaaafeffaaaaa8]}, 0x1ff}, 0x1c) 18:39:21 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4000000000000024, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x13, &(0x7f0000000040), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x101080, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000000c0)={{0x32, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 'ovf\x00', 0x4, 0x6, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x10002, 0xfffffffffffffe00, 0x200, 0x6}}, 0x44) close(r0) [ 1176.546539] binder: BINDER_SET_CONTEXT_MGR already set [ 1176.550292] binder: 10306:10323 got transaction to invalid handle [ 1176.554251] binder: 10306:10308 ioctl 40046207 0 returned -16 18:39:21 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044323, &(0x7f0000000000)={0x2, 0x0}) [ 1176.627496] binder: undelivered TRANSACTION_ERROR: 29201 [ 1176.642726] binder: 10306:10323 ioctl c0306201 20000440 returned -14 [ 1176.719011] binder: undelivered TRANSACTION_ERROR: 29201 18:39:21 executing program 5: sched_setscheduler(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r1) r2 = socket$inet(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec\xad\x1b\xa2\xf4x\x1d\x9f\xf5\xda\x9a\"\xf97\xf4i\x91e\xd5f\xbf7N\x13\xbe\xbe\ve\x82\xa1\xd2b\x06\xb5\xebt\xb1b\xefd\xb0\xecbf\x96\xd4\x88\x99\xeeh\xc5$\xc3\xf4D\xac\xc4P\xe3\x98R\xef\xf4\xdb\x017\xef\x90\'n/\x88\xae\x93\vx\'\xdf]A\x97\x99\xadr\xdcvw\xbf\xac\x9e=\xe1\xd8P\xea\x10}\xdbC\xab\xae\xf9\xcfS|\x9ce\x12\x8eV\xa8\xd2\xc7\x9bJ', 0x0, 0x0) fcntl$notify(r4, 0x402, 0xa) close(r3) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000240)={r4, r0, 0xfffffffffffffffb}) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\x01\xcc\xb4\x00t\x00', @ifru_flags=0x2}) clock_settime(0x0, &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@md5={0x1, "5ba1e141a49d9d9a239d6717031901b6"}, 0x11, 0x3) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) 18:39:21 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2700000000000000]}, 0x1ff}, 0x1c) 18:39:21 executing program 2: unshare(0x10010) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001540)={0x0, 0x81, 0x0, 0x7, 0x8, 0xfffffffffffffffe, 0x3, 0x6, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000015c0)={r1, 0x3}, &(0x7f0000001600)=0x8) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f00000004c0)=""/4096) open(&(0x7f0000000100)='./file1\x00', 0x8020101842, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x3) keyctl$get_keyring_id(0x0, 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, 0x0) r5 = memfd_create(&(0x7f0000000240)='t\bnu\x00\x00\x18\x00\x00\x00\xe3[\xf8\x00\x00\x82\n\xb6\rw\x03\xb8\xab\xda\x81\xab*\x86\x04\xf5\xa0\xc4\\U\x8d\xf55\xd4g\x11\xf2\x8f\xe6\n', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) write$P9_RSETATTR(r0, &(0x7f0000001640)={0x7, 0x1b, 0x1}, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001680)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f00000016c0)={0x6, 0x118, 0xfa00, {{0x4, 0x7fffffff, "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", 0x62, 0x81, 0x3, 0x3, 0x0, 0x10001, 0x2, 0x1}, r6}}, 0x120) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$int_in(r0, 0x0, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000440)='/dev/snd/pcmC#D#c\x00', 0x6, 0x200000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]}) 18:39:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x2ef, &(0x7f0000001380)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000300000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014000300626f6e6430fc10ffffffffff849f5ec3963a593b967ed988d4ff000000000000000000000000000000"], 0x40}}, 0x0) r1 = add_key(&(0x7f0000000040)='.dead\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="2b7a15d3cc3049790ac5483bc59c00b8df2eafd36392b6bf4120f89d07df817364fc1d6bbd144eb7c7911b073f42c1a9861434a8f3842268f19dbb29884fdb7b5c8c4845f07ef477dff01dc51b4e6031960d922fd3645d1201c6307f2b3cbde500461b0fdcedd4000e1f03ba79375626f750704126f2d43c059ad5c0d45f834e5092e842c322ec953bff7c5485fa0d91a3f773aa568bca0abd890631c5731f32ed6a74ad462af31e54eeb8259dcd3fe80bf33e752e6cfc332060f3075d2d0f8df0983ca2e984cb98d349806a9cac591b0db4c0e5ad80b038cab762e8572c8e", 0xdf, 0xfffffffffffffffa) keyctl$setperm(0x5, r1, 0x0) 18:39:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:21 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800000000000000]}, 0x1ff}, 0x1c) [ 1177.267487] binder: 10347:10350 got transaction to invalid handle [ 1177.294031] binder: 10347:10350 ioctl c0306201 20000440 returned -14 18:39:21 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000bcc650db000000000073015400000000009500000000000000"], &(0x7f0000000000)='Q\xa2\xa2\x11\xbbo-\x95\xd3\xc0I\x960(U\x06\t.\xc3\t\xa4\xd5\x99\x02_2\x01\r\xf8\xedxR\xc2\a\xc0\x17\x15k3\xfc\xe7\x9d\xea\xe7\x19M#\"N\xe4\xe4\xc5\xe3!\xfd\x80\xb7', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) [ 1177.352853] binder_alloc: binder_alloc_mmap_handler: 10347 20001000-20002000 already mapped failed -16 18:39:21 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/fscreate\x00') write$P9_RSTATu(r0, &(0x7f0000000380)={0x94, 0x7d, 0x1, {{0x0, 0x79, 0x0, 0xfffffffffffffffa, {0x0, 0x20000000000000, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x32b, '', 0xb, '+/mime_type', 0x20, 'em0nodev(vboxnet0proc\xfbbdevcpuset', 0x1b, 'vboxnet0+!systemcgroup{GPL\\'}, 0x6, 'wlan0{'}}, 0x94) [ 1177.427807] binder: BINDER_SET_CONTEXT_MGR already set 18:39:22 executing program 2: syz_open_dev$sndtimer(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x80, 0x0) unshare(0x8000400) r1 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x482, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000280)={0xb, 0x1, 0x9}) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/37, 0x25}], 0x21, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000002c0)='./file0//ile0\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='y\x00', 0x2, 0x3) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) capget(&(0x7f0000000140)={0x200f1526, r3}, &(0x7f0000000200)={0x1, 0x5e, 0x0, 0x80, 0x9f6, 0x7ff}) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0xffffffffffffff80) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) setxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) 18:39:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1177.457414] binder: 10347:10361 ioctl 40046207 0 returned -16 [ 1177.470403] binder: 10347:10377 got transaction to invalid handle [ 1177.486613] binder: 10347:10377 ioctl c0306201 20000440 returned -14 18:39:22 executing program 5: sched_setscheduler(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r1) r2 = socket$inet(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec\xad\x1b\xa2\xf4x\x1d\x9f\xf5\xda\x9a\"\xf97\xf4i\x91e\xd5f\xbf7N\x13\xbe\xbe\ve\x82\xa1\xd2b\x06\xb5\xebt\xb1b\xefd\xb0\xecbf\x96\xd4\x88\x99\xeeh\xc5$\xc3\xf4D\xac\xc4P\xe3\x98R\xef\xf4\xdb\x017\xef\x90\'n/\x88\xae\x93\vx\'\xdf]A\x97\x99\xadr\xdcvw\xbf\xac\x9e=\xe1\xd8P\xea\x10}\xdbC\xab\xae\xf9\xcfS|\x9ce\x12\x8eV\xa8\xd2\xc7\x9bJ', 0x0, 0x0) fcntl$notify(r4, 0x402, 0xa) close(r3) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000240)={r4, r0, 0xfffffffffffffffb}) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\x01\xcc\xb4\x00t\x00', @ifru_flags=0x2}) clock_settime(0x0, &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@md5={0x1, "5ba1e141a49d9d9a239d6717031901b6"}, 0x11, 0x3) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) 18:39:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x9, 0x200) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) write$cgroup_pid(r5, &(0x7f0000000180)=r6, 0x12) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e23, 0x8, @mcast2, 0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x27}, 0x2}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, @in6={0xa, 0x4e20, 0x100000001, @local, 0x9}, @in6={0xa, 0x4e22, 0xf0, @dev={0xfe, 0x80, [], 0x10}, 0x4}, @in={0x2, 0x4e24, @remote}], 0xa0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 18:39:22 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28aaaafeffaaaaa8]}, 0x1ff}, 0x1c) [ 1177.504974] binder: undelivered TRANSACTION_ERROR: 29201 [ 1177.511877] binder: undelivered TRANSACTION_ERROR: 29201 18:39:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1177.698645] binder: 10396:10397 got transaction to invalid handle [ 1177.704935] binder_transaction: 5 callbacks suppressed [ 1177.704952] binder: 10396:10397 transaction failed 29201/-22, size 24-8 line 2994 18:39:22 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2900000000000000]}, 0x1ff}, 0x1c) 18:39:22 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r1) r2 = socket$inet(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec\xad\x1b\xa2\xf4x\x1d\x9f\xf5\xda\x9a\"\xf97\xf4i\x91e\xd5f\xbf7N\x13\xbe\xbe\ve\x82\xa1\xd2b\x06\xb5\xebt\xb1b\xefd\xb0\xecbf\x96\xd4\x88\x99\xeeh\xc5$\xc3\xf4D\xac\xc4P\xe3\x98R\xef\xf4\xdb\x017\xef\x90\'n/\x88\xae\x93\vx\'\xdf]A\x97\x99\xadr\xdcvw\xbf\xac\x9e=\xe1\xd8P\xea\x10}\xdbC\xab\xae\xf9\xcfS|\x9ce\x12\x8eV\xa8\xd2\xc7\x9bJ', 0x0, 0x0) fcntl$notify(r4, 0x402, 0xa) close(r3) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000240)={r4, r0, 0xfffffffffffffffb}) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\x01\xcc\xb4\x00t\x00', @ifru_flags=0x2}) clock_settime(0x0, &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@md5={0x1, "5ba1e141a49d9d9a239d6717031901b6"}, 0x11, 0x3) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) [ 1177.821008] binder: 10396:10397 ioctl c0306201 20000440 returned -14 [ 1177.896445] binder_alloc: binder_alloc_mmap_handler: 10396 20001000-20002000 already mapped failed -16 18:39:22 executing program 5: sched_setscheduler(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r1) r2 = socket$inet(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec\xad\x1b\xa2\xf4x\x1d\x9f\xf5\xda\x9a\"\xf97\xf4i\x91e\xd5f\xbf7N\x13\xbe\xbe\ve\x82\xa1\xd2b\x06\xb5\xebt\xb1b\xefd\xb0\xecbf\x96\xd4\x88\x99\xeeh\xc5$\xc3\xf4D\xac\xc4P\xe3\x98R\xef\xf4\xdb\x017\xef\x90\'n/\x88\xae\x93\vx\'\xdf]A\x97\x99\xadr\xdcvw\xbf\xac\x9e=\xe1\xd8P\xea\x10}\xdbC\xab\xae\xf9\xcfS|\x9ce\x12\x8eV\xa8\xd2\xc7\x9bJ', 0x0, 0x0) fcntl$notify(r4, 0x402, 0xa) close(r3) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000240)={r4, r0, 0xfffffffffffffffb}) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\x01\xcc\xb4\x00t\x00', @ifru_flags=0x2}) clock_settime(0x0, &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@md5={0x1, "5ba1e141a49d9d9a239d6717031901b6"}, 0x11, 0x3) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) [ 1177.955275] binder: BINDER_SET_CONTEXT_MGR already set 18:39:22 executing program 2: syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x401, 0x163882) fcntl$addseals(0xffffffffffffffff, 0x409, 0xd) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) gettid() setsockopt$sock_int(r0, 0x1, 0x3f, 0x0, 0xfffffffffffffccc) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, 0x0) readahead(r1, 0xff, 0x5) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x1, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000180)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) msgsnd(r2, &(0x7f0000c40ff8)={0x1}, 0x8, 0x0) msgrcv(r2, &(0x7f0000000040)={0x0, ""/4}, 0xc, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000140)=0x8) r4 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f00000007c0)={"3ecd141d39cdba7cfdf2505782a1758a5e99f5325c4b10b8bd160982c1f44b5583bde31870776c93055f401cd73b7b013993aa4c1816f94ca7ac7b8d350c30de4dbfa6b9d029d519f1f11f7b17d816f454efc6d0d9cd0787bb253902429941735b4df71a0abef0f57841463e9cc711ba6e324ced9fbed9e2fea9731e3715783b0137d78b4dce9d9b089af68e32c57d284471d7897e7837657b11e1109b14e0749fc9f014eb2c4eb84b14f42e2566a1f0a3d047e9cd81e38efd22ee66afd9f682c9c4d0d43de0f6137550d91f2a828e970c515f7c9c7eff0f9abd3c835e68563aaf1c89c50f8b7e96b13a033365e47c23c812bd027e0418f571654b956033f87f873a59084c6eac77e5c7ae5007ac7780c2ec6cad01bb2c536c0d08d1fe941b4c25f0fffbc2deaf32df40af8cdac606dff65333f222d3b71556eda15d9420d7d8d7558cd8b575c407b3d9f5dfcb3d6aaeaf94efd6b430f20d9e01158e47d9df4c1c115402bae35007997d1359b178cd569ba596dad5d1dc2180ef99bf2d5d10b79f98bd1f756484a84bd2addf3c2e24b76a7e269a77d1e14507cfde48be67a46565eba644fc1fa2a90425b573cb338d4913aaccf2c6d8b7e9ed3be8123c13d6844736561c1a41e1c14039d1f426b7e6eabb373ac7e57b7ac8f3c6bf13f07dfc2e053327811cf5fa527d8622142e3294a6a3c02e4827d0a89822def524fafbf1c4a7f514f0ae4978e8ae2369ef5ac5a883a4cf25cfe56e7ebda07f78f3ee14028aa103ae2d642948ce0844e8830f9680efd319aa2da163e218e52bcab408521376e66e09f76144440ac8776ff4664ce8a8c8c276735d8fa293fc96aff81d705fa97cc3b229a46facefffef599730bc633de51243b04dca9c0d1ea3ffd54efcce50147ebd07514164e181c10c70fba95f494a49e4d6356eb02b54c660e2ec6c0c71761138f7c44cead336264af620d55bf8552cbb801204a65dcf3e27f80d0ca7e8960ac5d6b0b7cd302a337a85da4dcd45b69324f5daf323e06ab458090a9ef3e82193c2889682168362e955f2d96ea540a0dcbda5f9545a75635f96be290ea7337094d419747589f3ad160c1a8b9cec9594efdfe27191d8760a9d8a18c85147714875a462afdb81f30d7a9fa3757dab0fdb007f4aab6338e28c44c847eb66d02f0c5ddeb9b91ff99452e85e30988476db88a37087fc793ab56f130dcf285ecb6fe221cac2e10a06875aabe6b7a595f12195e870b3e5d1c218fd08c0572c4b09882ee40e068ffcfd7b4dcd2fda9c54dcc4a44771e0db0857bacf221ea091d282379fd7229a4bf97664054aa52b1f561bbc0665e7ed27b65a89d44bb592cf00217809a92e7664620b40dbe297d970da63428e2de59aa78cd94e1fc4f3a8e2ea056cdd73b399595e9b6fb2179494372f555e67482d3a5977c71d52403213597dd30b"}) msgget$private(0x0, 0x22a) bpf$MAP_CREATE(0x0, &(0x7f0000000640)={0x1f, 0x64f}, 0x2c) r5 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x1, 0x400000) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) getgroups(0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r6, 0x201, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x8}}, [""]}, 0x24}}, 0x80) setxattr$security_ima(&(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000480)=@md5={0x1, "80d0032ffbf3c298a79cf17f1f4ec95e"}, 0x11, 0x2) write$FUSE_ENTRY(r5, &(0x7f0000000300)={0x90, 0x0, 0x0, {0x5, 0x0, 0xa0, 0x851, 0x7, 0xbbf, {0x0, 0x800, 0x4, 0x0, 0x8, 0x8, 0x0, 0x1000, 0x4, 0x800, 0x7f, 0x0, 0x0, 0x0, 0x6283cb1d}}}, 0x90) 18:39:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1178.003352] binder: 10396:10397 ioctl 40046207 0 returned -16 [ 1178.021752] binder: 10396:10413 got transaction to invalid handle [ 1178.046253] binder: 10396:10413 transaction failed 29201/-22, size 24-8 line 2994 18:39:22 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29aaaafeffaaaaa8]}, 0x1ff}, 0x1c) [ 1178.092848] binder: 10396:10413 ioctl c0306201 20000440 returned -14 18:39:22 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000040)=@xdp, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000340)=""/66, 0x42}], 0x2, &(0x7f00000003c0)=""/191, 0xbf}, 0x8}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/184, 0xb8}, {&(0x7f0000000200)=""/8, 0x8}], 0x3, &(0x7f0000000700)=""/186, 0xba}, 0x83}], 0x2, 0x142, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000840)={0x0, 0x0}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000880)=r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000240)=""/246) read(r3, 0x0, 0x0) 18:39:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1178.254318] Started in network mode 18:39:22 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf3b3fffe39a01c]}, 0x1ff}, 0x1c) 18:39:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x4c) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="10", 0x1}], 0x1) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 1178.278842] Own node identity 8, cluster identity 4711 18:39:22 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, 0x1ff}, 0x1c) [ 1178.348533] 32-bit node address hash set to 8 [ 1178.356682] binder: 10430:10440 transaction failed 29201/-22, size 24-8 line 2994 [ 1178.383360] binder: 10430:10440 ioctl c0306201 20000440 returned -14 18:39:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1178.420455] binder_alloc: binder_alloc_mmap_handler: 10430 20001000-20002000 already mapped failed -16 [ 1178.465150] binder: BINDER_SET_CONTEXT_MGR already set 18:39:23 executing program 3: fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x100, 0x10) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = dup(r1) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000480)=0xe8) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000280)={'veth1_to_team\x00', @ifru_addrs=@xdp={0x2c, 0x4, r3}}) write$apparmor_exec(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1) r5 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r5, 0x2288, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0xb) get_mempolicy(0x0, &(0x7f00000001c0), 0xffffffff80000000, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r2, &(0x7f0000000340)={0xa0, 0x19, 0x1, {0x1000, {0x4, 0x4, 0x1}, 0x44, r4, r6, 0x401, 0x100000001, 0x7fffffff, 0x336a, 0xffffffffffffff00, 0xffff, 0xbb1, 0x80000000, 0x7, 0x401, 0xffffffff, 0x7c371104, 0x7, 0x184, 0x2400000000}}, 0xa0) capset(&(0x7f00000004c0)={0x24020019980330}, &(0x7f0000000500)) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @remote}}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000100)='./file0\x00', 0x0, 0x18}, 0x10) clone(0x8000000001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1178.486290] binder: 10430:10431 ioctl 40046207 0 returned -16 [ 1178.494707] binder: 10430:10440 transaction failed 29201/-22, size 24-8 line 2994 18:39:23 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x1ff}, 0x1c) [ 1178.549296] binder: 10430:10440 ioctl c0306201 20000440 returned -14 18:39:23 executing program 2: syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x401, 0x163882) fcntl$addseals(0xffffffffffffffff, 0x409, 0xd) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) gettid() setsockopt$sock_int(r0, 0x1, 0x3f, 0x0, 0xfffffffffffffccc) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, 0x0) readahead(r1, 0xff, 0x5) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x1, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000180)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) msgsnd(r2, &(0x7f0000c40ff8)={0x1}, 0x8, 0x0) msgrcv(r2, &(0x7f0000000040)={0x0, ""/4}, 0xc, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000140)=0x8) r4 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f00000007c0)={"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"}) msgget$private(0x0, 0x22a) bpf$MAP_CREATE(0x0, &(0x7f0000000640)={0x1f, 0x64f}, 0x2c) r5 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x1, 0x400000) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) getgroups(0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r6, 0x201, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x8}}, [""]}, 0x24}}, 0x80) setxattr$security_ima(&(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000480)=@md5={0x1, "80d0032ffbf3c298a79cf17f1f4ec95e"}, 0x11, 0x2) write$FUSE_ENTRY(r5, &(0x7f0000000300)={0x90, 0x0, 0x0, {0x5, 0x0, 0xa0, 0x851, 0x7, 0xbbf, {0x0, 0x800, 0x4, 0x0, 0x8, 0x8, 0x0, 0x1000, 0x4, 0x800, 0x7f, 0x0, 0x0, 0x0, 0x6283cb1d}}}, 0x90) 18:39:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000140)="240000001e0025eaa87865f51ef6bce90a04000200bff20182a9000c080009000d000000", 0x24) socket$inet_smc(0x2b, 0x1, 0x0) 18:39:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:23 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44738cfffe0166fb]}, 0x1ff}, 0x1c) 18:39:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:23 executing program 5: epoll_pwait(0xffffffffffffffff, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0xfffffffffffffcea) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0) setsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000000040)="5ca07c4ce2354688d06aff2a0545d6bb338a675f3e173cced421eda3cbf059752501d17c1a96ca6811d90eff6bc94b6f602f0dc97c594dd83be252f8427f7032ac74916527e4a340aee417f99071c4609a06532d667444e42efa7a394a87788eaeab3fd39af4dcd6232b32b2508b2717b09da3d8c13d01992463e850df52cff497d4cfa452cd37619e769da150aa6e6f09850c931f5890f6725e3c31cff39e9e0a7280656cede997d1d40cf1eeb51c5701685b9970bdf5f40a6efde5640963c6db001e9cbf83263f4f4e59eeab56f141d63c44c0743a2c3386421e858f44312a5d6a28c7542d6baa02ae3f", 0xeb) 18:39:23 executing program 3: socketpair$unix(0x1, 0xa, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) io_setup(0xd3b, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0, 0x1000000}]) 18:39:23 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46f1e3feff40cd6c]}, 0x1ff}, 0x1c) 18:39:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x400, 0x1) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'lapb0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="0001b2e1", @ANYRES16=r2, @ANYBLOB="240028bd7000fbdbdf250300000008000100", @ANYRES32=r3, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000100000008000100", @ANYRES32=r4, @ANYBLOB="a00002005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c0004000200cafffbffffff81004036070000003f0002000900000003000701a6020000400080050300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400f9ffffff08000600", @ANYRES32=r5], 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) [ 1178.924290] binder: 10488:10489 transaction failed 29201/-22, size 24-8 line 2994 18:39:23 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f00000007c0)='ramfs\x00', 0x8, 0x0) chdir(&(0x7f0000000540)='./file0\x00') r0 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x810, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xec0b}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x4008041) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 18:39:23 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x4, 0x105040) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000140)={0x2, 0x90000, 0x1}) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x3, 0x264000) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000240)=0x20, 0x4) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000002500)={0x7, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000080)) sendto$inet(r1, &(0x7f0000000000)="a3e3fbb36e359d73dae106d924cf2bb7148a86235e04886341f8496a22f10e764d6d9c815499259a176301a0828555c12e1b84882e7cfa6268bb856575aa9e49b5ff03829a9a674b5390c4ae76a967e8d32b3a07d657e71c0266aa6cd81ce78f04f8f52e184d81837dc4a26d", 0x6c, 0x40001, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10) syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x1, 0x2) [ 1178.992845] binder: 10488:10489 ioctl c0306201 20000440 returned -14 18:39:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1179.056120] net_ratelimit: 20 callbacks suppressed [ 1179.056128] protocol 88fb is buggy, dev hsr_slave_0 [ 1179.066257] protocol 88fb is buggy, dev hsr_slave_1 [ 1179.071365] protocol 88fb is buggy, dev hsr_slave_0 [ 1179.076479] protocol 88fb is buggy, dev hsr_slave_1 [ 1179.082936] binder_alloc: binder_alloc_mmap_handler: 10488 20001000-20002000 already mapped failed -16 18:39:23 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6ccd40fffee3f146]}, 0x1ff}, 0x1c) [ 1179.109170] binder: BINDER_SET_CONTEXT_MGR already set [ 1179.126347] binder: 10488:10509 transaction failed 29201/-22, size 24-8 line 2994 18:39:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1179.156867] binder: 10488:10509 ioctl c0306201 20000440 returned -14 [ 1179.196169] binder: 10488:10503 ioctl 40046207 0 returned -16 18:39:23 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x62, 0x0) ptrace(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENT(r1, &(0x7f0000000040)={0xb0, 0x0, 0x7, [{0x2, 0x32, 0x4, 0x8, 'self'}, {0x2, 0x6, 0x1e, 0x80000000, 'vboxnet1md5sumproc)*mime_type.'}, {0x3, 0x2, 0xd, 0x8, 'system{]:*.%@'}, {0x6, 0x10001, 0x5, 0x2, '^self'}]}, 0xb0) [ 1179.196195] binder_release_work: 4 callbacks suppressed [ 1179.196202] binder: undelivered TRANSACTION_ERROR: 29201 18:39:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1179.256365] binder: undelivered TRANSACTION_ERROR: 29201 [ 1179.296143] protocol 88fb is buggy, dev hsr_slave_0 [ 1179.301262] protocol 88fb is buggy, dev hsr_slave_1 18:39:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:23 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78d408fffe649623]}, 0x1ff}, 0x1c) 18:39:23 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000127, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') flock(r0, 0xffffffffffffdfbb) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000040)) preadv(r2, &(0x7f0000000480), 0x10000000000001cf, 0x0) 18:39:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:24 executing program 5: ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr(&(0x7f0000fc0000)='./file1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="757365722e2f0000000000000055ffb40101"], &(0x7f0000fc0000)='//selinux\x00\x00\x01\x01', 0xfeff, 0x0) [ 1179.434379] binder_transaction: 4 callbacks suppressed [ 1179.434389] binder: 10539:10540 got transaction to invalid handle 18:39:24 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a8c2cfeffa790d0]}, 0x1ff}, 0x1c) 18:39:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:24 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000127, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') flock(r0, 0xffffffffffffdfbb) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000040)) preadv(r2, &(0x7f0000000480), 0x10000000000001cf, 0x0) [ 1179.566072] binder: 10539:10540 transaction failed 29201/-22, size 24-8 line 2994 18:39:24 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8aaaafffeaaaa0c]}, 0x1ff}, 0x1c) 18:39:24 executing program 5: r0 = open(&(0x7f0000000180)='./file0\x00', 0x500c0, 0x80) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000280)={0x7, 0x6}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00\x00\x9e\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, &(0x7f00000000c0)={0x0, 0x0, 0x80}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@setlink={0x28, 0x13, 0x205, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKMODE={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000100)=0x3, 0x4) ioctl$VIDIOC_DBG_G_REGISTER(r5, 0xc0385650, &(0x7f0000000140)={{0x3, @addr=0x7}, 0x8, 0x9, 0x8}) [ 1179.635202] binder: 10539:10540 ioctl c0306201 20000440 returned -14 [ 1179.701856] binder_alloc: binder_alloc_mmap_handler: 10539 20001000-20002000 already mapped failed -16 [ 1179.726642] binder: BINDER_SET_CONTEXT_MGR already set [ 1179.738726] binder: 10539:10562 got transaction to invalid handle [ 1179.770550] binder: 10539:10540 ioctl 40046207 0 returned -16 [ 1179.781228] bond0: cannot enslave bond to itself. [ 1179.785939] binder: undelivered TRANSACTION_ERROR: 29201 [ 1179.792206] binder: 10539:10562 transaction failed 29201/-22, size 24-8 line 2994 [ 1179.812968] bond0: cannot enslave bond to itself. 18:39:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0x0, 0xff0f}, 0x8) close(r2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2000, 0x0) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f00000000c0)) close(r1) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x200, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000180)={0x0, 0x14, 0x0, 0x1, "944cf230c16d846ffedab710e096aa4c994042e329997f71b65bfd1ef960e0d6"}) 18:39:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1179.828674] binder: 10539:10562 ioctl c0306201 20000440 returned -14 [ 1179.844468] binder: undelivered TRANSACTION_ERROR: 29201 18:39:24 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8aaaafffeaaaa10]}, 0x1ff}, 0x1c) 18:39:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(r2, 0xffffffffffffffff, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0xd) socket$inet6(0xa, 0x1000000000002, 0x0) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)=""/188, 0xbc) syz_open_dev$evdev(&(0x7f0000000680)='/dev/input/event#\x00', 0x0, 0x80002) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000500), &(0x7f0000000780)=0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) r4 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2002) r5 = getuid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000340)='./file0\x00', r5, r6) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_int(r7, 0x0, 0xe, &(0x7f0000000000), &(0x7f0000000080)=0x4) fcntl$setown(r4, 0x8, r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0)='.a\xa2\t\x00\x00\x00\xb3\x11J\x98\x8a\x92\xbb\x8a\xb9\xa3\x00\x00\x00\x00\x00\x00v~k\x197(\xec\xa8+7\"\f\xef\x83\xd6g\x86\xda\x96\x84\xc1k\x96\x8dv\x82\xe2\xbbt\xbd\xee2\x9d\x01\xf4\b\xadDd\x12\x8e\xa3\xb8u\x9b\x9b\x8f\xbcRD\xd7\x19\x85[dR2)\xb8\xd5N\x9f\xcf\x87\xe5b\x16>\xb5\xf5y\x9e\xa8\x95\xdbS\xe5\t\x8aQs\xff~\xa8\x1d}\xfc\x1a\xdc\"\xf0\xb4\xac{[\x10\xe1\x91k8S\xd3\x85agLG\xbb\xa1\x17\x06\xd3\xcdE\xacO^V\x17\xa9\xc8\x1e\'D]~\xec\x9b\xb8\xab\xeb\xed\xc5%\xe5\x8b:\xbb\x0f\xe6H\xb6F$\au\xdaG\xe7R\xe2\xf4\xb4&\xe7\xca2\xb5\x02\xc5[\xd1\x90\xa9w\x94\xbby\x1c\xae\x14\xd1\xc21\x95\xab\x1b\x03\xb8\xfe\xb6\x05\x8f\xecB\xed\xbb\x85\x003\xc2\x83\rw\xbd\a\xd4\x8fQ\xeb\xb5\x18\a\xc5\xd2\x82\xdf\xca\x04\xc3\x1c\x95\xf5W\x1d\x1eH\xbd\xe6\xa5{1\xce\xe2\x02\x85\xa1(\x94\xb45\x1f\x97D\x80:\x1bfd\xee\x87,\xbe\xf8s%\x8eK1H\xce=MY!_UF(\x1fK\x1e\xcf\x13;\xd7\xed\f\xad;\xdb\xb0\xfc/l\x13\x9a\x15UYT&n9\xf2\xf3\x86\xe8\xd58\x90\xb2%]\xb1\"=\xea\xce?\x1dV\x17\xc9\x01A\a\xc0\x84\x184\x80\xa7RG\t*\x1e\x84\x11\x17\x02\xb1e\x1c\xc1R\x99\xef\x97\xb1\xe7\xa3\xba\x11\xa2p|\x9bB_\xa4\x99[l\xb3$AO\x85\x12M\xef0\xbc=#Mk\xe8\x98\xb2\x86\xe6\xde\x90m\xab\x9b,\n\x8a\xa3\x00Y\'\x03\xddp\xea\xc5\xf50\xeb\xb6\xe2\x88\xbc\xc6\x81\x87\xdd\x157%\x0eq1\xfa\x99C\xa9bV\xeb\x96\xc0C8\xc8\xc6\x99\t\x8fw\xb0\xf2\x8b\x04)\xf4\x03\xb6\xf1.\xd0\xfe\xe6\x03\xeeR|\x14]\x06\xbd\x82\x92', 0x1ff) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x6, 0x23}, &(0x7f0000000200)=0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x57b218e0c1715261, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x3, 0x0) 18:39:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541f, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400000, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x508, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 1179.936108] protocol 88fb is buggy, dev hsr_slave_0 [ 1179.941271] protocol 88fb is buggy, dev hsr_slave_1 18:39:24 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8aaaafffeaaaa15]}, 0x1ff}, 0x1c) 18:39:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1180.038450] binder: 10590:10591 got transaction to invalid handle [ 1180.044948] binder: 10590:10591 transaction failed 29201/-22, size 24-8 line 2994 [ 1180.053543] binder: 10590:10591 ioctl c0306201 20000440 returned -14 [ 1180.063119] binder_alloc: binder_alloc_mmap_handler: 10590 20001000-20002000 already mapped failed -16 [ 1180.108245] binder: BINDER_SET_CONTEXT_MGR already set [ 1180.123995] binder: 10590:10591 ioctl 40046207 0 returned -16 [ 1180.137793] binder: 10590:10595 got transaction to invalid handle 18:39:24 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r0, r1) exit_group(0x2f) 18:39:24 executing program 3: r0 = socket(0x10, 0x2, 0x0) r1 = dup(r0) write$FUSE_OPEN(r1, &(0x7f0000000000)={0x20, 0x0, 0x2, {0x0, 0x4}}, 0x20) write(r0, &(0x7f0000000480)="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", 0xfc) [ 1180.162141] binder: undelivered TRANSACTION_ERROR: 29201 [ 1180.172475] binder: 10590:10595 transaction failed 29201/-22, size 24-8 line 2994 18:39:24 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8aaaafffeaaaa16]}, 0x1ff}, 0x1c) 18:39:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0x5, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1180.225747] binder: 10590:10595 ioctl c0306201 20000440 returned -14 [ 1180.261991] binder: undelivered TRANSACTION_ERROR: 29201 18:39:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:24 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) fsetxattr$security_ima(r1, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@v1={0x2, "9e2374b8fabd94cae248d75bd3d19e879611"}, 0x13, 0x0) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f00000000c0)) fcntl$setlease(r1, 0x400, 0x8000000000003) 18:39:24 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80010, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x1, 0x30}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r1, 0x8, 0x30}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x19, 0x0, &(0x7f0000000140)) 18:39:24 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) r1 = socket(0x0, 0xe, 0x7fff) connect$bt_rfcomm(r1, &(0x7f0000000180)={0x1f, {0x9, 0x0, 0x4, 0x2, 0x9, 0x5}, 0x80}, 0xa) bind$inet(r0, 0x0, 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@known='security.apparmor\x00') ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000003a80)='/dev/rtc0\x00', 0x8000, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000001c0), &(0x7f0000000200)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x18e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) flistxattr(0xffffffffffffffff, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000340), 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, 0x8) r3 = getpid() ioctl$RTC_WKALM_RD(r2, 0x80287010, 0x0) rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000240)={0x4, 0x0, 0x3, 0x6, 0xfffffffffffffffe, 0x8}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000002680)=0x9f) ptrace(0x10, r3) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) fcntl$getflags(r2, 0x2) set_thread_area(&(0x7f0000002640)={0x3, 0x0, 0x0, 0x20, 0x8, 0x100, 0x0, 0x9, 0x4a, 0x82}) request_key(&(0x7f0000001580)='trusted\x00', &(0x7f00000015c0)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) ptrace$pokeuser(0x6, r3, 0x0, 0x7) ioctl$KDADDIO(r2, 0x4b34, 0x0) 18:39:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0x5, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:25 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x40000, 0x0) r1 = socket(0x10, 0x802, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x6, 0x1, @tid=r2}, &(0x7f0000000140)) write(r1, &(0x7f0000000040)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0005000000", 0xfffffffffffffeb2) 18:39:25 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8aaaafffeaaaa17]}, 0x1ff}, 0x1c) [ 1180.445873] binder: 10625:10628 got transaction to invalid handle [ 1180.473556] binder: 10625:10628 ioctl c0306201 20000440 returned -14 18:39:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xc, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x410001, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000040)={0x4fa2, 0xfd4, 0xfd, &(0x7f00000000c0)="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"}) [ 1180.513106] binder_alloc: binder_alloc_mmap_handler: 10625 20001000-20002000 already mapped failed -16 18:39:25 executing program 3: socket$netlink(0x10, 0x3, 0x4) 18:39:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0x5, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:25 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/userio\x00', 0x22001, 0x0) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000040)={0x7ffffffff002, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x40080, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000140)=0x7) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400180, 0x0) [ 1180.616668] binder: BINDER_SET_CONTEXT_MGR already set [ 1180.622024] binder: 10625:10628 ioctl 40046207 0 returned -16 18:39:25 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8aaaafffeaaaa18]}, 0x1ff}, 0x1c) [ 1180.677346] binder: undelivered TRANSACTION_ERROR: 29201 [ 1180.736117] protocol 88fb is buggy, dev hsr_slave_0 [ 1180.741242] protocol 88fb is buggy, dev hsr_slave_1 [ 1180.773164] misc userio: Invalid payload size 18:39:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000003c80)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000003d80)=0xe8) sendmmsg(r0, &(0x7f0000005940)=[{{&(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbff}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000000c0)="89102f889226f9d1357b63d93c601f49a245d12940864b661afba84cd963a8fd47801cd329a0aa54903526c2dd8a7f21acdd210461022d1f25ab0806b44927fc9d2427ddd60a1757db0eb3575f3a37a59031", 0x52}, {&(0x7f00000002c0)="89d71ac2b29309b8a3019f36f906077aea80880069b4100f4e3f2bfc5bfb7cef1772c9de7c93c3cc9f1d591455b966371926426974b086008cf6891bd29af6e2e353743c55fdf62cf8aa3a35f201bb16756cc26ae48a45f49dabb5eecf5443290927d1d867d9b183feebb33a43c4eaf8881bd04b540994c23b6536fe3a6175fa7ac8b9cad39313091e4169640e9e3677fc5c618d06ddf2f27c0abee5ea", 0x9d}, {&(0x7f0000000140)="8e8a106a89b79168289256c37076b684879898fdb442d8d62926cd59272acb9e1381e9657922817c88084a852f05a03452a1012fa3ec8e12459c1a4421f3cc4ecc27e48424b217de09b8b7b66593c045d3eb168b7775101f94f956254c917eabef2b083492ec0fee459c852d4f4ed6558d5665268d385d8b1cd21fba", 0x7c}, {&(0x7f0000000380)="5d0d4b9a2b3918c294ce9161c79b46530bc4881ece629742837deab1bc44b51b16", 0x21}, {&(0x7f00000003c0)="bbb9fd92d68a1ac121", 0x9}, {&(0x7f0000000400)="e56da10d1317f6", 0x7}, {&(0x7f0000000440)="b0df9ed00c43f8dc4da894e4fbb9b61f59f8234210db6f6e7a1cf863f16c08bd4ea111cf0ce5a99593034329749ee0b56c27a483a95f50b28aa94f74202d534c016a02e380549174", 0x48}, {&(0x7f00000004c0)="6edc98f4a82faa09e992a6d77f53ae46ee9e2a19bf09a2d4faf34f30a091d2aeb925671801c4b83a5f6772ee40aad9f665beff4d7b90afa5e0374c43c2f49086407c8fd6f7281c33f3d80f92c60f6d7c3c35aa0d01712934cbb0077eadb377e3f37bad4ed6e7826755d524a5a5c06183986b29700e8f3ecbff798f5da1f47160cfda12c0341a199fd63dc9c20761dcd051fbf64c14ef3e3ee8a0a75538e3adc9d6684c8caa7a87d6e3218b252dfefc176e115dcd0d30aaf263e13490bd8764c0a720", 0xc2}], 0x8, &(0x7f0000000640)=[{0x108, 0x115, 0x5, "0a08f64a55531ebffff2e13759998c27be0c261762f6cb3544fecfd7fd77f3b0752ad73f87f93e798b43a326c7fe4c6b4d25fd87375d049f97cafe3784394cb3d1359f5e1d7a5e2cbcaffe502c15209f2129047344e598e5ebd74b71dd27b84ee8a27e38c2f29cd462edb7f974ad8a78c81d8ee5f4bd4317ae48a023829763326e0ce0b60d06619c549d1dd77af733cd9ed39f58359aaa81348e1645b12c25cc51d774a440a991207438278e26dba519e8b17958146ed09faee2fea223144d5dec575c4e5e3b93a38c96eaece6018269da0005cca6a3d1a9e57b414e6f243fe788e085019fd46862cd7a5135338f047effa36992"}, {0xc0, 0x112, 0x7f, "cbc997a25179c734947a1390882b0b89d99a5712f19972cbc47b0005bc30ceaa3cf6d8d3a6abe64bea1fd892b7748686ff4498614f90465ff8e4b03adff4a0e295d6dc26076947987318a6cc69350669f08e9781608b399c2a2a1b4990078da8df77a68513f27e8e816a4eb4069b562e9e0ea5dd469bfb2514786149e9cdb7cb141ff9e8d83e97a82362f6e5f173fb26173b8ac0f6990873d4f1cb1e68955ee75edd422d308df9b2d51fe9f4"}, {0xb8, 0x11f, 0x3f, "67644228fdf5a51ce370d68f286491dc34e48079825113a23652a5586822362d76dc712e007153d827922eb93263a0ec355fc70869f4aa8c07723bb3b8cbfb2eef0d32a85d5d73d097d8b658827ccc0bc5e0e5e337798e43893cf656e4e28422589dc8d895fb9140c703a829cadc257c5b55b67eaeb7c8370c78e81cf001c8d1539330ef8ac530c5d71c804970e100a4975a7ebdb6cbdef07611d966b9155d400e5f3be4eb"}, {0xe8, 0x11, 0x4, "b7c699cef7da9d5048367d5e5867c5a7b6118105dd969f1cbf273ec83b405f96541addc99b5657ec77d561a65be72f32a44431c67559051f2355b772241de13e08b787ecd12128c61579d1fe46fc10adb93a30638c5e1f7b7373f2c6ad57ad0f0362c3f64936e6400c5464839459268c96ffe8149b8d80e4ee683f532a1f4f9cf0d5011634a7c9abf388673ed8e0e55830f2c3aa0307b2fa141ec42e00618e5ee5e3e0686646172efd22b2967ada6dd0dab963222f441fca1d1ada7329dc57664b5e225d696e7b67a476bb0852184e09c3ad5de156"}, {0xd8, 0x10f, 0x2, "75bd268ee9ccff6787be3f2e3b69e6ac6f60f1200e2f921284f02569eee521e719a8b74ed68412eb4fa87e683fe5a4610390a7ca80483794219d37eb1e3a2d3d11c69d3fe52f621e1f2379751f543636b0b3a6c25dc0340f49794d275065380e35bf5ef7b99059c07fe28d6eade9ccb197ff9257351a44a4fa3c4dfa03ac03e8d93e0869a4bb7698886a28f7407bc7cf76e2ef320e24d8b477c7797a4a9987bd17249f5b8419ec613d301f4888e5fad733df5862d756a4a65d8627cd4b37e515455fd7e2a6c3fe23"}, {0x50, 0x11f, 0x72, "bd4ae0938925a23effac0f9ee39cb195336d536d7fcc92ff8e94c23a938c6ae0ce40cc09eac1847ceef5f90c24e9bf4afda32108ed1166e7a7246fd5"}, {0x50, 0x1, 0x3, "17c2ab0874ac8d5544299a9d731c4f7a46094b72077984e2804d4967c5daeff7d149446462ffb6b90e55824980440c0aba28ece70c81d041b6280415f5"}, {0x40, 0x113, 0x8001, "715c8d3bb1aa2122e0073daea5466e70a44997da1b863ee265424364b0667f8ed92fa87d51c20253a413a1babe85"}], 0x520}, 0x4}, {{&(0x7f0000000b80)=@vsock={0x28, 0x0, 0x2710, @my=0x1}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000c00)="461e86fa395bd2aea9acefdeb9838d7da47aa76fa4d3614e0187909c82c305018028eccf76a4a383387a04721578d2bdf75e1a37f0ea80fe", 0x38}, {&(0x7f0000000c40)="8ac742925877a54811ae6427e24b2ed4fe952339711c95849bada7979f1b2ef06396d96f3b5515d457a70be2caa7dcace0b9a4102c9bba5f1b6850084f9fc4cc8b04d83cee7db2e9804f2db918859285c1d8cebc9964f3b7b84d9078579e7097d029d7ee51fbb4eede81e342101f520812bfe00d0f616c9bde32a2ba26661e6daf813ef7d09ff4037d7df87acea9533dcc682e824f808c204e359a478cceec5f95beef26be7acea9c56a2ebd4aa527e7c6b3f626595978df117360393ec34dcff7cf4c8bf6bad7e88202d9da38caddc3cb45583ed49507529543b3a8faff0ee5fe1379e2843735d367ef8661d0fceb53", 0xf0}, {&(0x7f0000000d40)="565d369b6d90cab2f29d87e57eec4c54813c61b2d5b3bf5b13773e585cbf01a932c4679b7dfd8976dea12de5b69216b9c394f53681e5d9dec6df270128c7977531d112abba7ab42e33b016dfc2c126187cf3d35fb983ee0f7f8f3cc8c819d32669a12a3afcc913d9535c56843e955fbb6b6d2f97610a25cd5c0a572c055a0bbd63", 0x81}], 0x3, &(0x7f0000000e40)=[{0x58, 0x29, 0x0, "011fe3cacd5a5e10bde71fb4200d0e42dd8528a47bbcfd919bbcbb0f3c79b1c8e959bd73abe91dff3c9eb0e150d741f3d81aa06f7308e19484b562ff068e0a89e77d6d047cdba2f8"}, {0xe0, 0x13f, 0x400, "cd22bda247c58fead6905c74c99b62d1b8fcb76693af37aeb42b6c831d2c1b115059a6d1eca313619bbac1c25a8505b4ed2f931d56053f42a304da032928c2c5958b1583069b05d4ed015814e179e2ed96b7595c25884e1cc36f15a337670f9da525b93a2cc867b89eab8b9d76b2f9ff7b301f58b26b2a1b52d73af8d57351ee97aa6e6f0d5c242c53905c657fe046734cab2e3abb9e8b2a83d3b8982c8703b3330eb1bc6c783947909b337af8b96e05229dc6ca374ca338ee02a630106588b979780df06e54e5da9946b5c117222d"}, {0xb0, 0x88, 0x4, "b81656d79fa1d54dcc16087fc16f121cb009f16b28f7c01667f7721e59971d48c88b7c65e977812ac6d8a4817f9859dc8ebfe2a2a9fe4d4a1a3771f019cdb73ebedfc34a27821fee97fef2629c9644721b934298fac5d7bb87631b91cafb274fb0e81bb4fde4c6608fcc5b1a530e3a735066fae300ab479864f0bbd178c89f335996e977813483da6b01562497331ad7e8f8286e9ce20594ab1a0b28b3bbfad2"}], 0x1e8}, 0x1f}, {{&(0x7f0000001040)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x1, 0x1, 0x1, {0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, [], 0x17}, 0x1}}}, 0x80, &(0x7f0000003440)=[{&(0x7f00000010c0)="652880d6ccf97a4d2b66fa", 0xb}, {&(0x7f0000001100)="24e3c5413d68878c7faa1caef36c6d1f63415d2a6f90ba1cd329190d94d35c248486", 0x22}, {&(0x7f0000001140)="fb1a28215facc6c91dd9146123361db2a8820cbeff2ca2983c2c9259d7c4f934684a7af9b18fc276df05333b9ea03a9a0a052974eaa1e2b711fc318bad6727bfbe9f784fcaa48f6f5e138b064b7a8f498c1d876aaa9c54e2a5bcb565f657f609e4deaa2e87c4ad5e0285531af4b3cdcd053aabb54bbb4e58fca723314b483a313a40ffb18dd34b5f875b06244380ed3cab6697be1e894e75bb948766ff613c9623633a16367cf5ade2a255", 0xab}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="9778e64685dc45db78ca86957c66a4cb04f76470f849d9618e86899a7e3466acef4d44752e443430e352f0992c43a2d678da0e648819ae6ed34db85bd8308bf0fcff5ab0f76aa3ea71a536ed888d6af22daa9e596bfec8b789149c6f489829ed35b597661e503dcdb7346f0e1c45c40b831f335fb86f63308e6e058e297ddcb42266811d21df3c5b0356158768b318ffe7a7a5d73a368878e668188daaf09e1f9413ad232689f0ff18c2ed88eb15caf4156e3851c1223a40472035e16446c4d3420470265ac41886ce5647afec3728d2c9e7ce7c922475a0389ff46c3b34cdf2f320beb76ea4aad9a342bf51ff592ec1bd6eae8b5d95d88e433af0338f99b7829a270602a6231faa51392a7c5735b8b3c17055601ca03aa481e1e3bcbee4d351a667d1f2da3ef61b2bb514de694d7f5fb32d0b9e18f937ae8f7bc4cd67e9db53ef29b9c9e500447c39f1a830994b31736c77db4a69ff50405b499c2dd3ef9061237f68ef294c13c727b495636070c653c56a7b70ba75a1b8be5be873123a4286a45c81380b709984f27b63597338e2938c92bda72fa1e7977da2af935dda1df3bc1f0746cf47074b1cc7c5ed104668b5b06dc22b6419c39c7f5cf8bf92cdd7f004313fb5a3403cfcfb3d43b22ad21a50c83b889c5e71d1af20117c17b0f86a369bf0ada8e7084015b90d1d936d2768afa36434c8ad24a15e472870b6184b12e11994dc2b91f8b4eb3735566533570e3ac5b0531f420e33f20f2dbae7b3d2aba2f65dda896a0aea9fadecba57cace524aedba2199b3a3547c35db293b8305fc22bc2ef2f634bafac5b38968b1360db9e9e3965ded08af031a5a5b03222aac8ec9eb53bd6126afdbc80be2df189477ba945987ef613802ada24db04e1397c61db6a00ae0aab5eea5850aaef415b7b410ba61b3c00a51b9df6cd1abd63c89fe28de93e742b412d38b593db48f3821c8cd4a9d5a78734597fe9060b9370e8539349d6a48d3e07ca2e77bd0ef6a150557d95b0f3890f8240670cb6a01cc6c3006873db64959aa7c9bcdd5063599e4cac8f751de41c7e8de7080267dd19bc8840c46fcc251885b529d24ba2035b15ccce240275052e69e4dcb39fb0b6c16baacf72a513f36d7ade35b95024957dca61edca4748ac4d96cade0aa233ea158f68c97c0466aac71903e5d7df8bff42c2895b1c7b9916bb94f8b0d483dffa4bcf84bed8f5310ea9804102859545484d75b58e2604f3941b3da0160535caaee9f9efd68c861fc2a79c99f2f1dd857628fb7611626d1e3aca8f8a4ec9d3500cf7b5cfe9307ffe41b7ca50a9536185e7adc7088bb7195566e31acb46314e6a2d9e26227b129f0ca064aa1bf595f2645f51c977e4b8df908e6b98d561d5aa5d6b8627c4f48dd7db791709c69bd8b6346ce5a3fa4139a13cf73f1894b63334b77b5c9f6bee8bcb470e687962fe6bb9ded43beab0eecc2f76a857ded741539a31619f54429a4d34459900789de8ac734394e1f418dc648f38dc7d2361fb50ab513c56e8c9f89133f64386dc074edf564305c35c61ef54764aa9f741eb5dfbcc42130ab4574a793e14e6d964b4740f88072550af04f592755046309db13441b69820e6b8b2d038556ad13ca1de5ebff01486546696d4fb2b61b1ec42d6df4ac53b4809e12bd5e39e3ffd6a2dcb39eb250be6980b269b77ceb95420885540db09074629c061d17845de814cf585b8f2b1fc982f176dae2468278ba6783a46dfbadd79409b45e9b022e03e8916e7cfba26553cbcd1a315f023f31779bc156482a5c0f1d0ae43dcdf22dfb1228045cd7bc70ff07eeeabf8c32590ee959cd2e2e771b56245243e543892d403d65f98f5c900993802efa9b03ffe27cea882b904f55323605bb4f481404fe3de6724ed2ed8a10ebaca9395597daf1802b204c30f4137336cb24b9d265f10ab532fac7bcd999ddf9d28d7727b4cee333340ce416803c04ec8810b6e879aa668bdc11ed36a94665c05fb58a68d2770f1a867f78fd900e3ea3a15bd3012e951c638cae028beaec6b47e0a933c48518ca4eb9252eeafcdbb1f57b61cb9ff90a8dd52e4619adae6204144cbef4e97d67bd9e9cefd1b8afebd60e6821eedea34342adf28407b2c146530f664b6bcb856ce5daace1355b1930a235cf27ccad385fe75aad1ca5578d6089d6eb8e92a0af63489c2cbfdc6770bd5f49e169169ce97cfd60598b18268d54bc1173bcd08f733c9213f9cbbb16e90167c2f5fd7d427980b674ed86f1e91bb29c0091456063e228d4722f6fbeb2053801c6b4a36821114b4bd708c25032ec9201b7f47732a6945d5c8f321f6fdcf57db0f6ee17b71bfbf928743abeeb6edeb575530bca9d7d306d372e5e1231a2405e5a2b2fec54137b12db488846f466f3f43f9ad8677ac848933fbcd8ab63e248ae0d9cf3251dda58666638e4046d6ee37c4e07ff6bb025c74f0ff1df095a5dc917e51380d8ebf76ed314d169b9d4bdb8b1343b55d18e3d90595e61711ff1fb5f14fad4ae7909ca05696cbb7d8894d30d6aef0bb68291832a24f529633271b3081ed5eb73f2aba9240c4b5c6c841b6b938f87e23b5844f8e26bf5b7c7dc2f85213a2b501b281a6c91a1407aa56748b7b94f553290102edd45b9b12e0fafdd3a1478c1b90b76832e551023e69a33cb956e753708b49e63f5546b5a3430d5f07faa08e82609385d7630c29d9af52caecb6dff103025e9b2ba1bdd7512fc664e3ac411ec7b0f5b12b1812eaa1ea1ace51e2c514a07d56841ebee6c930768d477e97a672a0bbe9239dfba534972b69f673d7c25a8e0296b4dd1a93c999b44c91beeaae869d718b6542acf2ddbeb02cd3f03a42ed844c80b40be6f7eee9a51e1b764cbf754d59728d3bcd3adbdeb0f74abdbe8cb5cda7de13d8ee2d0b726e1ac7391afbf5f6b6d82218a8eb7fa236f7ce020160c3321a968db2910e2abe84b3d3dca57699def032937e73c2519e73bce8ff1cc744a929c87f3a0d9777cec5bdac261e85c8525595cbd673d2c135f4bb5066a9b9d4fad479d1632919dac4fa5769a3c53cebf1972ca3a4c7251cbb3bf49fc7ed4671a5be3dac8d0b2c2d59765b14398cdd5c1062ea32c2c3ad2526399ee4f6aed60117dc070bef5da55a0d98d5f5eea562e17feab3d8a533639449bcab907647b7c1e1f82f138ce3d16e27c92257c5dba2c1b97f7e08748cad1b0d4593037faa3203c74a1b5348497075c39fe346f8062ff5907301c1ebcd04bc677e04548ab580b912c3c12f01c50126995967256f389f56750009abc95f449089c2b4e1a560dfdc75fd71da7e8da9ea8da2ccadaaa38fb1fb3f995604afd24b414a11ffaf57c8ba5f2c19267c8409b868a072ccaee06c648f90ba551f9094633fa75f0aed0ccd8683ba7eadfe88b32557792bd690e887088c39ff3473a3fddf918d4c0e22ecbdab0fa72b6c31db867099290efcf1db9ffb73683fe465a72f33c7bfead68fce8220751165c8072e5ec006112762963e2af1a1cf3439e1305fd3c3b0c59f5cd608e37cc9d0e33debe906d7471ba38b16c63a22857e0676890dbb0d7a841f1ea5ccb5d4080aa9aa22640e4ac3ba86afc0b8f9c4bd0b367b5b34225fee5e3529cd1ac062f7071080d2963532f4b582fc213831750bf76f2aa6f99852034feb0d21832d690bb4e6b66d28ee44d65473cc53e77d5df162b487716b589aba76ccd7fd9103fe8bf3a53d0c9ebbf05f65984c6edd0603d1b954e3a75fd8796feb207b2ba63a0c5da493333c9c16c14a6e8815e8f2b43d5bdc9756e9f8555c5f472dd7f1bbb92322b7b1c581deac54556118b3a9769cab424a99d0042d14e446120e09b91039254bd779e20d1eedf9856c10f51596d4861add4c3be9ef84c4b1719e0c400325c62ba09762fb1b14de2b2a795489c1fa7a997d85ba53089442dbd6d390c1886bf860220b01a2a66721588ebd9bebf1dd18be3add6d57478a37d9b8a12585d1d0d5cbb8ea9410b541bb35e44cea8cbe9aab26dfac53e466dff1de953bcaa3e31a29a42f8452fc052151745b15b6afe34c9cd714297363782633d7d9d41e0e67aeb76944aafdf7f73ee88df17ec307e32177004ddf6241b90639f4b3e05ddd27ffd9d4f0bb19f4ddf931e0955a691a821b3a15f97df287dd25d9763c03e8f5c568b1af265b14f0c485f8290ce1d157a3b6f8cc78cc6197dd1fe6765500707c53d5c8b468c71de9cc95c56702b0fe661dafc9dfa0e70a76705e855880591db29c1a8f04b8dbc4ff0f470de088028683589f5fc560244b50cabca21a394d561234d1a19605bf5130c391cd41c8d8bf20cd0bd4384497a230d67e171c3f1e8c2e1c66fe8e7641fbbc275dab6f3c4eef507773a00a059a2ae3e488f280c53122f3702b548c0a0d883cfb4e171d82204280de159fa7aaa60d50a702abd58379bb8355b744a770ce5bd761b2f9ee5e8994d7083c6bc2afb006321a471d46c31b4bedc856288e20ceb1f876ec0aef87a011860e9cfbc1441b62138d2ffc81cb927bec47eb26ef0cbfdb1b66120c3dea0867d063135a2453adcc70596f307ee5d4ef626ba232ec61b5c90053cd7f5c1e917f4d8267a782195c7e7dc235f5b0878dec94902a0d7e72d423a68d31a8e3d096320076c9666b9c1fc5cd446ba6451e5ff4324c7bb2178725a629fd2f020322fcf6dcbed013ec3fe5b37e45b7d7df5fd281df59e247abb226a4c11edff3832d342412f29271dbdab22beb40ec0f1cfd389ef2764daf50a168954608c2a41d0a29caf4fdfac4d201b45090c14e29fde112e1cafcd675c1a2bc48b3c7d86b2a932f55ad607e658f74de25a361a98ca29f840f66a7ddf814bd33d0bb73d57d0193bda7fa78737cf82a74b318c878ca901b4253f4a028312b4597076734dea4579782326f38e4c24b1870235331a9f9d6120806df7f2a8c9ecf51a5b3bf31ed21edb8dcc293e2a280cbc3f782068dc2333c6c7e973d5c4c983d23414c66f4168b0af0a86eafda4006ec656bf0cc66b7d4f7c99c077938789cb6a1108a434c84a336efb7a7f935383ae3e8cd7349e3956713a3794aa287947cb34ddf80041b1eea904e489f7f23c1e892ccad152fa42873dc4af6c03d81a73ab7afa13b224edc971f73cbe791d6130f74fcc95ff2aadced6a604bffc6af80da8152f514228e9ff2c69033bed6d11eba5954ed2f21eee4aa492f4d72045efcebd1709a4cf11d08c8f17ed486ea57e80dbed827b53476664232b6a11815dcff86f5b2a1be66ef864cb06dd3221a4fdfdbc152f7be79d0b437c1430598168d8c3309745785163b88586fa6df1f0bdaed3c5ec593c00adc78a04d2996a528bc60d35f7dcc7e6e017d49e34de27d24392d80a39f36ce7c5385e21d86ece059d6c94cb6c780d212c8a4a1ed6f99ff2ac35ccc3a832169f983cb7a881642135a2c2199e0bcf92130c93fa3f882f0fbb24a09add921bb91b609cba6787cd2e8c97ca244ccc6633a46c898091a1e5b7d8993fd335a7d6cf596d883eaf713b6185353fd9a351b16c67f04be0fda513cfadfea9bc0b044d13acc0a6defc5587f9da11e7cc0e0fe160bff256211ee7d424014863ac79e0d5bdb390029f5f180715ac499a89976442e2077e893607c0dbbaf02eaaef13b464372fc80ed776fa238d008800172881a06bf86e50b475716e066068c0d01112f17c93e92ee17dc7f1d86ed03ff9a602f8107a587de1c5df5140f1895a48b48129694e728a1988c374292a555647317bb066b9d20ab1d744fe615c51c11d1bcda1ac27c1ca", 0x1000}, {&(0x7f0000003200)="44f1929b7622c2de036d0abd6b5a92364e8d5f60cbced6dd83effbef2fc7c00671a2e57fed236d11a7e2295dc84d69710eb72b309839eaa38b73f910ead9fc2b615c4a60220a3d46b07b0421b8bbacaaecbaf5d9b8ee183029e60aa146bc1a343abef7264674f1e8fc4e545eaf50e2e1df7eec173071f8d8e0335a027a93e6cd53d7fd1bbb0e2674f388e2a05974979cd680330d7991d863fa410cb54c60", 0x9e}, {&(0x7f00000032c0)="d724e93b52054205a76018c83b41793610fa1174a6ad7654938ae7b9f4476a488f4c50377ee71bb7c18d6476bdf96b0f607eed501be7287e4b58e0bda10c30f1d39dc181c9a3de9c0fd747d7552065f695cd2753125c61f79704c51586c5089e7fc93514f1b56046f20fdf4651e6d98f34af406e3b0e1b1b041ad248702d2ba1", 0x80}, {&(0x7f0000003340)="6d00c6b2a46ad013c3cefb9f2e43e67758f85d607d8fa861bce925d73f135597c464a563b0", 0x25}, {&(0x7f0000003380)="5b08b0f6cb5409802ce6b2705d501440d8613d11cc215cb7f256f9e7c23df29e9b86444944f6e398c123060da217aef11816d8af0f6b16b63b7d3d5f0b85a0e4820c34cb842c703ceef0b6fd434df56bdf08e5d2fd5cb673e71de38ad0623257954a06f0da2dd5cda647565256b26707f6c590c8731022e1de82b68fd71385e009d7db1b", 0x84}], 0x9, &(0x7f0000003500)=[{0xa0, 0x3a, 0x9, "04d6d60081bba91876e880290b86cae217c461e7eae10147b0957d0816cbd8e61e4d5043f2f61dce3f7b94fdccef06547a8af8330ffee88a052604a6dddadc3dc1c418d8b2fe05ee39153e062c955c98b30e4f7f6b9229726e2181ef1bf3dc5b2d4c916fc858993dbe8a730ec73761b312932e23389c6416b5e032460fd86e6a70c6a7f4e75def80a2efc5b6de670d"}, {0x48, 0x101, 0xffffffffffffff63, "7cd7be2d22655c8db6ec2975d0bc2e34aeefcc75763e8188e6673b9baeef2620c8d205968abe7e379628cf8c93462c376778476e"}, {0x80, 0x108, 0x4, "61004d0d71da047814b07e40afd2541b41973052a0ab101657d9a66f475f285352d65a96c331160074efa42ef28b6592bf23255245bb0aaa049b72ad81b5c923aa4f4c7b6a173b1642f4cfe1bf0ecb3d99b5d883af76e4a0215fc78654ed089174ecf2e89156d7bf49c1f441c35b"}, {0x50, 0x110, 0x6, "52fbba30273930eb5609203ebc5284761939c03e40520853aa3c12001dfff33ab4b04db287059680ec4f1beb6aa6ccfd763ad89bcca301d179086a407839"}], 0x1b8}, 0xf555}, {{0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f00000036c0)="e0bbf93a56efc896382b", 0xa}, {&(0x7f0000003700)="284c7bd9e6a8d1f1f061fcbbf9d3a0cec9198fb23d972e31606458c8fabcd260129589d176718af1936e7402ea324fb979f99d94b78d88470e649d7ff3e9aa28c55ae7104a64799ffe58fac336926a153f48a4d26a4e9d292d2f88b6db5d1664d09035661c6316980ca8bb295b63c75383762068a03a26e9b3e96e70093828b1408eda1cdd9d6fd16048e4aa0f95dc7184f0072e36177dda66b2283b9777cee6142a7cc9fc1737e09624dc838b9a0b4bd067aa1a25b9f94228d1bbb1e3e249623e8a4a49421c678ddd9aa829225450043fba1b16e9d8d958020191a57e2264bf68e419b85aac207701320cabcb8c8b", 0xef}, {&(0x7f0000003800)="111d53155c7979d33051352f", 0xc}, {&(0x7f0000003840)="fab736761791ed643e4701cb542ac010aa3b97ccc303ff3d82d1c41493105f583d2857ea9f4a40c58e8891645fd3884044dc99a9e4dcfab83a635c5fdab2f2a83fb07bfcc50c22b2a6ef3cab741130f1f9d7bfcf7786defc8b0ee7ecac63274473f7949fdfc5dcaab516f0f1770c058af158", 0x72}, {&(0x7f00000038c0)="eed417443fe3f9e7f60e80badd99b00ee84d7566bbfb633fa68ab18e9b4bf7e2158382df89947c63b11d09b542a8da472ed4b30c226f9ac0cb21bd6ec13ffb1217abcf3b53cf0ef02dcb6ef5baefd63064fddd9b7e3d67ac05f4b28a05b5607e33a981ad7c6738ee92e9b9173dca8dcd79fab8c988e69287b4d8ac5bccaa0e326b6938f674cf0619ab94c5e1c7798891685734a9fb698221858ef8b0b60abbed31caaea27f9a0a1fff67d311c73b8b0677b44c", 0xb3}, {&(0x7f0000003980)="5a947f607a43a8ce23e7168519615b2b9235d8dbf381bd15b86199975258708df2fd376ea3b21f6c74371bfceb48df1bf4fd633a7c6dd2be67a1687740f84708ba8d7b2c40d326342ccd102540037d10acc4d71f9a14c2cf79f5a581428c462a1649a070081d4f95263856f7b213e5aee40d676be5999fe6b0708114dc7ca3c026e779f066ad87acf677705b043cc2fdccb1249bb1f2d4dda311ab24548a65af32d644b1418f5e5a2afc1a17e74b0b88758f5e46828da7e352d05094f266578cfc146017dac14674e20ba8dfade0041f5d616ec80229", 0xd6}], 0x6}, 0xfe}, {{&(0x7f0000003b00)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @local}, 0x3, 0x3, 0x4, 0x3}}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003b80)="de9489f9bf54e84494fb037a445e18b7250c26b71e0d78e7049f112b15db136b82aaa6bc77d4aa685ae9968306247f3b324aaa6f1ebe74e4b8059f816ba0a6fa11bd5b9bcbedd36a692b10d4760ed6b4c894e26f804c176377ae6cb356f05dbba5e8a604c83b48afb9984b5b335b089da24f9123f63e5965bc586e5d364f7ea0ea63906c890ebe635d42278bbb531b111a2cb474d9b6ae8d0afa409191e5c268936e5e9629e5c46b1e290e69124a907da2466ec81c", 0xb5}], 0x1}, 0x6}, {{&(0x7f0000003dc0)=@ll={0x11, 0x19, r1}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003e40)="3de2e588f097ddd372b65fd21d9780b12ca72dc28b51bf364f1ef75a785bccfcbce2bd04908144dd565fb9b57e8c5f17433dc42610ad970043113e0a35e6ae970e2cf4133f63b2d25aaf7e27a2936c0fbc66ec2cc74106cc5b1f65a583b5d1d222bacc54c96f859185acf390a5f91fed9604e718ef1b2b681712374ef7eafc27370ff42717485b4099218c66ce4dee43b62c33dba33c36defbcf250d83762f46517cbd438f8731bac7387ac00fc6ae8f76e7f31d1de7b64f928a926ef49ce1941e8f2bd9784cf851c350d974363612284faebd84a73699ede2bbb44f47c009fca363", 0xe2}], 0x1}, 0x2}, {{&(0x7f0000003f80)=@rc={0x1f, {0x2, 0x100000001, 0xfffffffffffffffd, 0x38d5, 0x1, 0x400}, 0xffffffff00000}, 0x80, &(0x7f0000004040)=[{&(0x7f0000004000)="63d0118acf38af67fd3730a352e99742c3f601492ac8f0be62136eba19f0", 0x1e}], 0x1, &(0x7f0000004080)=[{0xb0, 0x11e, 0x81, "2a69da015048e83dad872c5f25a4e0af42579cb1a9762495ff184438f84b051f0e54198cc8fec43629ee5cbcafedaea780ad5d06f40473d5cb2a8ee0d7440470fc1315b2935602b34c4335ac4624c042443832b77ba96059c560d2ef5378e69f39e565a913a7f66a799b272d624efb1573ccd7fc2bb06ca8a133438fe90abb20b8bd9a66e50272955db3719a59c5645cc871bc8dca2694cece38"}, {0x1010, 0x111, 0x0, "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"}, {0x60, 0x116, 0x80000000, "ac1d99c98e874fe2efc382d26693530534a57a2e07978dd1c6baddf0626a19b92562d3c49d4ded7686c0d2bcd90064dbf36b297dbcd7243a94f8706d989eac821b3323f36779ec72b67005b75034"}, {0x68, 0x11f, 0x3, "2a133ab1faa413876a4f21d09dab12a495670cfeb6dfea457de7d1fcdeead06d4f65ea5e7d99bb756b99707aded07f63d4c0ca5a7f3111b1598f6d920fac08d9fc04c545b3f6d0ba9aa20dc0910879eb48a862fd54d9"}, {0x40, 0x85, 0x100000000, "bcb25e7b996b8de905c277dd40491c60b0eb66836ad36dce175f2432556e70eabec0334c4fb2e150c9f02c3369593dd5"}, {0x68, 0x113, 0x100, "6f9b176b774fc474385c80fbb49541dd52d528eafbbfd8e32a0f17d4459940503b71b33130de863ccd63113d21a285cce5ed77347f0adadcb455ee258cefa94bf216b3cfc606d8dfec10202b3e80daf6577828a06130"}, {0x80, 0x6, 0x8, "887c88454a8c0b9e247def47dcc590e98f5124c9597654a04d59fdaf988f510436dbfb23839ab7a3df9ab9027651e8d72a09f3abb69b12c5d237a7bdcac3d33a00e9fb472f8b93b850266bf922970a2a4b7154119908c4bd458c8d04700f9aababfbd9553e9e7c33a8a5827a9d7c61"}, {0xc0, 0x118, 0x0, "ac7b553f417acbeeff6e4e6f40d8a025eb9732ad8d8112b85a2672a96832cc4706d9a8994058b37cf8d09cdf676b11621d1353396a611d2a2b28fa4bdcc3a7c92b69064914621f363ba59761a91386e4f86e701d0f12adaceae18758c6d1751a34d1dd169e1712d7faa6b74dea1bcf5c69c85012848ea226f78937311bef64261c0d5355ff337ad6569ba524463a2abf2c14967485e0dd0f03dc82bceac5bb1335b14fb502bab6f254a80a"}], 0x1370}, 0x80000001}, {{&(0x7f0000005400)=@in={0x2, 0x4e24, @rand_addr=0xa000}, 0x80, &(0x7f00000058c0)=[{&(0x7f0000005480)="bf8076d78c0edfd98f7a3ebeaa5e2dd07b236e03f525d2e926563d7db72c02adaa5c35a29c684c4a0369d1ccf6dd2541ad46be509140613c555b1eed23694c9a5b4b9634bda93abae98a6621e6eeb0bb599b6d62420e3a9b58d2369cf1c11a2091bec13422776eaee6c317c0734ba601eabcf5e318454165c0ea5fd9ceb6e1cbba37d1ed610a7c98760644c4d59333192496137befb4c15afeed676241deeb2772d2de3f4ff8438591a8678483be6667083e0a63fff4238a35e8fdc1d80d0b0418f99592a0a3a96bb3d85e798e4f09947558282cc4902006120ee93c2b6bba1f202e4a748fb3", 0xe6}, {&(0x7f0000005580)="f8e098c28cd7a43f82d8411f3fc9360617a54329f5105f14971e1b4d86b59586f8618b25008c7bc1b5d8ef002d70107f542ec37f0869d64003a0f64840b1de874ad42cc594f2939639ae5a", 0x4b}, {&(0x7f0000005600)="a0eb50c3cf7c8f6c7746e322b97414db19df35f6d8f099ba3472865589e074454c7fbbc20edfb1b183f5598469a9729ace53a8f9a2961459244bdd301645bc7f336b2b4fa5c4e45a40ad96b7ce3857e3be996890e1536c33429181a6153dbd766d4422819904170efe07230562eb2f8c627fea859a10cf5ffee0ccf850e9b82a10cd9882101dc3171ae3000fa643676034ed53fb51fa426e292f442190de7c665034df4264c3a2b229cbb1fdbf8d6da4a7ea0a7d5a5a3b7e67cb0b0fd2cd568462e380c9beaf60a4e97b3a298f8f0a5a989270dff656ad84b3850b20564d", 0xde}, {&(0x7f0000005700)="bba205b5e02434065118507e1446679bcfac68c53805e846e6", 0x19}, {&(0x7f0000005740)="b233066df1bdfc23e2c74ea886eae2b8a498221a91d98a9353ecfab8a24b7ed9a802", 0x22}, {&(0x7f0000005780)}, {&(0x7f00000057c0)="26eb8079b5e95ee298c04dd4c7bd796d6d0d812ca6645d7a8e7b5bc0249026b0cf99c10381817fcc7e9107829c3df84682ea2507876be6480f9993391ab756b34aa0078e8e27b663be77785ff8ab446788b4d368997585477126cae435b686765c2af0f0bda1001bc7576611d3e459f55bc4c401d6d8e428eb84cd201e4c2cca07dc0d29600031839b5a15dc5678a318f8f6bbd6c0de2cec734fc7a394516dbe384662f03aaa4b5fca11db160b4a054d7d16c8ad28869d2884b29490809031b70462b29dac1b9dc0f9f6d4", 0xcb}], 0x7}, 0x9}], 0x8, 0x4001) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x8) r2 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in6=@mcast2}}, 0xe8) dup2(r2, r0) 18:39:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, 0x0, 0x10) [ 1180.805425] misc userio: Invalid payload size [ 1180.881045] binder: 10676:10677 got transaction to invalid handle 18:39:25 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8aaaafffeaaaa19]}, 0x1ff}, 0x1c) [ 1180.924633] binder: 10676:10677 ioctl c0306201 20000440 returned -14 18:39:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, 0x0, 0x10) 18:39:25 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{}, {}]}) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x5385, &(0x7f0000000540)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:39:25 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7ff0000000000, 0x448000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x28, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000180)=0x1fd8d15a) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f00000001c0)) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x180) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) renameat2(r2, &(0x7f0000000280)='./file0\x00', r2, &(0x7f00000002c0)='./file0\x00', 0x1) r3 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x80000001, 0x400) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000380)='fd/4\x00') ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f00000003c0)) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r6, 0x2, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f00000005c0)={0x7fffffff, 0x0, 0x2e, "ae5af014840385c65a02dfd32f91052054a3e8c854eebb0c53056199112d73610d16d2196f17b436d57853eaf0a4c78400b9b959800ceca476a3a079", 0x29, "690cd8c1ae4ba0071c9fb3936ab3431fe87f83e576c4cd5df35f61cfa705b66982ce5d1edd40cea8dcb532cc7f8b6372c6495726d98bb5942926309a", 0x60}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r7, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) lookup_dcookie(0x862, &(0x7f00000007c0)=""/231, 0xe7) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f00000008c0)) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000900)={0x2, @random="6019655d0505"}) mount(&(0x7f0000000940)=@filename='./file0\x00', &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='pstore\x00', 0x8000, 0x0) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f0000000a00)={'nat\x00'}, &(0x7f0000000a80)=0x78) prctl$PR_SET_UNALIGN(0x6, 0x3) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000ac0)) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000b00)) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, &(0x7f0000000b40)={0x2, 0x10de, 0x8}) epoll_create(0x80000000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000b80)) [ 1180.998114] binder_alloc: binder_alloc_mmap_handler: 10676 20001000-20002000 already mapped failed -16 [ 1181.100280] binder: BINDER_SET_CONTEXT_MGR already set [ 1181.133424] binder: 10676:10677 ioctl 40046207 0 returned -16 [ 1181.189786] binder: 10676:10700 got transaction to invalid handle [ 1181.249795] binder: undelivered TRANSACTION_ERROR: 29201 [ 1181.257921] binder: 10676:10700 ioctl c0306201 20000440 returned -14 [ 1181.303888] binder: undelivered TRANSACTION_ERROR: 29201 18:39:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xc, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x410001, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000040)={0x4fa2, 0xfd4, 0xfd, &(0x7f00000000c0)="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"}) 18:39:26 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x101000) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000280)={0x0, 0x0, 0x2080, {0xd002, 0x4, 0x3}, [], "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", "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"}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[@ANYRES32], 0xffffffee) bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0xffffffffffffff2c) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r1, 0x0, r5, 0x0, 0x200000, 0x0) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.metacopy\x00', &(0x7f00000000c0)='+!@em0\x00', 0x7, 0x2) 18:39:26 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8aaaafffeaaaa1a]}, 0x1ff}, 0x1c) 18:39:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, 0x0, 0x10) 18:39:26 executing program 3: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x2) ppoll(&(0x7f0000000040)=[{r1, 0x3121}, {r2, 0x9002}], 0x2, &(0x7f0000000100), &(0x7f00000000c0)={0x8589}, 0x8) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x800000, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x23) 18:39:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1181.726720] binder: 10717:10718 got transaction to invalid handle [ 1181.755362] binder: 10717:10718 ioctl c0306201 20000440 returned -14 18:39:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:26 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8aaaafffeaaaa1b]}, 0x1ff}, 0x1c) [ 1181.786831] binder_alloc: binder_alloc_mmap_handler: 10717 20001000-20002000 already mapped failed -16 [ 1181.825005] binder: BINDER_SET_CONTEXT_MGR already set 18:39:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0xa000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000040)="420f017000b8010000000f01d9c481f96e2a0f22e626410fc9363e3e0fd90d00800000430f01efc4837917d50066baa00066ed450f01df", 0x37}], 0x1, 0x0, 0x0, 0x3a8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r4, 0xc028564e, &(0x7f0000000180)={0x3, 0x1, [0x6, 0x7, 0x4, 0x80000001, 0x80, 0x9, 0x0, 0x10001]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1181.856889] binder: 10717:10718 ioctl 40046207 0 returned -16 [ 1181.891084] binder: undelivered TRANSACTION_ERROR: 29201 18:39:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xff600000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:26 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8aaaafffeaaaa1c]}, 0x1ff}, 0x1c) [ 1182.126983] binder: 10742:10744 got transaction to invalid handle [ 1182.165208] binder: 10742:10744 ioctl c0306201 20000440 returned -14 [ 1182.221220] binder_alloc: binder_alloc_mmap_handler: 10742 20001000-20002000 already mapped failed -16 [ 1182.307963] binder: BINDER_SET_CONTEXT_MGR already set [ 1182.326316] binder: 10742:10744 ioctl 40046207 0 returned -16 [ 1182.349845] binder: 10742:10751 got transaction to invalid handle [ 1182.372269] binder: 10742:10751 ioctl c0306201 20000440 returned -14 18:39:27 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x0, 0x103000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/netstat\x00') r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_buf(r3, 0x6, 0xf, &(0x7f00000001c0)="f0dda10c95a8ca24bc23e715e09a07e4bc846258a04492bd4983e196a73e6213868af9b704400e4e1ebfbc21097f8be3a45cf2f856354ff2690ff829eda554b91af54a67aef525e0951a37fc550f9a8ad3e2748f64fe4f4d83b4f5d26c263961560f3fbda53296f3ac154af32521819006d4", 0x72) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000380)={0x20000000000003e2, &(0x7f00000002c0)=[{0x106, 0x0, 0x2, 0xe8}]}, 0xfffffffffffffffd) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000a80)="d85e678e676090b1343eb9c52bd02479d0747d8b2ab1410220300dba233c5193d6240d4a4d3d2a693cc7b07ce79ebbae29f214bee98043109616a4205ae885b9fa8c3b79353fa61bf3da3d814e673a4e0524a241d81a07f6dd09e1d0e34871ddf209e2e0ea4539e15d", 0x69}], 0x1) vmsplice(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000740)="6d6455a522feabccd94bc50808fc1da0b6445f6a56b5c122d4888da8878888ed59b78cab6e0627fd046002bea8084ee5592cb0e8c7d56a27b7c5704a696b81cb", 0x40}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x1}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={r4, 0x7fffffff, 0x4b73, 0xb7, 0x40, 0x6}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x169) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 18:39:27 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x6}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00003e1000/0x3000)=nil, 0x3000}, 0x1}) r1 = userfaultfd(0x0) clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0) close(r1) read(r0, &(0x7f00000000c0)=""/126, 0x7e) nanosleep(&(0x7f0000000180)={0x77359400}, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000000)={r2, 0x7fff, 0x0, "4732a6cf2b8fbb4c0be171040b19b67276d4f832db"}) 18:39:27 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x2, 0x3, 0x7f) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x6000, 0x4) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 18:39:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:27 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8aaaafffeaaaa1d]}, 0x1ff}, 0x1c) 18:39:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:27 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8aaaafffeaaaa1e]}, 0x1ff}, 0x1c) 18:39:27 executing program 2: lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', '\x00'}, &(0x7f0000000080)=""/27, 0x1b) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sessionid\x00') exit(0x0) getdents64(r0, 0x0, 0x0) [ 1182.757470] binder: 10761:10771 ioctl c0306201 20000440 returned -14 [ 1182.794534] binder_alloc: binder_alloc_mmap_handler: 10761 20001000-20002000 already mapped failed -16 18:39:27 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8aaaafffeaaaa1f]}, 0x1ff}, 0x1c) [ 1182.884060] binder_alloc: 10761: binder_alloc_buf, no vma [ 1182.893345] binder_transaction: 6 callbacks suppressed [ 1182.893365] binder: 10761:10777 transaction failed 29189/-3, size 24-8 line 3147 [ 1182.913050] binder: BINDER_SET_CONTEXT_MGR already set [ 1182.918508] binder: 10761:10787 ioctl 40046207 0 returned -16 [ 1182.924554] binder: 10761:10777 ioctl c0306201 20000440 returned -14 [ 1182.943191] binder: release 10761:10771 transaction 588 out, still active [ 1182.959333] binder: unexpected work type, 4, not freed [ 1182.982897] binder: undelivered TRANSACTION_COMPLETE 18:39:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x60ffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:27 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8aaaafffeaaaa20]}, 0x1ff}, 0x1c) [ 1183.005479] binder: send failed reply for transaction 588, target dead 18:39:27 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8aaaafffeaaaa21]}, 0x1ff}, 0x1c) [ 1183.114302] binder: 10797:10799 transaction failed 29201/-22, size 24-8 line 2994 [ 1183.122195] binder: 10797:10799 ioctl c0306201 20000440 returned -14 [ 1183.130800] binder_alloc: binder_alloc_mmap_handler: 10797 20001000-20002000 already mapped failed -16 [ 1183.142913] binder: BINDER_SET_CONTEXT_MGR already set [ 1183.158828] binder: 10797:10799 ioctl 40046207 0 returned -16 [ 1183.161612] binder: 10797:10800 transaction failed 29201/-22, size 24-8 line 2994 [ 1183.188169] binder: 10797:10800 ioctl c0306201 20000440 returned -14 18:39:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:28 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000000)=""/8) r1 = socket$inet6(0xa, 0x1, 0x8012004000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x3}, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 18:39:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:28 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8aaaafffeaaaa22]}, 0x1ff}, 0x1c) 18:39:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x740000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:28 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000140)=0x80000004, 0xfffffffffffffdbf) 18:39:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:28 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x9) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x9, 0xf93, 0x8e2}) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1183.728069] binder: 10818:10820 ioctl c0306201 20000440 returned -14 18:39:28 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8aaaafffeaaaa24]}, 0x1ff}, 0x1c) [ 1183.780496] binder_alloc: binder_alloc_mmap_handler: 10818 20001000-20002000 already mapped failed -16 18:39:28 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ioprio_get$pid(0x0, r0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x800000000000002, 0x0, &(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x80033d, 0x20000000209, 0x0, 0xffffffffffffffff}) r4 = dup2(r1, r3) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000000)={0x9cf0000008, 0x7}) 18:39:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1183.865151] binder: BINDER_SET_CONTEXT_MGR already set [ 1183.898589] binder: 10818:10840 ioctl 40046207 0 returned -16 [ 1183.912075] binder: release 10818:10820 transaction 596 out, still active [ 1183.917043] binder_alloc: 10818: binder_alloc_buf, no vma [ 1183.925771] binder: unexpected work type, 4, not freed 18:39:28 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8aaaafffeaaaa28]}, 0x1ff}, 0x1c) 18:39:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x10) 18:39:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000040)={0x7fffffff, 0x0, 0x1}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x1, 0x1b0, [0x20000340, 0x0, 0x0, 0x20000370, 0x200003a0], 0x0, 0x0, &(0x7f0000000340)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x15, 0x0, 0x0, 'vcan0\x00', 'rose0\x00', 'rose0\x00', 'veth0_to_team\x00', @link_local, [], @broadcast, [], 0xa8, 0xa8, 0x120, [@cluster={'cluster\x00', 0x10, {{0x0, 0x80}}}]}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "21d1f19bf80fa1bac9b665f398c86131ecccae30fbd509fc864d4871efd20c71c8f750df6b644ca6fea88be2689d2098dd8231ea7e6d012b87b612bbf065f67a"}}}}]}]}, 0x228) [ 1183.942900] binder: 10818:10829 transaction failed 29189/-3, size 24-8 line 3147 [ 1183.950026] binder: undelivered TRANSACTION_COMPLETE [ 1183.969319] binder: send failed reply for transaction 596, target dead [ 1183.986777] binder: 10818:10829 ioctl c0306201 20000440 returned -14 18:39:28 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000080)="f13b06fb25f80adeafd7e0b183e7481dc7174b2127857b74f86584087cc48b7ef4a590569327e5e5fc5492c0cef7d7f9e4ec69389be34e707437cbfd8c85e4c83a909fd4aef079ba08c6100af79861527bfffdcefe5318dd29ee6e352d010cf3436b2c86856625c43d3dc2d0830c1e6b2d726a119a67ed01cfbcf28df3a97b7884ddb637d20003960e357568fa2f6c40adbbf2890c1b6ca99cbd0dbbf28be95d21e80d5976d8bc1d0063bd6b1b5bdb89c645a700c73345e2e50fac2745d1a411f916d30c8cc3d8236af8997c65a3d07b7000e1", 0xd3) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0xfffffffffffffffe, 0x810) 18:39:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x7fffffffefff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:28 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8aaaafffeaaaa29]}, 0x1ff}, 0x1c) [ 1184.096121] net_ratelimit: 20 callbacks suppressed [ 1184.096140] protocol 88fb is buggy, dev hsr_slave_0 [ 1184.106248] protocol 88fb is buggy, dev hsr_slave_1 18:39:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x10) [ 1184.160113] binder: 10859:10860 transaction failed 29201/-22, size 24-8 line 2994 [ 1184.178536] binder: 10859:10860 ioctl c0306201 20000440 returned -14 [ 1184.195786] QAT: Invalid ioctl 18:39:28 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) ioctl$BLKPG(r0, 0x80140912, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x100) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x4, {0x5, 0x5, "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", 0x24, 0x3ff, 0x8, 0x80, 0x4, 0x2, 0x5, 0x1}, r2}}, 0x128) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e23, 0xfffffffffffffff7, @ipv4={[], [], @broadcast}, 0x4}, {0xa, 0x4e22, 0x4, @mcast2, 0xffff}, 0x2, [0x10001, 0x6, 0x4, 0xff, 0x2, 0x6, 0x6, 0x8]}, 0x5c) [ 1184.207731] binder_alloc: binder_alloc_mmap_handler: 10859 20001000-20002000 already mapped failed -16 [ 1184.232328] binder: BINDER_SET_CONTEXT_MGR already set [ 1184.262493] xt_cluster: node mask cannot exceed total number of nodes [ 1184.268052] binder: 10859:10860 ioctl 40046207 0 returned -16 [ 1184.285357] QAT: Invalid ioctl [ 1184.287280] binder_release_work: 6 callbacks suppressed [ 1184.287287] binder: undelivered TRANSACTION_ERROR: 29201 18:39:29 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x44000, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000940)={0x0, 0x1, 0x0, 0x0, 0x0}) 18:39:29 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb0ba2feff2c4dc4]}, 0x1ff}, 0x1c) 18:39:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x10) 18:39:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfffffffffffffffc) write$P9_RWSTAT(r0, &(0x7f0000000040)={0x7, 0x7f, 0x2}, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x200000000001f6) 18:39:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x940000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000001c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001c000/0x18000)=nil, 0x0, 0xf3, 0xfffffffffffbfffd, 0x0, 0xfffffffffffffdf2) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x1015, 0x4, 0xe30, "9fd83ef2ed0844a3edebcbf4ceb1d722", "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"}, 0x1015, 0x2) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005280)={0x0, 0x0, 0xffffffff, {0x0, 0x2000}, [], "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x7e, 0x0, 0x2, 0xfff, 0xde0}) 18:39:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4}, 0x1c) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00\xf8\xff\xff\xff\x00\x00\x00\x00\x00\x00\xd5', 0x0}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={r2, @remote, @local}, 0xc) recvmsg(r1, &(0x7f0000001600)={0x0, 0x3c8, 0x0, 0x0, &(0x7f0000000100)=""/106, 0x3a3}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000180), 0x98, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x5}) 18:39:29 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc44d2cfffea20bbb]}, 0x1ff}, 0x1c) [ 1184.712369] binder: 10888:10889 ioctl c0306201 20000440 returned -14 [ 1184.751301] binder_alloc: binder_alloc_mmap_handler: 10888 20001000-20002000 already mapped failed -16 [ 1184.813193] binder: BINDER_SET_CONTEXT_MGR already set 18:39:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)}, 0x10) [ 1184.833912] binder: 10888:10889 ioctl 40046207 0 returned -16 18:39:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000480)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\x10\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f\xf3\xc8\xdd~w\xa7\xbdZ\xe5\xa7\xda\xeb\x03\x98\xfe\xd9,\xa6\'\xb6q\x19K\xdc\"b\xf5\x8aY\\P\xf2\xdb\xdc~\xf1}K\x9d%\x1e\xe7\xe1\x12\xc3x\xa2\x19\xf3}\xfe\x8fW\xf9\x13\x1f$\xea\f3b\x1c\xcf\xcf\xb9\x9a\x8d\xa0CS\n\xfc\t\x8b\xe3EP\xc8\xa9o\xde\xf7\x17\xa95\xb125\xdb\x16\xf953\xd6\x8f\xc2\x03a\x01\xfd\x8b\xad\xea\xb2+\xb3Z0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x2, {0x0, {0x41, 0x3, 0x3}, 0x40, r3, r4, 0x21, 0x80, 0x80000001, 0x400, 0x5, 0x2, 0x8, 0x3ff, 0x9, 0x100000000000000, 0x9, 0xffffffffffffffff, 0x1, 0x0, 0x81}}, 0xa0) [ 1184.877560] binder_alloc: 10888: binder_alloc_buf, no vma [ 1184.896140] protocol 88fb is buggy, dev hsr_slave_0 [ 1184.901352] protocol 88fb is buggy, dev hsr_slave_1 [ 1184.906538] protocol 88fb is buggy, dev hsr_slave_0 [ 1184.911632] protocol 88fb is buggy, dev hsr_slave_1 [ 1184.918596] binder: 10888:10912 transaction failed 29189/-3, size 24-8 line 3147 18:39:29 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc886b5feffd956f0]}, 0x1ff}, 0x1c) [ 1184.923891] binder: send failed reply for transaction 603 to 10888:10889 [ 1184.933620] binder: undelivered TRANSACTION_COMPLETE [ 1184.958083] binder: undelivered TRANSACTION_ERROR: 29189 18:39:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)}, 0x10) [ 1184.980653] binder: 10888:10912 ioctl c0306201 20000440 returned -14 [ 1185.005830] binder: undelivered TRANSACTION_ERROR: 29189 18:39:29 executing program 2: r0 = socket$inet6(0xa, 0x7, 0x8) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x6) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = dup3(r1, r1, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000500)=0xe8) sendmsg$xdp(r2, &(0x7f00000007c0)={&(0x7f0000000540)={0x2c, 0x0, r3, 0x36}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000580)="2c3156fa8a93bd089d9cc42142953d00fab4c8ebb63526ed6c30d8f09aac24923b7b8f15363f5d77cfe198d25cd7deef3422f732bed7eaabc160d6ec90dcde70dcf19f541525e8ec2e10523d97b0db0454015ffa31f8c352f95c94358b5b074442f1cdfc4db3bc7604748df7bcf3dc410481540bf09335d909a095bf", 0x7c}, {&(0x7f0000000600)="5badec0300ee213bbb5d6e6c231769cf75e2653fcb6e7377e08ed4855afbf289953e38d931dd2aab51e4074362b92c46af0312d5a4ea344f9f4cc84b7da8ee8858632c0560161d46e5014bdaba4f71f2af", 0x51}, {&(0x7f0000000680)="ca3d42a63e5c3493bbc5881a478abb1dc31f58a0896583890eda93a7bf920963cc38836b803cfde1b6c87e94aa7e92dbbfc9e198129e69ec99fb668494f5d9a093a5a1e7d47541602954cc6d175f343f75bfa0aa7cdf8947f8b980b03635d1c77377bd4070881763ba99cd3ae617139a87ac1c80cac1dcc465054a3a58d4c601572be6ce1abb8197fba3e55d85dfdf549b49424b24aaa861be82f45522df441bb77df61bfcbb5a603851a6812bb277d5fde97e89271e0957e7ef306450feb9951a1cf75876eae6816c66c5228cb0c5a2412db360c78eed7f46761afc06d7df59b1172125558ab81f4c66e7701d9da6597f6dbfa8bb5e", 0xf6}], 0x3, 0x0, 0x0, 0x4000000}, 0x20004804) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r0, 0x0, 0x0, 0x40801) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x82000, 0x0) sendmmsg(r4, &(0x7f0000000100), 0x3fffffffffffff5, 0x0) dup3(r4, r1, 0x0) 18:39:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 18:39:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x30710000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:29 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb09d4fefff84324]}, 0x1ff}, 0x1c) 18:39:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)}, 0x10) 18:39:29 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd090a7fffe2c8c9a]}, 0x1ff}, 0x1c) [ 1185.174224] binder: 10936:10937 ioctl c0306201 20000440 returned -14 [ 1185.244485] binder_alloc: binder_alloc_mmap_handler: 10936 20001000-20002000 already mapped failed -16 [ 1185.256995] binder: BINDER_SET_CONTEXT_MGR already set [ 1185.262310] binder: 10936:10937 ioctl 40046207 0 returned -16 [ 1185.291920] binder_alloc: 10936: binder_alloc_buf, no vma [ 1185.297706] protocol 88fb is buggy, dev hsr_slave_0 [ 1185.297759] protocol 88fb is buggy, dev hsr_slave_1 [ 1185.297844] protocol 88fb is buggy, dev hsr_slave_0 [ 1185.297893] protocol 88fb is buggy, dev hsr_slave_1 [ 1185.351433] binder: 10936:10944 transaction failed 29189/-3, size 24-8 line 3147 [ 1185.379012] binder: 10936:10944 ioctl c0306201 20000440 returned -14 [ 1185.384669] binder: release 10936:10937 transaction 608 out, still active [ 1185.393283] binder: unexpected work type, 4, not freed [ 1185.399148] binder: undelivered TRANSACTION_COMPLETE [ 1185.404452] binder: undelivered TRANSACTION_ERROR: 29189 [ 1185.410477] binder: send failed reply for transaction 608, target dead 18:39:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = msgget(0x0, 0x20) msgsnd(r1, &(0x7f0000000000)={0x3, "5add8a4db325f580e869b8c878a4abd3dc07d43e607883252e5d2a7a24ab69e264f3f206e26f1676b1bcecd46da85ccc694bc860b17eb32fb07fed5aed09a757df4c92bc90f71bbd18f36cd2581916582078cbaed927203ae4623952194165b5ac6a5d5af3d648bdffcb404dd89fe1df0ac1ad8d96b4ec62bbacee9a268dbe1a9163246fb066"}, 0x8e, 0x800) mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) 18:39:30 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x2, 0x2, 0x9, 0x3, 0x3}, 0x200, 0x5, 0x10000}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8) r2 = semget$private(0x0, 0x1, 0x8) semctl$GETPID(r2, 0x6, 0xb, &(0x7f0000000200)=""/44) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r1, @in={{0x2, 0x4e22, @broadcast}}, 0x8001, 0xfffffffffffffff9}, 0x90) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ce\x00'}, 0x58) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000002c0)={0xffffffffffffffff, 0x3, 0x6, 0x3, 0xffff}) 18:39:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, 0x0, &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:30 executing program 2: setxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.capability\x00', 0x0, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x0) getresuid(0x0, 0x0, &(0x7f00000001c0)) getrusage(0x1, &(0x7f0000000640)) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000140)) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000a80)='keyring]\x00'}, 0x30) ioctl$TIOCGPGRP(r1, 0x540f, 0x0) ioctl$int_out(r0, 0x5462, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0x7) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) sendto$inet6(r1, &(0x7f0000000100)="95b54da9a993d5d3294a88f5f5e8c3cda041429d0eab3f05e486873c23181c42ca768d10c0d439f0065a2322230aa17e", 0x30, 0x20040800, &(0x7f0000000340)={0xa, 0x4e20, 0x5, @rand_addr="b25cf3bf98c8696ad568d6c558112d64", 0x6}, 0x1c) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x0, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000240)=""/114) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/btrfs-control\x00', 0x400000, 0x0) unshare(0x40000000) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) gettid() ioctl$KVM_SET_REGS(r1, 0x4090ae82, 0x0) gettid() syz_open_dev$loop(0x0, 0x0, 0x0) 18:39:30 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6c976feff9d5fd8]}, 0x1ff}, 0x1c) 18:39:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xa0500000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:30 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() splice(r0, &(0x7f0000000500), r0, &(0x7f0000000880), 0x9, 0x4) socket$alg(0x26, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)) listen(0xffffffffffffffff, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/246) r2 = memfd_create(&(0x7f0000000140)='^\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x840, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}}, [0x3, 0x4, 0xffffffffffffffa7, 0x1, 0x4, 0x80000000, 0x6, 0x7, 0x4, 0x800, 0x78, 0x8, 0x100000000, 0x100000000, 0x3]}, &(0x7f0000000640)=0x100) sendmsg$inet_sctp(r3, &(0x7f0000000740)={&(0x7f00000001c0)=@in6={0xa, 0x4e23, 0x1, @local, 0x1ff}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000003c0)="e04f53eeffbc5adca3c83c1cd630fcf7126a8c4aeaadafa2d7fdba56d02d2f72d160eaf1397b3be2d56816b059fb4566108573385a9e26769f335a6aef3214281f0260e23118654a838a4af20fb35ef465ad4d8faf1ebfb512792eb56690f33a0134f31d2ea9a3b25c3b63356ef817d4b58cd66d4c6b2d6b24023f5faed6edb7931abddcdeee9047aa09ad2522c479829749c14407bce650e78a6417818d85bf6114cdef819bef8f4fd45764a5360b9653b95ceb58043b5ecad287745abc73b7fa357efdfc2e9381cf59a37f6d022577bd554497fd612e0dba4ad545a03e704603505e5de1cc1b51a0", 0xe9}, {&(0x7f0000000200)="799459c4aeecdad16678b7f8f9c3eab25397f1520391136ba9e99101a771854e8b0eac03ad2e9f1dc150b0330f9521dd083c04bcfc77569b900910eda8507c3a0a2c01088090e346551847875cd62c1c9aa29194dec02e05cffc81", 0x5b}], 0x2, &(0x7f0000000680)=[@dstaddrv4={0x18, 0x84, 0x7, @empty}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x3}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x8, 0x174d, 0x4, r4}}], 0xb0, 0x40081}, 0x40880) sendfile(r1, r2, 0x0, 0x102002700) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000780)={r4, @in={{0x2, 0x4e22, @empty}}, [0xfffffffffffffeff, 0x5, 0x100000000, 0x3, 0xfff, 0xfffffffffffffbff, 0xcd, 0x9e7, 0x8, 0x101, 0x2, 0x3, 0x5, 0x7ff]}, &(0x7f00000004c0)=0x100) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, 0x0) [ 1185.731100] binder: 10960:10970 ioctl c0306201 20000440 returned -14 18:39:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, 0x0, &(0x7f0000000580)}}], 0x58}, 0x10) [ 1185.774768] binder: 10975:10978 ioctl c0306201 200001c0 returned -14 [ 1185.805996] binder_alloc: binder_alloc_mmap_handler: 10960 20001000-20002000 already mapped failed -16 18:39:30 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd85f9dfffe76c9d6]}, 0x1ff}, 0x1c) [ 1185.830558] binder: 10975:10987 ioctl c0306201 200001c0 returned -14 [ 1185.873260] binder_alloc: 10960: binder_alloc_buf, no vma 18:39:30 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, [], 0x23}}, 0x1c) listen(0xffffffffffffffff, 0x8000000000005) r1 = syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x7, 0x1) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000004c0)='./file0\x00', 0x14104a, 0x0) write$P9_RSYMLINK(r2, &(0x7f0000000140)={0x29a}, 0x14) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000100)='.\x00', 0x40224000000b) open$dir(&(0x7f0000000240)='./file0\x00', 0x1, 0x2) sendfile(r2, r2, &(0x7f00000000c0), 0x2000000800004c36) prctl$PR_SVE_GET_VL(0x33, 0x1cc72) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xffffffffffffffeb) get_thread_area(&(0x7f0000000300)={0xffffffff, 0xffffffffffffffff, 0x1000, 0x6, 0xffffffffffffffff, 0x7, 0x2, 0x6, 0x9, 0x1000}) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) close(r3) getpeername$inet(r2, &(0x7f0000000040), &(0x7f00000001c0)=0x10) read$FUSE(r1, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0xffffffffffffff78) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x2) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000280)={{0xa, 0x4e21, 0x6256, @mcast1, 0x7fff}, {0xa, 0x100, 0x7fffffff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}, 0x6, [0x100, 0x7f, 0x0, 0xffffffffffffffff, 0x8, 0x1, 0x4, 0xffff]}, 0x5c) creat(&(0x7f0000000200)='./file0\x00', 0x0) [ 1185.926369] binder: 10960:10970 transaction failed 29189/-3, size 24-8 line 3147 [ 1185.938096] binder: release 10960:10970 transaction 613 out, still active [ 1185.945072] binder: unexpected work type, 4, not freed [ 1185.945414] binder: BINDER_SET_CONTEXT_MGR already set [ 1185.971096] binder: undelivered TRANSACTION_COMPLETE 18:39:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, 0x0, &(0x7f0000000580)}}], 0x58}, 0x10) [ 1185.993201] binder: 10960:10989 ioctl 40046207 0 returned -16 18:39:30 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf056d9fffeb586c8]}, 0x1ff}, 0x1c) [ 1186.052916] binder: 10960:10970 ioctl c0306201 20000440 returned -14 [ 1186.091984] binder: send failed reply for transaction 613, target dead [ 1186.105646] binder: undelivered TRANSACTION_ERROR: 29189 [ 1186.121791] IPVS: ftp: loaded support on port[0] = 21 18:39:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xa0700000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), 0x0}}], 0x58}, 0x10) 18:39:30 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb6601feff8c7344]}, 0x1ff}, 0x1c) [ 1186.257971] binder: 11011:11012 ioctl c0306201 20000440 returned -14 [ 1186.319324] binder_alloc: binder_alloc_mmap_handler: 11011 20001000-20002000 already mapped failed -16 [ 1186.363633] binder: BINDER_SET_CONTEXT_MGR already set [ 1186.390704] binder: 11011:11012 ioctl 40046207 0 returned -16 [ 1186.442576] binder_alloc: 11011: binder_alloc_buf, no vma [ 1186.458938] binder: 11011:11027 transaction failed 29189/-3, size 24-8 line 3147 [ 1186.467463] binder: 11011:11027 ioctl c0306201 20000440 returned -14 [ 1186.474418] binder: release 11011:11012 transaction 618 out, still active [ 1186.493012] binder: unexpected work type, 4, not freed [ 1186.502399] binder: undelivered TRANSACTION_COMPLETE [ 1186.524519] binder: undelivered TRANSACTION_ERROR: 29189 [ 1186.541776] binder: send failed reply for transaction 618, target dead [ 1186.574273] IPVS: ftp: loaded support on port[0] = 21 18:39:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000300)=0xffffffffffffff20, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000000)={0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}]}) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffc, 0x1fc}, 0x8) close(r0) 18:39:32 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0xfffffffffffffdea) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x200, 0x0, 0x0, 0x1f, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/mixer\x00', 0x40000, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000fc0)='/dev/sequencer\x00', 0x181002, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000001000)={0xf000, &(0x7f0000000b00), 0x0, r1, 0x8}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/dsp\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000001040)={0x0, 0x7}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={r3, 0x1000, 0x80000001}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000780)={0x0, 0x9}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e21, 0x8, @loopback, 0x200}}}, &(0x7f0000000980)=0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000a80)={0x0, 0x3}, &(0x7f0000000ac0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000a40)=@assoc_id=r4, &(0x7f0000000700)=0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x800}, &(0x7f0000000840)=0x7) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000880)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000800)=ANY=[], &(0x7f0000000300)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x120) r6 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000002c0)=0x32) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000500)={r7, 0x1, 0x6e, @local}, 0x65) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001380)=ANY=[], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000f40)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000740)="2e88ee44bba687ba0874fee576406744a711b78612826ef6459d6e7fad04145f", 0x20, r6}, 0x68) getpid() ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000540)) sysfs$1(0x1, &(0x7f0000000480)='net/ip_vs\x00') r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00') r9 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r9, r8, &(0x7f0000000180)=0x1, 0x10013c93e) 18:39:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), 0x0}}], 0x58}, 0x10) 18:39:32 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, [], 0x23}}, 0x1c) listen(0xffffffffffffffff, 0x8000000000005) r1 = syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x7, 0x1) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000004c0)='./file0\x00', 0x14104a, 0x0) write$P9_RSYMLINK(r2, &(0x7f0000000140)={0x29a}, 0x14) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000100)='.\x00', 0x40224000000b) open$dir(&(0x7f0000000240)='./file0\x00', 0x1, 0x2) sendfile(r2, r2, &(0x7f00000000c0), 0x2000000800004c36) prctl$PR_SVE_GET_VL(0x33, 0x1cc72) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xffffffffffffffeb) get_thread_area(&(0x7f0000000300)={0xffffffff, 0xffffffffffffffff, 0x1000, 0x6, 0xffffffffffffffff, 0x7, 0x2, 0x6, 0x9, 0x1000}) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) close(r3) getpeername$inet(r2, &(0x7f0000000040), &(0x7f00000001c0)=0x10) read$FUSE(r1, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0xffffffffffffff78) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x2) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000280)={{0xa, 0x4e21, 0x6256, @mcast1, 0x7fff}, {0xa, 0x100, 0x7fffffff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}, 0x6, [0x100, 0x7f, 0x0, 0xffffffffffffffff, 0x8, 0x1, 0x4, 0xffff]}, 0x5c) creat(&(0x7f0000000200)='./file0\x00', 0x0) 18:39:32 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00000000000000]}, 0x1ff}, 0x1c) 18:39:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xb09b0200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1188.167065] binder: 11036:11037 ioctl c0306201 20000440 returned -14 [ 1188.222885] binder_alloc: binder_alloc_mmap_handler: 11036 20001000-20002000 already mapped failed -16 18:39:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), 0x0}}], 0x58}, 0x10) [ 1188.314693] binder: BINDER_SET_CONTEXT_MGR already set 18:39:32 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80000000000000]}, 0x1ff}, 0x1c) 18:39:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x9, 0x42) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000100)=0x8) vmsplice(r0, &(0x7f0000001540)=[{&(0x7f00000002c0)="409c7b537c1bddbc6266e2d10f364b", 0xf}, {&(0x7f0000000300)="0ec68a4a16adc9e73155af559dea274c5afa33fe26750744f539910e1fa0071f37c7fe79c7a955e2ab09168415b00284e1a6fff7a13e83135c599d80d053852a51", 0x41}, {&(0x7f0000000380)="6edbec74ef9ac89ccab7bbb3daaec82cba688efef0e24f69a44ed816b008679198a34e26b8b4013aa21405d6ea5abd2869dcf622c9e342505bb10f7466df8daa8a7e3b6ee59f75fb91bad827ac40416f6022cfc43cbc23f1dd661ad987e215b16f692224258ee46ce277f61ffdcdc4d8d77092099b1264feb7db7103288f0b94a741845f27b3d0c9cf3d7c213fcbe57db839b87a3f51737685482008994e1eea285d1e41cb78803e14ed9d3d8ed5e315097739fcace605a00f7d6a400b7a45e1a5821d3d1f6654a4d050af2899040f5acf3bd0c9e21be546acaf42c72a82fafa64afa0c8d0e022807bd61fabf9c8a7e4d101521fed7c79463c6a349c804c4d86883faddd6552340b6baea7b2e761311876bb859608c46ef2e753acb09c9e7c696dfc069da930e734ef2b8afb2ecc4a320726b30efaf1a50794c63728e18cd91c676180d2c92db7da7a26c9bf51a622b61f296fedb8f8420eadeead98bf75a9ab44c9f8951c4dea87e371aabb7bf6ee0839f3e0a971fe696a83391cdac22930c9f0a0885d2ac5188b550cf5eaa962fdec29bca7b616798a2ba279c4a55487af3488138682f49b080311d4cac6a1a49f50506d1c4980afd7d9ab8cb191938f1b150ecf12f08c374f09fb2697d3190d1ff7d9388b49505c55587566361e17708e02a8e63cb293be9d877b6dae33626e308eb7a4da5f2efdb2dfe429eec9a3a0c6a02a5d7b6fa999f766557d06afeffc672a43eba590af74897f016df0b67972ab48c640a3b6ebb8190bdc0e9f06abcf9ca2df7540fcd73b3f06d4f74ac2c22d4612db5d095f181176bbb8974b18cfe0847a5beb75dc2b67ad882d00501ac1d46790920c9e5e8880940cc669a1874688a16314d3c7e9776cb78ed5bb875ac4e38886ac881a985d72380b7e8810073580519aa5e7c351416c15743c65815bca360c876b652b8c558c751be57ba071e595f70f5657d7c33f188ce56a2cad51a8b6560fb9729141d7641cba51a1abaf5e5868f285a1d9ae02f03506e56d29bf6325a1c7395d98b2fd20262596f28876e9fded473c61617b04073422d09c764782805958ecd5e5a6d7af3cc7cd82677c9e86b5cf1764592755ae3a06e4bfbd122a35dd0cad6028c5f6041859cfb1968abb89cc7b83960a85d2d1fec6bb1fd5ca89a5c90052803d10ddfabcbbddf4a2448a6a1217142d7cf6db9158b325ec33cb641c670cba09c8da2f60731937d5b3387cf2ecde4c17a2a623f6727c5f721a3e25c3f20f601b70711a5ea0a7ba60b7b6270e158fad6096158a0379cdd1b5b1f1940e9db9fc26ba8d7ef846909a0524d202eced2cb1da53e384979a230a931360e68e413bd94fedf411299f705714e8284896bf9002991c024041ce9ff36d7c6ed88e2258930eff04731b7c8a13da57d2216012cb84e014ae2c874cc99f5a97dcfd9932755bc3e356170d0a46f79a6217ec22d1a9c6091e6655af88e7547f13fa0cb99cc49f2a54e65ea5b8352c7c93d71f4a2cb74538aa79224c5c8ec006d0aefa498c7562c0489e436f597a346a523838b93481a52cdf6c0e90daa1e4cbbd46e5510b3d758f9d268fd3f8ad302c9c23c7cc47abf86099784fb8df7487278c2daa273bb21eefce8e5f3c024f8aff79c50dc165d184a01748ac5a65759e05227ae36d21f1ecb6bfaf2601be31641dce80d21889f8a47102e5f42c817491eb20e5a7697d7f385039db6419a4618cac1a5ae888f2550ea0386460c8b8742bdf6fac0cd01d6b181d327a75794c4d280475b1ee2a29c840565f4070898fb8f0943621082ee87d31b06c693ba1a332443fcc7c72f5a988cd3386226ea4f27472a4ec0bce42318a1c574bf6ca716ad989002e715374ac226579d857d694ab9ea2563bf6fcc0126515ddeba79a4872f280497cbaabe891c9d6c33c4ca578922916aab2d4b9911220568bd2b71c4b58a7234b485bcd9b2123a1cfb7f3d5c9dadd6ded3ec659a5d8f40b2125907c6812af261db147b676a2bf492874a05f5d03bd6f60c9036bd7c2b751c2b1f54268154269414aade4f685351e69ad9b417eb4e41e98e8329d3a2543016d4c31456745b84a45239cd89447c997daf65cd2d79504d4a6ea401ddb9752707f1153c3016f72d5e39596bb2160cacbaf32bc7def461e03daf509c08ce325eefae3de39b71a29be1567380ef65a99588493f101d6c4adc5589fb20bb33082d7bb27974c0d144a895bcd34a18dd23424385a8c3799115e47056e070075cd4030657d4c72531fbe79fa285d570e8c9646298c172fe611114d18257a53dd5eed8cb91a5359b0be89c479c29ef68a3bd82a75f12867a433ac26364654156960c04df5b516988dff075900c55d10855c1e2db69a47ddd8f7d3b5f6cbac9043eb047f91c7b810b9d83728c19802bc9f5868e4312ec0851c0afa0d27882ffef033fac4bc8f3c6e392ce510babcaffee4e51da39be59cea25dccce0d672cdc4144766b865685699d52720044d6cf80282ac1bf388c7bead28760e77f75d7903dc124c818a5e59be3c21ab3bd15ac7224a858797f1e0d80bbb2cab14defb0ea18b7592e99160f80aa5375159e0b2883afd083f221020876004824029f807d904bff9eb5156b2d00584e73a62bcb75d31293d0d9690a5eed6010b0f53af1b318b3f8cbd46b393c7b8d21956511995976ffc662c2013dc89f74c25312eb08490e127155830756bbc9ad17ebcac55a799c8c28bc53a264d8caa442ba25d95f7c11e22eb71fb195e349050ca781c31b07794220cc1c8bbde6c30a2e3efe1da965294cfc0aef3b6e94a0bddc42d45558355cb1f13d4c97caf6406491799d34f801555d7d9f13fc92c6104fdd403ea921d294467d3908f2d06c8b49c929680cd51d7cfc53afedea57d0a27c36be04fc2a54270891131b62e269fd872203f442404f802478d87f5e3232640507476f1387bd4a2e9540c6ce0ee33d0a0aa0bf84420d063d15079bf3464e388cf765723bf8ec2fb6489c49a831330bf4ca3ea1457c678e9154f2c087a6fdfa6f02bc924bae82927e5d9e441daa4949d7d80deaef0cba04ba07e3ee747ab28970c97af8cfce5261eb45c39908b01a355ac2fc5c21a5da70f9502bc2bb772c0dfc902a49c86f24ed0aab9329a88308d1ba261179042ab0455f30f997be30f381def2ca768a4798ddccfa8ea24e5df50ef3e8aeb638ca999be2be061ca7e9247f20650709a98ad909bb1f507a7d9110939fbd18af9b63eae6c306c522256e617828cd3bb5819d00e76282d1f300c65032731bd7807d7f1a332a383d5ed466b95d9045731f900d403dce7653122da7f0d4c1d1d544d630640e8ea500d72d5368708f7c0ae59643c235310ed440187f3110cffddee4f8139929e0db10b4ff8dcd16ce1f8dfbc6f1fe8c26e9de61de8537a9ad29c40a81fc989b59d78c275a2d3af3ad5cedabf6179069e54dfa14f07cf0b2c194cc1a793d6eae5179fad8f435c07273ce691827a788fd14da3994cd0a548c2ead95554b8b77e8d5c6800e52e50e96034f9b23025da1b00bc1f2fac586c078543205a58ec355ab5f127d9608fa179226dfb36400b26725b49f11a87180a3d8b1ea8ae05915acbb38723f120060ea15a0473edbbaa2ed3d078f2350e01c317b9657bb595ef6b64dd37d721d61a5770e0eb5e03ce8b2dbdc346784d529cab71def09e2a80791629dbb6d8a4fa4f3b840b202008e76a8c4aa7bb7adf3b799eea249b8e407caa3c0be88e0fcce97f911ad577df2db0f4c3aa1bb03e67397598b5448d203c03c167212f50f592c9400f93cb0e498d7823f36c730aa9e5a363d5a34fe4e0c61ee031ddd8eecd9ed6b3ea57dba37170813656d14e6fdc3930a3741c53ca27fbe948f361a42079ab14bbaf4b39edb3fd103ce2df646640a9db89c2ee67e113a8a3fcc525bb7ffa0677578003131df2ac573d13530e112bb8656232f7255233be519eb335085d061cd2fad8e9078ec34534f8e02a766db9be7a51932a44bb1b043067af83c7e0126e181d3ae006e60ce45a0e7c48348621fb07b56b46af6bd6c18f7824ebe9a4a842cbe4e49e782f6139c32e0ab1dbd1bd807e0b59757fdcaa19be2618f97b140e9c3622902077f856e6594cb8b33316ad40d84e82b84c92f0e705a298f64d9f852baea40a71b99cbe193dd7c444099581186c494e5bb0e96296f17e63db56c3181cbadaebdd9a0f933a2b5a0384eec532cf25c9c5f757b991c0f1bbc9f5de007a2b320d75e0fd4ca9e36b0830b5d0410697946735491ed62d5c1dd9c6977cdc29b64cae39fdc336bbd2091d02647a9a21490e4663ad1d60de99402d28f86baebebbfcc1695a340ce3b538ca2d8482abf752ed77439ad4e0e417fdec776d87de6e9feccb3bf45e3d6e4c290b82af3fe610bec68524bf23274165d08f68313a5b5f818aa92e8db4aaa217cdb5ea7f35dabe2f5ad6226fbc20dd67ca1dfabe39fec2de868dadb379f3ca66c4edfae9726e491d9ef9394a85f3adebd5c5b196ea0b38835a2fbf63a4aa95bf72325f5c3cc5ecd8c85916e96258c63f9353009ffbe13a7c67a8cd597cd0f14a017ec90b97d0a3539559c50f7829500fe56766ec12fe921b4eb7e49a6f36e642b5b565e5a51d68b4a1cac3b96d1d88aca4d32a6006c6d3d0d8a3fa00586763a67f11453aa125c1cd1a215288e2a4fcd9b23bfada524739f8fdf99e3e518ed060d097fe776848e7ef5e70ddbd245b07cdfd2c2cd1a5fc560b0d9dc37c8888ddf454e0cbdbd4c8884929afb9a2d572e51248ef313d2f3aed8716478838dd16d498a3e3e277436514c4e3bda053dfe769f4b580eaf2dd3bf7902a33c029fe7f661260ab47702cf2bd3d301ab7f16e95f7facd7370c1c984dc613bd8da3f3092d707f9520ee51c0b063f38c6766ece7a6c2537961e4800e508b8bcacf78e18c4918a6d9e05dc70b961b888c01d4d3527eab0701977441fa66dd975257a3c07ce0faa5c9e1a9903c03e6a6ad170302c5f1dece44dabb3842b491658ab3c7d552c37c584691833f587df401a26ffabe9bafe5424e3ed9cfdb9427ca705ffed9875de2833b6c0e9a085165fc1c2f0f5f7e34fc21b998cdd77e3741afdd351da09ce3f73d62ee1fc13ac94eb7243e7e152b6e4fbce1a7748b7fe7ed4f862ac7dd89144ef2f4b53abd85184fbce7af5a698bbaf14c6cbdc4e25022011864d17d55fc39ca2bee2046d9ed48de4086dcd9509e29763fed718cf4f9a91a9086b0e162fdde121065023b0a7d943a3e65f97fd6671f7a797628448417c8d91e866542a19709239da22165323bf14638fdf1cb4aef62c5ca7675d3edb3397e84635749641ff8dae9d6a03e9b269c30bd2af6fff2fb5bae56f0d3404a43b43999a293414dbc21e901e44a9e878710311706e949fd51c6bcb18850913152f0447e8e8807b7bdb05ffd2eeef846ca10dd7d66c147716e885c49099a2d3e732a16516a65c5f2cde250477817e32fae09715e5c08dbff8917be446008ee7c3e67c6c8e6d443f49b65c630c1454196e79cc98f64aeb8f21d56af72a2a25a6f2124981f56db94634691c80acc44245970df17f81630a3c3167909aceeab4a96af5df9b81ccea551de7d7eb44cab2ed97d7e3ba59c10ee48814f02a10378e53eb95615aea6f9874133a099b8b79dac7ae5540714e89ba3412826447b9c515f38f1a4f3f9650081b3415088c07efd889319871c802fd27e32b38fa5b220e2bcd6e8fcbfee3adee9f9206bdb4377ef35110ab7a7b5f1198028f47e756263c8daacd8129c0", 0x1000}, {&(0x7f0000001380)="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", 0xfc}, {&(0x7f0000001480)="3bb1732281c2793c90b169e2e5b99fdb1daba390c44d41c75c3cae645f2fc27c9c77b5301528e01c34e578eee64e326c4fd9d1010b03ef97afd8e1d7bf37356b9cb24bdedae94ffc0bac746055685e54c213fe57fb7084577149b374ea107f14099409ff46de6e377e1df4e087cce0b26d4e6c89c48e3850befaf8cd6f88b1a0458f8f4e89a3b8986a9d9abf200eb0e09337a5865620675697aaaed26c6fbf24a7f7f36865efb95bd480e4b8aea226089560bce1", 0xb4}], 0x5, 0x4) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f00000015c0)=0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e22, 0x7, @mcast2, 0x7}}, 0x0, 0x400, 0x4, 0x80000001, 0x8}, &(0x7f0000000180)=0x98) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0, @ANYPTR64], 0x33) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x10) [ 1188.347536] binder: 11036:11037 ioctl 40046207 0 returned -16 18:39:32 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x20000, 0x118) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="580000000000000014010000090000000000000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="00000000010000006c4600967dc02d06e305606e8abfaea03ef8def48c59aff476dd0f498eb0b78f73acc3a1cce5c3d75f7067f02611b41d"], @ANYBLOB="0037bc10aec2c3f51d3d00000000000000000000000000000000000000000000000000000000000000"], 0x58}, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x7, 0x3}) [ 1188.395857] binder_alloc: 11036: binder_alloc_buf, no vma [ 1188.421007] binder: 11036:11056 transaction failed 29189/-3, size 24-8 line 3147 18:39:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x0) [ 1188.468515] binder: release 11036:11037 transaction 623 out, still active [ 1188.490421] binder: 11036:11056 ioctl c0306201 20000440 returned -14 [ 1188.512111] sg_write: data in/out 926365459/5 bytes for SCSI command 0x30-- guessing data in; [ 1188.512111] program syz-executor.2 not setting count and/or reply_len properly [ 1188.518678] atomic_op 000000006e15b04d conn xmit_atomic (null) [ 1188.528517] binder: unexpected work type, 4, not freed 18:39:33 executing program 5: r0 = socket$inet(0x2, 0x4000000008004, 0x1) unshare(0x24020400) fgetxattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0) 18:39:33 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0000000000000]}, 0x1ff}, 0x1c) [ 1188.568035] atomic_op 0000000007cdfe29 conn xmit_atomic (null) [ 1188.574057] binder: undelivered TRANSACTION_COMPLETE [ 1188.605661] binder: undelivered TRANSACTION_ERROR: 29189 18:39:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x0) 18:39:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xd09d0200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1188.631322] binder: send failed reply for transaction 623, target dead 18:39:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)}, 0x0) 18:39:33 executing program 2: getrandom(0x0, 0x0, 0x0) r0 = gettid() r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940)='/dev/snapshot\x00', 0x20601, 0x0) socket$inet(0x2, 0x0, 0x0) lsetxattr$security_ima(0x0, &(0x7f0000000380)='security.ima\x00', 0x0, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x0, r2, r1) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, &(0x7f0000000040)) fstat(r2, &(0x7f0000000080)) close(0xffffffffffffffff) 18:39:33 executing program 5: getrandom(&(0x7f0000000280)=""/126, 0x7e, 0x2) r0 = gettid() memfd_create(0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940)='/dev/snapshot\x00', 0x20601, 0x0) socket$inet(0x2, 0x0, 0x0) lsetxattr$security_ima(0x0, &(0x7f0000000380)='security.ima\x00', 0x0, 0x0, 0x2) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x0, 0xffffffffffffffff, r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) fstat(r2, 0x0) close(r1) [ 1188.750978] binder: 11082:11084 ioctl c0306201 20000440 returned -14 18:39:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x0) 18:39:33 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}, 0x1ff}, 0x1c) [ 1188.818545] binder_alloc: binder_alloc_mmap_handler: 11082 20001000-20002000 already mapped failed -16 [ 1188.871822] binder: BINDER_SET_CONTEXT_MGR already set 18:39:33 executing program 3: r0 = gettid() r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) kcmp(r0, r0, 0x0, r2, r1) fstat(r2, 0x0) [ 1188.899073] binder: 11082:11084 ioctl 40046207 0 returned -16 18:39:33 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, 0x1ff}, 0x1c) [ 1188.946605] binder_alloc: 11082: binder_alloc_buf, no vma [ 1188.992938] binder: send failed reply for transaction 628 to 11082:11084 [ 1188.994362] binder: 11082:11112 transaction failed 29189/-3, size 24-8 line 3147 [ 1189.005319] binder: undelivered TRANSACTION_COMPLETE [ 1189.020751] binder: undelivered TRANSACTION_ERROR: 29189 18:39:33 executing program 0: socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x43fe) ftruncate(r1, 0xa200) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 18:39:33 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1ff}, 0x1c) [ 1189.083008] binder: 11082:11112 ioctl c0306201 20000440 returned -14 [ 1189.110613] binder: undelivered TRANSACTION_ERROR: 29189 18:39:33 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) 18:39:33 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:init_exec_t:s0\x00', 0x21) r1 = memfd_create(&(0x7f0000000080)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:39:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:33 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x1ff}, 0x1c) 18:39:33 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x2800) sysfs$3(0x3) [ 1189.337341] binder: 11144:11145 ioctl c0306201 20000440 returned -14 [ 1189.374487] binder_alloc: binder_alloc_mmap_handler: 11144 20001000-20002000 already mapped failed -16 [ 1189.432184] binder_alloc: 11144: binder_alloc_buf, no vma [ 1189.452550] binder: 11144:11152 transaction failed 29189/-3, size 24-8 line 3147 [ 1189.466165] net_ratelimit: 21 callbacks suppressed [ 1189.466175] protocol 88fb is buggy, dev hsr_slave_0 [ 1189.476596] protocol 88fb is buggy, dev hsr_slave_1 18:39:34 executing program 2: syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0xa4002) 18:39:34 executing program 3: creat(&(0x7f0000007340)='./file1\x00', 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mincore(&(0x7f00000cd000/0x4000)=nil, 0x4000, 0x0) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) [ 1189.481792] protocol 88fb is buggy, dev hsr_slave_0 [ 1189.487253] protocol 88fb is buggy, dev hsr_slave_1 [ 1189.521298] binder: release 11144:11145 transaction 633 out, still active [ 1189.540027] binder: 11144:11152 ioctl c0306201 20000440 returned -14 [ 1189.549283] binder: unexpected work type, 4, not freed 18:39:34 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x1ff}, 0x1c) [ 1189.588020] binder: undelivered TRANSACTION_COMPLETE 18:39:34 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="db08691f97c27366d9eb64c2013a746ce69aea1a8b61db74099bd68b4f32aa2cf2", 0x21) [ 1189.621968] binder: undelivered TRANSACTION_ERROR: 29189 [ 1189.652326] binder: send failed reply for transaction 633, target dead 18:39:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1189.696176] protocol 88fb is buggy, dev hsr_slave_0 [ 1189.701329] protocol 88fb is buggy, dev hsr_slave_1 [ 1189.789902] binder: 11178:11179 ioctl c0306201 20000440 returned -14 [ 1189.825533] binder_alloc: binder_alloc_mmap_handler: 11178 20001000-20002000 already mapped failed -16 [ 1189.852954] binder: BINDER_SET_CONTEXT_MGR already set [ 1189.863529] binder: 11178:11179 ioctl 40046207 0 returned -16 [ 1189.869755] binder_alloc: 11178: binder_alloc_buf, no vma [ 1189.886490] binder: 11178:11184 transaction failed 29189/-3, size 24-8 line 3147 [ 1189.899120] binder: 11178:11184 ioctl c0306201 20000440 returned -14 [ 1189.912314] binder: release 11178:11179 transaction 638 out, still active [ 1189.923898] binder: unexpected work type, 4, not freed [ 1189.952384] binder: undelivered TRANSACTION_COMPLETE [ 1189.963614] binder: undelivered TRANSACTION_ERROR: 29189 [ 1189.980828] binder: send failed reply for transaction 638, target dead 18:39:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') sendfile(r0, r1, 0x0, 0x100000008013) 18:39:34 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x0) mmap(&(0x7f0000000000/0x237000)=nil, 0x237000, 0x2, 0x32, 0xffffffffffffffff, 0x0) 18:39:34 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x1ff}, 0x1c) 18:39:34 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000200, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x1800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0xffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000440)=0x1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffffffffffe}, 0x1c) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0xffffffff, 0x2) write$apparmor_current(r1, &(0x7f0000000200)=@profile={'permprofile ', '\x00'}, 0xd) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000000)) r3 = dup2(r2, r2) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000100)) sendto$inet6(r2, 0x0, 0x1a0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x5, &(0x7f0000000300)=[{0xb19, 0x200, 0x6, 0x8}, {0x9, 0x1, 0x80000001, 0xffff}, {0x4, 0x7, 0x695c, 0x800}, {0x0, 0x6, 0x2, 0x4}, {0x7f, 0xf05, 0x8001, 0xfff}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x20042, 0x0) sync_file_range(r0, 0x1f, 0x2, 0x0) getpeername$inet(r3, &(0x7f00000003c0)={0x2, 0x0, @multicast1}, &(0x7f0000000400)=0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x20000) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r4, 0x80003) sendfile(r2, r4, &(0x7f00000000c0), 0x8000fffffffe) prctl$PR_CAPBSET_DROP(0x18, 0x18) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in=@broadcast, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4000}, {0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x38dc}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x7fffffff}}, 0xe8) 18:39:34 executing program 5: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000300)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', 0x0, 0x0) ioctl$KDGKBENT(r1, 0x4b46, 0x0) 18:39:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1190.115713] binder: 11195:11196 ioctl c0306201 20000440 returned -14 18:39:34 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x1ff}, 0x1c) [ 1190.162463] binder_alloc: binder_alloc_mmap_handler: 11195 20001000-20002000 already mapped failed -16 18:39:34 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000200)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_emit_ethernet(0x22, &(0x7f0000000100)={@link_local, @empty, [{}], {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "911aab5cc21f21b9"}}}}, 0x0) [ 1190.225514] binder: BINDER_SET_CONTEXT_MGR already set [ 1190.255733] binder: 11195:11196 ioctl 40046207 0 returned -16 [ 1190.291025] binder_alloc: 11195: binder_alloc_buf, no vma 18:39:34 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x1ff}, 0x1c) [ 1190.335882] binder: send failed reply for transaction 643 to 11195:11196 [ 1190.336170] protocol 88fb is buggy, dev hsr_slave_0 [ 1190.347942] protocol 88fb is buggy, dev hsr_slave_1 [ 1190.351275] binder: undelivered TRANSACTION_COMPLETE [ 1190.367372] binder: 11195:11218 transaction failed 29189/-3, size 24-8 line 3147 [ 1190.388983] binder: undelivered TRANSACTION_ERROR: 29189 [ 1190.451625] binder: 11195:11218 ioctl c0306201 20000440 returned -14 18:39:35 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x1ff}, 0x1c) 18:39:35 executing program 0: r0 = socket(0x1, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000000c0)={0x0, {{0x2, 0x0, @empty}}}, 0x88) [ 1190.562714] binder: undelivered TRANSACTION_ERROR: 29189 18:39:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:35 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc00c5512, &(0x7f00000002c0)={0x0, 0x5517}) [ 1190.831080] binder: 11245:11246 transaction failed 29189/-22, size 24-8 line 2994 18:39:35 executing program 3: 18:39:35 executing program 0: fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000001380)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000100)={0xc000001, 0x5}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x18\x00\xa9[\b`\x00\x00\x00\x02\xda\x02', @ifru_mtu=0x1}) [ 1190.881622] binder: 11245:11246 ioctl c0306201 20000440 returned -14 [ 1190.948847] binder: 11245:11250 transaction failed 29189/-22, size 24-8 line 2994 18:39:35 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000200, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x1800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0xffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000440)=0x1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffffffffffe}, 0x1c) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0xffffffff, 0x2) write$apparmor_current(r1, &(0x7f0000000200)=@profile={'permprofile ', '\x00'}, 0xd) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000000)) r3 = dup2(r2, r2) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000100)) sendto$inet6(r2, 0x0, 0x1a0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x5, &(0x7f0000000300)=[{0xb19, 0x200, 0x6, 0x8}, {0x9, 0x1, 0x80000001, 0xffff}, {0x4, 0x7, 0x695c, 0x800}, {0x0, 0x6, 0x2, 0x4}, {0x7f, 0xf05, 0x8001, 0xfff}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x20042, 0x0) sync_file_range(r0, 0x1f, 0x2, 0x0) getpeername$inet(r3, &(0x7f00000003c0)={0x2, 0x0, @multicast1}, &(0x7f0000000400)=0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x20000) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r4, 0x80003) sendfile(r2, r4, &(0x7f00000000c0), 0x8000fffffffe) prctl$PR_CAPBSET_DROP(0x18, 0x18) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in=@broadcast, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4000}, {0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x38dc}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x7fffffff}}, 0xe8) 18:39:35 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x1ff}, 0x1c) 18:39:35 executing program 5: 18:39:35 executing program 3: [ 1190.989089] binder: 11245:11250 ioctl c0306201 20000440 returned -14 18:39:35 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000200, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x1800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0xffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000440)=0x1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffffffffffe}, 0x1c) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0xffffffff, 0x2) write$apparmor_current(r1, &(0x7f0000000200)=@profile={'permprofile ', '\x00'}, 0xd) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000000)) r3 = dup2(r2, r2) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000100)) sendto$inet6(r2, 0x0, 0x1a0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xfffffffffffffffc, @loopback}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x5, &(0x7f0000000300)=[{0xb19, 0x200, 0x6, 0x8}, {0x9, 0x1, 0x80000001, 0xffff}, {0x4, 0x7, 0x695c, 0x800}, {0x0, 0x6, 0x2, 0x4}, {0x7f, 0xf05, 0x8001, 0xfff}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x20042, 0x0) sync_file_range(r0, 0x1f, 0x2, 0x0) getpeername$inet(r3, &(0x7f00000003c0)={0x2, 0x0, @multicast1}, &(0x7f0000000400)=0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x20000) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r4, 0x80003) sendfile(r2, r4, &(0x7f00000000c0), 0x8000fffffffe) prctl$PR_CAPBSET_DROP(0x18, 0x18) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in=@broadcast, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4000}, {0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x38dc}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x7fffffff}}, 0xe8) 18:39:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1191.030082] binder: undelivered TRANSACTION_ERROR: 29189 [ 1191.058003] binder: undelivered TRANSACTION_ERROR: 29189 18:39:35 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x1ff}, 0x1c) [ 1191.136113] protocol 88fb is buggy, dev hsr_slave_0 [ 1191.141294] protocol 88fb is buggy, dev hsr_slave_1 18:39:35 executing program 3: [ 1191.191913] binder: 11268:11272 ioctl c0306201 20000440 returned -14 [ 1191.222527] binder_alloc: binder_alloc_mmap_handler: 11268 20001000-20002000 already mapped failed -16 [ 1191.302212] binder: BINDER_SET_CONTEXT_MGR already set 18:39:35 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x1ff}, 0x1c) 18:39:35 executing program 3: [ 1191.326280] binder: 11268:11272 ioctl 40046207 0 returned -16 [ 1191.346867] binder_alloc: 11268: binder_alloc_buf, no vma [ 1191.393700] binder: send failed reply for transaction 651 to 11268:11272 18:39:36 executing program 3: [ 1191.436748] binder: undelivered TRANSACTION_COMPLETE [ 1191.451585] binder: 11268:11286 transaction failed 29189/-3, size 24-8 line 3147 [ 1191.461432] binder: undelivered TRANSACTION_ERROR: 29189 [ 1191.556545] binder: 11268:11286 ioctl c0306201 20000440 returned -14 [ 1191.565629] binder: undelivered TRANSACTION_ERROR: 29189 18:39:37 executing program 0: 18:39:37 executing program 3: 18:39:37 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, 0x1ff}, 0x1c) 18:39:37 executing program 5: 18:39:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:37 executing program 2: 18:39:37 executing program 2: [ 1192.798352] binder: 11300:11301 ioctl c0306201 20000440 returned -14 18:39:37 executing program 3: 18:39:37 executing program 0: getrandom(&(0x7f0000000280)=""/126, 0x7e, 0x2) r0 = gettid() r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940)='/dev/snapshot\x00', 0x20601, 0x0) socket$inet(0x2, 0x0, 0x0) lsetxattr$security_ima(0x0, &(0x7f0000000380)='security.ima\x00', 0x0, 0x0, 0x2) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x0, r2, r1) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), 0x0) fstat(0xffffffffffffffff, 0x0) close(r1) 18:39:37 executing program 5: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:39:37 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x1ff}, 0x1c) [ 1192.839957] binder_alloc: binder_alloc_mmap_handler: 11300 20001000-20002000 already mapped failed -16 18:39:37 executing program 2: r0 = socket(0x10, 0x100000003, 0x0) clock_gettime(0x0, 0x0) recvmmsg(r0, &(0x7f0000001cc0), 0x4000052, 0x10102, &(0x7f0000001540)) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) 18:39:37 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x1ff}, 0x1c) 18:39:37 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x3}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000040), 0x0}, 0x18) [ 1192.996899] binder_alloc: 11300: binder_alloc_buf, no vma [ 1193.031725] binder: BINDER_SET_CONTEXT_MGR already set 18:39:37 executing program 3: inotify_init1(0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1193.064174] binder: 11300:11301 transaction failed 29189/-3, size 24-8 line 3147 18:39:37 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x1ff}, 0x1c) [ 1193.130067] binder: 11300:11324 ioctl 40046207 0 returned -16 [ 1193.130107] binder: release 11300:11301 transaction 656 out, still active [ 1193.146737] binder: unexpected work type, 4, not freed [ 1193.152036] binder: undelivered TRANSACTION_COMPLETE [ 1193.171961] binder: 11300:11301 ioctl c0306201 20000440 returned -14 18:39:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:37 executing program 2 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x3) unshare(0x8000800) syncfs(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000380)={0x0, 0x9, 0x4, [], &(0x7f0000000340)=0xffffffff80000000}) r3 = open(0x0, 0x0, 0x42) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) sendmsg(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)='+', 0x1}], 0x1}, 0xc100) writev(r4, &(0x7f0000000200)=[{&(0x7f0000001440)="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", 0xbd0}], 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffe9a, &(0x7f0000000140)='\')\x00'}, 0x30) syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000400)=0xffffffffffffffc0, 0x7) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000280)={0xb, {0x1, 0x8, 0xfffffffffffff000, 0x7fffffff}}) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_netfilter(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080)={r1, 0x8}, &(0x7f0000000180)=0x8) [ 1193.227370] binder: undelivered TRANSACTION_ERROR: 29189 [ 1193.263684] binder: send failed reply for transaction 656, target dead [ 1193.346534] FAULT_INJECTION: forcing a failure. [ 1193.346534] name failslab, interval 1, probability 0, space 0, times 0 [ 1193.379199] CPU: 0 PID: 11356 Comm: syz-executor.2 Not tainted 5.0.0+ #10 [ 1193.386182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1193.395540] Call Trace: [ 1193.398171] dump_stack+0x172/0x1f0 [ 1193.401836] should_fail.cold+0xa/0x15 [ 1193.405743] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1193.411351] ? ___might_sleep+0x163/0x280 [ 1193.415516] __should_failslab+0x121/0x190 [ 1193.419767] should_failslab+0x9/0x14 [ 1193.423585] __kmalloc+0x2dc/0x740 [ 1193.427149] ? retint_kernel+0x2d/0x2d [ 1193.431062] ? sock_kmalloc+0xc6/0x120 [ 1193.434967] sock_kmalloc+0xc6/0x120 [ 1193.438695] ___sys_sendmsg+0x5bd/0x930 [ 1193.442719] ? copy_msghdr_from_user+0x430/0x430 [ 1193.447517] ? lock_downgrade+0x880/0x880 [ 1193.451691] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1193.457260] ? kasan_check_read+0x11/0x20 [ 1193.461429] ? __fget+0x367/0x540 [ 1193.464899] ? ksys_dup3+0x3e0/0x3e0 [ 1193.468623] ? lock_downgrade+0x880/0x880 [ 1193.472789] ? __fget_light+0x1a9/0x230 [ 1193.476785] ? __fdget+0x1b/0x20 [ 1193.480175] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1193.485734] __sys_sendmsg+0x105/0x1d0 [ 1193.489636] ? __ia32_sys_shutdown+0x80/0x80 [ 1193.494076] __x64_sys_sendmsg+0x78/0xb0 [ 1193.498170] do_syscall_64+0x103/0x610 [ 1193.502078] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1193.507277] RIP: 0033:0x457f29 [ 1193.510478] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1193.529426] RSP: 002b:00007fe1e30f5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1193.537171] RAX: ffffffffffffffda RBX: 00007fe1e30f5c90 RCX: 0000000000457f29 18:39:38 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x1ff}, 0x1c) [ 1193.545106] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000004 [ 1193.552416] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1193.559695] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe1e30f66d4 [ 1193.566975] R13: 00000000004c560c R14: 00000000004d94f8 R15: 0000000000000005 [ 1193.594473] binder: 11359:11360 ioctl c0306201 20000440 returned -14 [ 1193.608875] binder_alloc: binder_alloc_mmap_handler: 11359 20001000-20002000 already mapped failed -16 [ 1193.636714] binder: BINDER_SET_CONTEXT_MGR already set [ 1193.650704] binder: 11359:11360 ioctl 40046207 0 returned -16 [ 1193.666396] binder_alloc: 11359: binder_alloc_buf, no vma [ 1193.672325] binder: 11359:11366 transaction failed 29189/-3, size 24-8 line 3147 [ 1193.680229] binder: 11359:11366 ioctl c0306201 20000440 returned -14 [ 1193.691309] binder: release 11359:11360 transaction 661 out, still active [ 1193.701098] binder: unexpected work type, 4, not freed [ 1193.719899] binder: undelivered TRANSACTION_COMPLETE [ 1193.737224] binder: undelivered TRANSACTION_ERROR: 29189 [ 1193.749022] binder: send failed reply for transaction 661, target dead 18:39:38 executing program 0: timer_create(0x0, &(0x7f0000000780)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f00000007c0)=0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x880, 0x1c) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x3, 0x0, @pic={0xff, 0x8, 0x2, 0x0, 0x80000000, 0x0, 0x8000, 0x100, 0x8, 0x82, 0x8, 0x9, 0x6, 0x55, 0x7, 0xab}}) ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f00000003c0)) timer_gettime(r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000340)=""/13) r3 = accept4(r2, 0x0, &(0x7f0000000100), 0x80000) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f0000000380)=0x2) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000400)={0x3, [0x9, 0x8, 0x1e]}) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000140)={@local, @empty, 0x0}, &(0x7f0000000180)=0xc) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f00000001c0)={@empty, r4}, 0x14) 18:39:38 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000400)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x400) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x802c550a, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@alg, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000000c0)=""/87, 0x57}, 0x0) close(r0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[{}, {}, {0x0}, {}, {}]}) fchdir(r0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000200)={r1, 0x1}) 18:39:38 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}, 0x1ff}, 0x1c) 18:39:38 executing program 2 (fault-call:2 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1193.976326] binder: 11380:11381 ioctl c0306201 20000440 returned -14 [ 1193.998357] FAULT_INJECTION: forcing a failure. [ 1193.998357] name failslab, interval 1, probability 0, space 0, times 0 [ 1194.010199] CPU: 0 PID: 11384 Comm: syz-executor.2 Not tainted 5.0.0+ #10 [ 1194.017138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1194.026499] Call Trace: [ 1194.029101] dump_stack+0x172/0x1f0 [ 1194.032759] should_fail.cold+0xa/0x15 [ 1194.036667] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1194.041780] ? retint_kernel+0x2d/0x2d [ 1194.045687] __should_failslab+0x121/0x190 [ 1194.049938] should_failslab+0x9/0x14 [ 1194.053755] kmem_cache_alloc+0x47/0x6f0 [ 1194.057827] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1194.062871] sctp_get_port_local+0x435/0x1670 [ 1194.067377] ? debug_smp_processor_id+0x3c/0x280 [ 1194.072170] ? sctp_unhash+0x10/0x10 [ 1194.075899] ? retint_kernel+0x2d/0x2d [ 1194.079796] ? mark_held_locks+0xa4/0xf0 [ 1194.083871] sctp_get_port+0x101/0x180 [ 1194.087772] ? sctp_get_port_local+0x1670/0x1670 [ 1194.092542] ? __local_bh_enable_ip+0x15a/0x270 [ 1194.097234] inet_autobind+0xbf/0x1a0 [ 1194.101043] inet_sendmsg+0x40c/0x5d0 [ 1194.104854] ? ipip_gro_receive+0x100/0x100 [ 1194.109191] sock_sendmsg+0xdd/0x130 [ 1194.112915] ___sys_sendmsg+0x806/0x930 [ 1194.116907] ? copy_msghdr_from_user+0x430/0x430 [ 1194.121681] ? lock_downgrade+0x880/0x880 [ 1194.125842] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1194.131396] ? kasan_check_read+0x11/0x20 [ 1194.135565] ? __fget+0x367/0x540 [ 1194.139033] ? ksys_dup3+0x3e0/0x3e0 [ 1194.141304] binder_alloc: binder_alloc_mmap_handler: 11380 20001000-20002000 already mapped failed -16 [ 1194.142758] ? lock_downgrade+0x880/0x880 [ 1194.156353] ? __fget_light+0x1a9/0x230 [ 1194.160363] ? __fdget+0x1b/0x20 [ 1194.163742] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1194.169295] __sys_sendmsg+0x105/0x1d0 [ 1194.173196] ? __ia32_sys_shutdown+0x80/0x80 [ 1194.175253] binder: BINDER_SET_CONTEXT_MGR already set [ 1194.177619] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1194.177655] __x64_sys_sendmsg+0x78/0xb0 [ 1194.177670] ? do_syscall_64+0xfe/0x610 [ 1194.177687] do_syscall_64+0x103/0x610 [ 1194.177711] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1194.177724] RIP: 0033:0x457f29 [ 1194.177741] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1194.177753] RSP: 002b:00007fe1e30f5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1194.198380] binder: 11380:11381 ioctl 40046207 0 returned -16 [ 1194.199673] RAX: ffffffffffffffda RBX: 00007fe1e30f5c90 RCX: 0000000000457f29 [ 1194.199684] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000004 [ 1194.199693] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1194.199703] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe1e30f66d4 [ 1194.199716] R13: 00000000004c560c R14: 00000000004d94f8 R15: 0000000000000005 18:39:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000000c0)={r0, 0x5, 0xf9}, &(0x7f0000000100)={'enc=', 'raw', ' hash=', {'crc32c\x00'}}, &(0x7f0000000180)="0420e038e8bd8226d9f621017142319c56e442ec71dc74b8337abbc16a7b10a3e51f8e764f3d547eea00b3f8970f04e83dd39e1ac3c6ba23aec343ca41d4f8c26f44f830a402708dd87c8538389b91a13d333b354f13af93dfeeb893e7ca95b43d219a449541ecb8a0a73e4e379d24a4cb32ff0922de895602df7f4fc67af48635b9970a9790949ac8a9b9a3a583ad7c1a173c28fa3a391a2914ad33509ce8a8eb3abe34d3e9cd9ef45db6c0bcedc65b2e1db218ac5b721749b4029432a4c906d62f32fb44d90b82a3dd80e93eea", &(0x7f0000000280)=""/145) r1 = socket$inet6(0xa, 0x400000000001, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x400000000000a) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x8000ffffffff) ftruncate(r2, 0x0) [ 1194.223930] binder: release 11380:11381 transaction 666 out, still active [ 1194.235054] binder: unexpected work type, 4, not freed 18:39:38 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}, 0x1ff}, 0x1c) 18:39:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)) r0 = socket(0xa, 0x3, 0x9) sendmmsg$unix(r0, &(0x7f0000004c00)=[{&(0x7f00000002c0)=@abs, 0x6e, 0x0}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f014b"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) recvmsg(r0, &(0x7f0000000280)={&(0x7f0000000040)=@un=@abs, 0x80, 0x0}, 0x0) 18:39:38 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x7000, 0x800, &(0x7f0000ff9000/0x7000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000080)=""/19) r3 = socket$inet(0x2, 0x3, 0x2) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000200)={'veth0\x00', 0x1f2}) getsockname(r4, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000800}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="00021fcd77d3d3f2475de4b5bb5aae040000000c00030016000470ff521a00000000c621016da15f03bde9ed1fab9a024807ffaefecaf399380cd8a5412d4601c0ec0a5b48be80a69b252d1f"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x2000c811) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x4, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240)) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f00000008c0)=ANY=[@ANYRESDEC], 0x1, 0x3) setxattr$security_capability(&(0x7f0000000540)='./file0\x00', &(0x7f0000000380)='security.capability\x00', &(0x7f0000000440)=@v1={0x1000000, [{0x4f83, 0x4}]}, 0x0, 0x2) pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) accept4$unix(r5, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) ioctl$SCSI_IOCTL_DOORLOCK(r6, 0x5380) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000480)={'bridge_slave_0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}}) mount(&(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, &(0x7f0000000340)) chdir(&(0x7f00000000c0)='./file0\x00') open(&(0x7f0000000000)='./file0\x00', 0x20141042, 0x0) close(r6) 18:39:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1194.464578] binder: undelivered TRANSACTION_COMPLETE [ 1194.474101] binder: send failed reply for transaction 666, target dead [ 1194.482878] binder: 11403:11404 ioctl c0306201 20000440 returned -14 [ 1194.496819] net_ratelimit: 20 callbacks suppressed [ 1194.496863] protocol 88fb is buggy, dev hsr_slave_0 [ 1194.507794] protocol 88fb is buggy, dev hsr_slave_1 18:39:39 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, 0x1ff}, 0x1c) [ 1194.523280] binder_alloc: binder_alloc_mmap_handler: 11403 20001000-20002000 already mapped failed -16 18:39:39 executing program 2 (fault-call:2 fault-nth:2): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1194.623882] binder: BINDER_SET_CONTEXT_MGR already set 18:39:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x800000000000017, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, 0x0) io_setup(0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14, 0x69, 0x2, {0x4, 0x4, 0x3}}, 0x14) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x9, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x100000400, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x5, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x8911, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x805, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) 18:39:39 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15]}, 0x1ff}, 0x1c) [ 1194.696080] binder: 11403:11404 ioctl 40046207 0 returned -16 [ 1194.702832] binder_alloc: 11403: binder_alloc_buf, no vma 18:39:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1194.757425] binder: 11403:11420 transaction failed 29189/-3, size 24-8 line 3147 [ 1194.765298] binder: send failed reply for transaction 670 to 11403:11404 [ 1194.783436] binder: undelivered TRANSACTION_COMPLETE [ 1194.806506] binder: 11403:11420 ioctl c0306201 20000440 returned -14 [ 1194.834769] binder: undelivered TRANSACTION_ERROR: 29189 18:39:39 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000000280)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_PDEATHSIG(0x1, 0x13) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f8, &(0x7f0000000040)='sit0\x00\xf5\xf7\x9b\xe6\x81\xd7\xd1\xb5\x06&\x80\x00`p') [ 1194.858274] binder: undelivered TRANSACTION_ERROR: 29189 18:39:39 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, 0x1ff}, 0x1c) 18:39:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1195.061403] binder: 11454:11455 ioctl c0306201 20000440 returned -14 18:39:39 executing program 0: r0 = socket$inet6(0xa, 0x2000000080803, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x8464}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000480)=0xe8) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0xb}, @remote, r2}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e21, 0x80000000, 0x4e24, 0x9, 0xa, 0xa0, 0xa0, 0x3a, r2, r3}, {0x6a5, 0x9, 0x1000, 0x1, 0xffff, 0x7ff, 0x6ef8, 0x3f}, {0x7a, 0xb8, 0x7fffffff, 0x41}, 0xfff, 0x0, 0x2, 0x1, 0x2, 0x3}, {{@in=@remote, 0x4d3}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x24}, 0x3501, 0x2, 0x1, 0xe385, 0x10000, 0x100000001, 0xfffffffffffffffd}}, 0xe8) 18:39:39 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17]}, 0x1ff}, 0x1c) 18:39:39 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) request_key(&(0x7f0000000000)='id_legacy\x00', 0x0, 0x0, 0xffffffffffffffff) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000280)={0x0, 0x80000, r0}) r6 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x5, 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={r5, 0x80000, r6}) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000080)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, &(0x7f00000001c0), 0x0) sysinfo(&(0x7f0000000100)=""/41) fchmod(r3, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x3, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000340)) ioctl$KVM_RUN(r3, 0xae80, 0x0) geteuid() r8 = socket$netlink(0x10, 0x3, 0x7) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0x5, &(0x7f00000000c0)=0xdd, 0x4) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x28) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000003c0), 0x4) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) 18:39:39 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f00000000c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x76b}, 0x28) r1 = socket$kcm(0xa, 0x100000002, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, r2, 0x700, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffff054}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x406, 0x2}, 0x14) write$P9_RVERSION(r0, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0xfffffffffffffff8, 0x8, '9P2000.u'}, 0x15) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @loopback}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000500)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000540)={@mcast1, r4}, 0x14) 18:39:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1195.134705] binder_alloc: binder_alloc_mmap_handler: 11454 20001000-20002000 already mapped failed -16 [ 1195.218813] binder: BINDER_SET_CONTEXT_MGR already set [ 1195.234713] binder: 11454:11455 ioctl 40046207 0 returned -16 [ 1195.267775] binder_alloc: 11454: binder_alloc_buf, no vma [ 1195.268351] binder: release 11454:11455 transaction 675 out, still active [ 1195.296108] protocol 88fb is buggy, dev hsr_slave_0 [ 1195.301635] protocol 88fb is buggy, dev hsr_slave_1 [ 1195.306796] protocol 88fb is buggy, dev hsr_slave_0 [ 1195.311860] protocol 88fb is buggy, dev hsr_slave_1 18:39:39 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18]}, 0x1ff}, 0x1c) 18:39:39 executing program 3: ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000040)={'team_sl~ve_1\x00', {0x2, 0x4e21, @remote}}) seccomp(0x3, 0x9c38779891a07aa2, 0x0) [ 1195.318249] binder: unexpected work type, 4, not freed [ 1195.332417] binder: 11454:11459 transaction failed 29189/-3, size 24-8 line 3147 18:39:39 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000002440)=[{&(0x7f00000024c0)="a2", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x54}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x111000, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f00000001c0)={0x3, 0x2, 0x17, "c16f56f34be8fac43bed217c74a9ceaef34828ddc2d70afaedf189288c8c6cc90be89a0595398caeb77c5c98485f1a4a5620f77fabb81845fe6bb0d0", 0x22, "79d002295c25c6c7cdabf118b68a82ad83e18b6e4bf678f84b13f2e23c1ec24e3f9dfb1be98dec9c5b6e3b086ff5709748a81b6f08bc4cce02f50182", 0x10}) 18:39:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x34000, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1195.370780] binder: 11454:11459 ioctl c0306201 20000440 returned -14 [ 1195.371051] binder: undelivered TRANSACTION_COMPLETE 18:39:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000400)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x105082) add_key(&(0x7f0000000440)='pkcs7_test\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000000580)) getegid() getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180), 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a00)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@broadcast}}}, &(0x7f0000000b00)=0xe8) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000340)) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f00000004c0)=""/158, &(0x7f00000001c0)=0x9e) 18:39:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1195.433644] binder: undelivered TRANSACTION_ERROR: 29189 [ 1195.493788] binder: send failed reply for transaction 675, target dead [ 1195.501108] binder: 11491:11492 ioctl c0306201 20000440 returned -14 18:39:40 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19]}, 0x1ff}, 0x1c) 18:39:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x40000, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1195.548531] binder_alloc: binder_alloc_mmap_handler: 11491 20001000-20002000 already mapped failed -16 [ 1195.582317] binder: BINDER_SET_CONTEXT_MGR already set [ 1195.590398] binder: 11491:11492 ioctl 40046207 0 returned -16 [ 1195.601809] binder_alloc: 11491: binder_alloc_buf, no vma [ 1195.610607] binder: 11491:11498 transaction failed 29189/-3, size 24-8 line 3147 [ 1195.682810] binder: release 11491:11492 transaction 680 out, still active [ 1195.691801] binder: 11491:11498 ioctl c0306201 20000440 returned -14 [ 1195.696144] protocol 88fb is buggy, dev hsr_slave_0 [ 1195.701773] binder: unexpected work type, 4, not freed [ 1195.703445] protocol 88fb is buggy, dev hsr_slave_1 [ 1195.703545] protocol 88fb is buggy, dev hsr_slave_0 [ 1195.718960] protocol 88fb is buggy, dev hsr_slave_1 [ 1195.724608] binder: undelivered TRANSACTION_COMPLETE [ 1195.737943] binder: undelivered TRANSACTION_ERROR: 29189 [ 1195.775877] binder: send failed reply for transaction 680, target dead 18:39:40 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a]}, 0x1ff}, 0x1c) 18:39:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x400300, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:40 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b]}, 0x1ff}, 0x1c) 18:39:40 executing program 3: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0xff, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000001c0)=@get={0x1, &(0x7f0000000100)=""/47, 0x3f0000}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x101a00, 0x0) getsockname$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000140)) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, 0x0}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) geteuid() geteuid() connect$inet6(r3, &(0x7f0000002740)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r3, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000400)=0x4, 0x4) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) 18:39:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x120) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x822000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f00000002c0)=""/88, &(0x7f0000000340)=0x58) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x7, 0x0, 0x3, 0xff, 0x8, 0x40, 0xa80, 0x2b7, 0x8001, 0x4, 0x3ff, 0x2, 0x0, 0x1f, 0x7fff]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000000c0)={r5, 0xffffffff80000000}, &(0x7f0000000100)=0x8) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000480)={0x90000001}) epoll_wait(r6, &(0x7f0000000140)=[{}], 0x20, 0x362) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1196.161737] binder: 11523:11524 ioctl c0306201 20000440 returned -14 [ 1196.199117] binder_alloc: binder_alloc_mmap_handler: 11523 20001000-20002000 already mapped failed -16 [ 1196.237036] binder: BINDER_SET_CONTEXT_MGR already set [ 1196.242400] binder: 11523:11534 ioctl 40046207 0 returned -16 [ 1196.276486] binder_alloc: 11523: binder_alloc_buf, no vma [ 1196.282496] binder: 11523:11537 transaction failed 29189/-3, size 24-8 line 3147 [ 1196.282842] binder: release 11523:11524 transaction 685 out, still active [ 1196.298803] binder: 11523:11537 ioctl c0306201 20000440 returned -14 [ 1196.308253] binder: unexpected work type, 4, not freed [ 1196.324486] binder: undelivered TRANSACTION_COMPLETE 18:39:40 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x402001) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)={0x6, {0x4, 0x0, 0x2, 0x5}, {0x6, 0x1, 0x0, 0x9}, {0xff, 0x1}}) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0), 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") dup2(r1, r2) 18:39:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x1000000, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:40 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c]}, 0x1ff}, 0x1c) 18:39:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1196.337541] binder: undelivered TRANSACTION_ERROR: 29189 [ 1196.351452] binder: send failed reply for transaction 685, target dead [ 1196.439644] binder: 11551:11553 ioctl c0306201 20000440 returned -14 18:39:41 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d]}, 0x1ff}, 0x1c) 18:39:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x2000000, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1196.519699] binder_alloc: binder_alloc_mmap_handler: 11551 20001000-20002000 already mapped failed -16 18:39:41 executing program 0: socket$unix(0x1, 0x5, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, &(0x7f0000000280)={0x0, 0x1b, 0x7, @thr={&(0x7f0000000140)="ee49c9b48dd47a480bdd5c2e7d0b0e381c59fd18c3bf1534a3a330389cb51eff13e422f649a8fc4f559b87ca7e7c1dfa96eb3c24e163f14dd4888663b310a8bb2c555334913c89bd137526b368b9111306e8da06f38d53eab27279ea90512de7182410c3cb104bae4ad1d08708fac5cb2b578454821d52a6c1f841f7a49537b2f9dc9ab2fdd72437f45d91d514ee051650d8052f3188f67e53f55d909069c14c96d66fd783b29fc22defb2ecaf8a6d7ddcc6f92488f163529eedc3fe783c5302e339ad6b804feec5dbe015e517b36ff92780145033c4242f17d400b2d7953cd1541724e5f1e011f9dc2c82720db733e5", &(0x7f0000000040)="7da137881001f2c18742c783c45a15c82c5a7042086eb42167a4b5a7c511bd3bfd3e2970e22f437a4ef8d2e4c56330d3e42cb09fa381f80bf78d29479e0a361ca03d6bc9aab2c25d1b5639ee2898dfccbe53d4f29bfb360f0aaf83aeeeb88cd2156e6eb5939333999d95f80f43210a02f44127df302a74e1d0dddc3927"}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pselect6(0x40, &(0x7f0000000100)={0xfff}, 0x0, 0x0, 0x0, 0x0) [ 1196.623973] binder: BINDER_SET_CONTEXT_MGR already set [ 1196.635533] binder: 11551:11553 ioctl 40046207 0 returned -16 18:39:41 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e]}, 0x1ff}, 0x1c) 18:39:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4000000000000, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1196.671337] binder: send failed reply for transaction 690 to 11551:11553 [ 1196.683118] binder: undelivered TRANSACTION_COMPLETE [ 1196.711238] binder: undelivered TRANSACTION_ERROR: 29189 18:39:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1196.895507] binder: 11578:11579 ioctl c0306201 20000440 returned -14 [ 1196.954329] binder_alloc: binder_alloc_mmap_handler: 11578 20001000-20002000 already mapped failed -16 [ 1196.985197] binder: BINDER_SET_CONTEXT_MGR already set [ 1197.008298] binder: 11578:11579 ioctl 40046207 0 returned -16 [ 1197.023069] binder_alloc: 11578: binder_alloc_buf, no vma [ 1197.031367] binder: release 11578:11579 transaction 694 out, still active [ 1197.043656] binder: 11578:11582 transaction failed 29189/-3, size 24-8 line 3147 [ 1197.053744] binder: unexpected work type, 4, not freed [ 1197.066140] binder: undelivered TRANSACTION_COMPLETE [ 1197.073707] binder: 11578:11582 ioctl c0306201 20000440 returned -14 [ 1197.086286] binder: send failed reply for transaction 694, target dead [ 1197.102620] binder: undelivered TRANSACTION_ERROR: 29189 18:39:41 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21]}, 0x1ff}, 0x1c) 18:39:41 executing program 5: r0 = socket$inet6(0xa, 0x80000080003, 0x1a) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000000008000000000000000700000000000000", @ANYRES32=r0, @ANYBLOB="00000000020000000000000000000000000000000000000000000000", @ANYRES32, @ANYBLOB="00000000ff0700000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="001f0000fcffffffffffffff00000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000100f00000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000001000000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000060000000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000060000000000000000000000000000000000000000000000"]) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/autofs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x5, 0x8000) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl(r2, 0x6, &(0x7f00000003c0)="000800d5000000000000008104708ec2d6bb835385c548f068de67146326f274e18ab05e92e5e0eb9ea67050ec33f2f68eb83991ba398e5f8d5c692d4129a68ad6516f4cd493a51793a167f2f5693937ddb02d37c0b542cd0aaf463be55af977f83512f06f262512fc04ad93a6cecb403a46d92d60037ae7c3633685120f29") getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x7, &(0x7f0000000040), 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ubi_ctrl\x00', 0xfffffffffffffffd, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000200)={0x1, 'nr0\x00', 0x4}, 0x18) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r7 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x8, 0x8840) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000340)=@req3={0x9, 0x80000001, 0x7f4, 0x1ff, 0x0, 0x200, 0x9}, 0xfffffffffffffc2e) close(r8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000280)={0x0, 0xb3}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000380)={r9, 0x3}, &(0x7f0000000440)=0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast1}, 0x20) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r6) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x5}) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000240)=ANY=[@ANYBLOB="01903383b84ac6ced5509d"]) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000200)=ANY=[@ANYBLOB="0300340000fc04dec9df8057f983aa95da1b50b6c1b816a42e348d718fddfd7d656d581f39de7f78d72932b2ce6fff9284d855082d613bb3"]) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0x10) r10 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x840, 0x0) ioctl$SG_SCSI_RESET(r10, 0x2284, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) 18:39:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x40030000000000, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:41 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 18:39:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x73, @broadcast, 0x4e24, 0x0, 'lc\x00', 0x2, 0x401, 0x74}, 0x2c) socket$inet(0x10, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x40000, 0x0) 18:39:41 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22]}, 0x1ff}, 0x1c) [ 1197.252810] binder: 11594:11598 ioctl c0306201 20000440 returned -14 [ 1197.275335] binder_alloc: binder_alloc_mmap_handler: 11594 20001000-20002000 already mapped failed -16 [ 1197.293287] binder: BINDER_SET_CONTEXT_MGR already set 18:39:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x100000000000000, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1197.305713] binder: 11594:11598 ioctl 40046207 0 returned -16 [ 1197.335172] binder_alloc: 11594: binder_alloc_buf, no vma 18:39:41 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2b}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r1 = semget$private(0x0, 0x4, 0x4) semctl$SEM_STAT(r1, 0x0, 0x12, 0x0) semtimedop(0x0, &(0x7f0000000140)=[{0x0, 0x9, 0x1800}], 0x1, &(0x7f0000000200)={0x0, 0x989680}) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0xfff, 0x4) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0xc6, 0x7, 0x81, 0x3, 0x99, 0x7, 0x4, 0x81, 0x8, 0x7fff, 0x2, 0xff, 0xfffffffffffffff8, 0x101], 0xf000, 0x1000}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22}}, 0xfff, 0x82b5}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001940)=ANY=[@ANYBLOB="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"], 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r2 = add_key(&(0x7f0000000600)='rxrpc\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000001740)="00406b80b1ff9a0cba1d20170e3324d3b126eab23f58a514bcb9793c30d7e4e78b79ee77117ec9d53f984e93fa24e9a1748cdaf443b27de92caef3c57e8586f435a4926dbeb07a794e632acb45d512b6007ee6cdf63e46a22b6ab05f6692c516f002af79f4c9e4dd339bb749223262849ca278f6da1864262a4a5561c725e560ba2f1f86a8894bf3cc3babd4a2d9233b878473cc7e90ee62ac5191506e1e37404fed483547026eee9d812eec6e98b57e7caa3ee105afa46086055f49089a747053d51e6f572aceacc83a0d608ccd27010ff8ded09acdadab686c6fe791", 0xdd, 0xfffffffffffffffc) r3 = add_key(&(0x7f00000005c0)='big_key\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f00000006c0)="c6", 0x1, r2) keyctl$search(0xa, r3, &(0x7f0000000800)='trusted\x00', &(0x7f0000000840)={'syz'}, r3) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000380)={[0xf000, 0x4, 0x2001, 0x3000], 0x0, 0xd8, 0x7}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0}, &(0x7f0000000500)=0x210) syz_open_procfs(r5, &(0x7f0000000040)='net/udplide6\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f00000002c0)={{0x1, 0x5}, 'port1\x00', 0x51, 0x16043c, 0x1, 0x3, 0x4, 0x543, 0x1ff, 0x0, 0x7, 0x4b}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000700)=""/4096, &(0x7f0000001700)=0x1000) rt_sigprocmask(0x0, &(0x7f0000000240)={0x4f123a47}, &(0x7f0000000280), 0x8) syz_open_dev$video(&(0x7f00000004c0)='/dev/video#\x00', 0x7, 0x400) socket$isdn_base(0x22, 0x3, 0x0) getdents64(r4, &(0x7f0000001900)=""/11, 0xfffffffffffffce2) 18:39:41 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23]}, 0x1ff}, 0x1c) [ 1197.354505] binder: release 11594:11598 transaction 699 out, still active [ 1197.372642] binder: 11594:11607 transaction failed 29189/-3, size 24-8 line 3147 [ 1197.388665] binder: unexpected work type, 4, not freed [ 1197.399639] binder: undelivered TRANSACTION_COMPLETE 18:39:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1197.405200] binder: 11594:11607 ioctl c0306201 20000440 returned -14 [ 1197.412464] binder: send failed reply for transaction 699, target dead [ 1197.412673] binder: undelivered TRANSACTION_ERROR: 29189 18:39:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x200000000000000, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:42 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24]}, 0x1ff}, 0x1c) [ 1197.592667] binder: 11613:11614 ioctl c0306201 20000440 returned -14 [ 1197.648719] binder_alloc: binder_alloc_mmap_handler: 11613 20001000-20002000 already mapped failed -16 [ 1197.659902] binder: BINDER_SET_CONTEXT_MGR already set [ 1197.666242] binder: 11613:11614 ioctl 40046207 0 returned -16 [ 1197.666746] binder_alloc: 11613: binder_alloc_buf, no vma [ 1197.709273] binder: send failed reply for transaction 704 to 11613:11614 [ 1197.737598] binder: undelivered TRANSACTION_COMPLETE [ 1197.742755] binder: undelivered TRANSACTION_ERROR: 29189 18:39:42 executing program 5: r0 = socket$inet6(0xa, 0x80000080003, 0x1a) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000000008000000000000000700000000000000", @ANYRES32=r0, @ANYBLOB="00000000020000000000000000000000000000000000000000000000", @ANYRES32, @ANYBLOB="00000000ff0700000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="001f0000fcffffffffffffff00000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000100f00000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000001000000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000060000000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000060000000000000000000000000000000000000000000000"]) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/autofs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x5, 0x8000) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl(r2, 0x6, &(0x7f00000003c0)="000800d5000000000000008104708ec2d6bb835385c548f068de67146326f274e18ab05e92e5e0eb9ea67050ec33f2f68eb83991ba398e5f8d5c692d4129a68ad6516f4cd493a51793a167f2f5693937ddb02d37c0b542cd0aaf463be55af977f83512f06f262512fc04ad93a6cecb403a46d92d60037ae7c3633685120f29") getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x7, &(0x7f0000000040), 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ubi_ctrl\x00', 0xfffffffffffffffd, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000200)={0x1, 'nr0\x00', 0x4}, 0x18) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r7 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x8, 0x8840) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000340)=@req3={0x9, 0x80000001, 0x7f4, 0x1ff, 0x0, 0x200, 0x9}, 0xfffffffffffffc2e) close(r8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000280)={0x0, 0xb3}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000380)={r9, 0x3}, &(0x7f0000000440)=0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast1}, 0x20) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r6) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x5}) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000240)=ANY=[@ANYBLOB="01903383b84ac6ced5509d"]) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000200)=ANY=[@ANYBLOB="0300340000fc04dec9df8057f983aa95da1b50b6c1b816a42e348d718fddfd7d656d581f39de7f78d72932b2ce6fff9284d855082d613bb3"]) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0x10) r10 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x840, 0x0) ioctl$SG_SCSI_RESET(r10, 0x2284, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) [ 1197.753876] binder: 11613:11629 transaction failed 29189/-3, size 24-8 line 3147 18:39:42 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27]}, 0x1ff}, 0x1c) [ 1197.802756] binder: 11613:11629 ioctl c0306201 20000440 returned -14 [ 1197.855269] binder: undelivered TRANSACTION_ERROR: 29189 18:39:42 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x134) bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[], 0xfffffffc) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) splice(r0, 0x0, r3, 0x0, 0x20000000002, 0x0) 18:39:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000002}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:42 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28]}, 0x1ff}, 0x1c) 18:39:42 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) kcmp(r3, r4, 0x6, r1, r2) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x560}]}) [ 1198.239156] binder: 11656:11659 ioctl c0306201 20000440 returned -14 [ 1198.327362] binder_alloc: binder_alloc_mmap_handler: 11656 20001000-20002000 already mapped failed -16 [ 1198.391193] binder_alloc: 11656: binder_alloc_buf, no vma [ 1198.397079] binder: 11656:11667 transaction failed 29189/-3, size 24-8 line 3147 [ 1198.404794] binder: 11656:11667 ioctl c0306201 20000440 returned -14 [ 1198.412296] binder: release 11656:11659 transaction 709 out, still active [ 1198.420341] binder: unexpected work type, 4, not freed [ 1198.425879] binder: send failed reply for transaction 709, target dead [ 1199.856218] net_ratelimit: 20 callbacks suppressed [ 1199.856228] protocol 88fb is buggy, dev hsr_slave_0 [ 1199.866358] protocol 88fb is buggy, dev hsr_slave_1 [ 1199.871484] protocol 88fb is buggy, dev hsr_slave_0 [ 1199.876580] protocol 88fb is buggy, dev hsr_slave_1 [ 1200.096160] protocol 88fb is buggy, dev hsr_slave_0 [ 1200.101289] protocol 88fb is buggy, dev hsr_slave_1 18:39:44 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2b}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r1 = semget$private(0x0, 0x4, 0x4) semctl$SEM_STAT(r1, 0x0, 0x12, 0x0) semtimedop(0x0, &(0x7f0000000140)=[{0x0, 0x9, 0x1800}], 0x1, &(0x7f0000000200)={0x0, 0x989680}) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0xfff, 0x4) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0xc6, 0x7, 0x81, 0x3, 0x99, 0x7, 0x4, 0x81, 0x8, 0x7fff, 0x2, 0xff, 0xfffffffffffffff8, 0x101], 0xf000, 0x1000}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22}}, 0xfff, 0x82b5}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001940)=ANY=[@ANYBLOB="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"], 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r2 = add_key(&(0x7f0000000600)='rxrpc\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000001740)="00406b80b1ff9a0cba1d20170e3324d3b126eab23f58a514bcb9793c30d7e4e78b79ee77117ec9d53f984e93fa24e9a1748cdaf443b27de92caef3c57e8586f435a4926dbeb07a794e632acb45d512b6007ee6cdf63e46a22b6ab05f6692c516f002af79f4c9e4dd339bb749223262849ca278f6da1864262a4a5561c725e560ba2f1f86a8894bf3cc3babd4a2d9233b878473cc7e90ee62ac5191506e1e37404fed483547026eee9d812eec6e98b57e7caa3ee105afa46086055f49089a747053d51e6f572aceacc83a0d608ccd27010ff8ded09acdadab686c6fe791", 0xdd, 0xfffffffffffffffc) r3 = add_key(&(0x7f00000005c0)='big_key\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f00000006c0)="c6", 0x1, r2) keyctl$search(0xa, r3, &(0x7f0000000800)='trusted\x00', &(0x7f0000000840)={'syz'}, r3) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000380)={[0xf000, 0x4, 0x2001, 0x3000], 0x0, 0xd8, 0x7}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0}, &(0x7f0000000500)=0x210) syz_open_procfs(r5, &(0x7f0000000040)='net/udplide6\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f00000002c0)={{0x1, 0x5}, 'port1\x00', 0x51, 0x16043c, 0x1, 0x3, 0x4, 0x543, 0x1ff, 0x0, 0x7, 0x4b}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000700)=""/4096, &(0x7f0000001700)=0x1000) rt_sigprocmask(0x0, &(0x7f0000000240)={0x4f123a47}, &(0x7f0000000280), 0x8) syz_open_dev$video(&(0x7f00000004c0)='/dev/video#\x00', 0x7, 0x400) socket$isdn_base(0x22, 0x3, 0x0) getdents64(r4, &(0x7f0000001900)=""/11, 0xfffffffffffffce2) 18:39:45 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29]}, 0x1ff}, 0x1c) 18:39:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x100000000, 0x200) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000100)={0x100000000, 0x7fffffff, 0x1, 0x7457058d, 0x2, 0x40}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x31d, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010000106000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0052c53d05e72094e4c964000000000c000200080004590b000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000180)={0x400, 0x0, 0x3037, 0x7, 0x2, 0x8, 0x1f}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) 18:39:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xbb54893, &(0x7f0000000080)="0adc1f123c123f3188b070") pipe(&(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000000202ffff00000000000000000000000008000200be5267707e6a5c9db2e0a53b97ffa1428134c9540d3c8b204a1b1d550c240642d09c8458f011f3320dd6837ece65576d99ae9e3f7b348bc15502783655e8b374a0404d", @ANYRES32=0x0, @ANYBLOB="14000700ff020000000000000000000000000001"], 0x30}}, 0x0) 18:39:45 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, 0x1ff}, 0x1c) 18:39:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1200.514013] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1200.527843] binder: 11678:11679 ioctl c0306201 20000440 returned -14 [ 1200.535485] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1200.577356] binder_alloc: binder_alloc_mmap_handler: 11678 20001000-20002000 already mapped failed -16 18:39:45 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x4) accept4(r0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000040)={{r5, r6+30000000}, {r3, r4+10000000}}, 0x0) tkill(r1, 0x1000000000016) 18:39:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1200.648826] binder: BINDER_SET_CONTEXT_MGR already set [ 1200.666629] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1200.676204] binder: 11678:11679 ioctl 40046207 0 returned -16 18:39:45 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, 0x1ff}, 0x1c) [ 1200.697009] binder_alloc: 11678: binder_alloc_buf, no vma [ 1200.727549] binder: 11678:11704 transaction failed 29189/-3, size 24-8 line 3147 [ 1200.736209] protocol 88fb is buggy, dev hsr_slave_0 [ 1200.739337] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1200.741305] protocol 88fb is buggy, dev hsr_slave_1 [ 1200.757617] binder: send failed reply for transaction 714 to 11678:11679 [ 1200.764550] binder_release_work: 1 callbacks suppressed [ 1200.764555] binder: undelivered TRANSACTION_COMPLETE [ 1200.784122] binder_release_work: 1 callbacks suppressed [ 1200.784142] binder: undelivered TRANSACTION_ERROR: 29189 [ 1200.805062] binder: 11678:11704 ioctl c0306201 20000440 returned -14 18:39:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1200.830081] binder: undelivered TRANSACTION_ERROR: 29189 [ 1201.547330] protocol 88fb is buggy, dev hsr_slave_0 [ 1201.553469] protocol 88fb is buggy, dev hsr_slave_1 18:39:47 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2b}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r1 = semget$private(0x0, 0x4, 0x4) semctl$SEM_STAT(r1, 0x0, 0x12, 0x0) semtimedop(0x0, &(0x7f0000000140)=[{0x0, 0x9, 0x1800}], 0x1, &(0x7f0000000200)={0x0, 0x989680}) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0xfff, 0x4) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0xc6, 0x7, 0x81, 0x3, 0x99, 0x7, 0x4, 0x81, 0x8, 0x7fff, 0x2, 0xff, 0xfffffffffffffff8, 0x101], 0xf000, 0x1000}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22}}, 0xfff, 0x82b5}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001940)=ANY=[@ANYBLOB="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"], 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r2 = add_key(&(0x7f0000000600)='rxrpc\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000001740)="00406b80b1ff9a0cba1d20170e3324d3b126eab23f58a514bcb9793c30d7e4e78b79ee77117ec9d53f984e93fa24e9a1748cdaf443b27de92caef3c57e8586f435a4926dbeb07a794e632acb45d512b6007ee6cdf63e46a22b6ab05f6692c516f002af79f4c9e4dd339bb749223262849ca278f6da1864262a4a5561c725e560ba2f1f86a8894bf3cc3babd4a2d9233b878473cc7e90ee62ac5191506e1e37404fed483547026eee9d812eec6e98b57e7caa3ee105afa46086055f49089a747053d51e6f572aceacc83a0d608ccd27010ff8ded09acdadab686c6fe791", 0xdd, 0xfffffffffffffffc) r3 = add_key(&(0x7f00000005c0)='big_key\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f00000006c0)="c6", 0x1, r2) keyctl$search(0xa, r3, &(0x7f0000000800)='trusted\x00', &(0x7f0000000840)={'syz'}, r3) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000380)={[0xf000, 0x4, 0x2001, 0x3000], 0x0, 0xd8, 0x7}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0}, &(0x7f0000000500)=0x210) syz_open_procfs(r5, &(0x7f0000000040)='net/udplide6\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f00000002c0)={{0x1, 0x5}, 'port1\x00', 0x51, 0x16043c, 0x1, 0x3, 0x4, 0x543, 0x1ff, 0x0, 0x7, 0x4b}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000700)=""/4096, &(0x7f0000001700)=0x1000) rt_sigprocmask(0x0, &(0x7f0000000240)={0x4f123a47}, &(0x7f0000000280), 0x8) syz_open_dev$video(&(0x7f00000004c0)='/dev/video#\x00', 0x7, 0x400) socket$isdn_base(0x22, 0x3, 0x0) getdents64(r4, &(0x7f0000001900)=""/11, 0xfffffffffffffce2) 18:39:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xffefffffff7f0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:47 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$get_persistent(0x16, r1, r0) 18:39:47 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, 0x1ff}, 0x1c) 18:39:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1203.106675] binder_transaction: 3 callbacks suppressed [ 1203.106686] binder: 11723:11727 got transaction to invalid handle 18:39:47 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x1ff}, 0x1c) [ 1203.165242] binder: 11723:11727 transaction failed 29201/-22, size 24-8 line 2994 18:39:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000300)={0x0, 0xe5, "b8a467ae38f8a7f3a3adf4fec91978e6b12080058e98a518ee71027afb1c8d2f6414f1c8482def9a587d05173a10b10f396901bec2b2be21900033e15f72c4c4fe4c66866a77ae40dd314ca5ca2136563b1cc4e188855a737f7f895bcce604eb3e5be98d69945d70034f7654fadc7adf513aa8cc9be683286e88c8a4e741d211fe5fd163aa5d4887c08ffe630a58b55601e0179b92ae87ebca5559e866957d4e4594e052a9f4b8092b975f238471c85ea801645746e2cbb90869e36397b2025158c4b49839cb50bc938fe52e8196f735bba5bf0936abaad8d47d77d6b9c57c673a73f0b379"}, &(0x7f0000000080)=0xed) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r4, 0x1}, 0x8) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000180)=ANY=[@ANYBLOB="3c8e0f46f63094eca4f5fb19b4e6eb33d30249b5a8fee74266d3ad06365538435346547cd823871d1f3576a6d629a3a97e56c4385f5feac5690538738512d584c2252b54dfa9853b724af97edd3331a0794431e8b11f300c5a2375df4700"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) [ 1203.256678] binder: 11723:11727 ioctl c0306201 20000440 returned -14 [ 1203.289068] binder_alloc: binder_alloc_mmap_handler: 11723 20001000-20002000 already mapped failed -16 [ 1203.332805] binder: BINDER_SET_CONTEXT_MGR already set [ 1203.351005] binder: 11723:11727 ioctl 40046207 0 returned -16 [ 1203.375210] binder: 11723:11749 got transaction to invalid handle [ 1203.391415] binder: 11723:11749 transaction failed 29201/-22, size 24-8 line 2994 [ 1203.400693] binder: 11723:11749 ioctl c0306201 20000440 returned -14 [ 1203.408401] binder: undelivered TRANSACTION_ERROR: 29201 [ 1203.418870] binder: undelivered TRANSACTION_ERROR: 29201 18:39:48 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073014800000000009500b0879b08cf93f591000000000000"], &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfcb1, &(0x7f0000000380)=""/251}, 0x48) 18:39:48 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0x1ff}, 0x1c) 18:39:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1203.741471] binder: 11758:11760 ioctl c0306201 20000440 returned -14 [ 1203.801565] binder_alloc: binder_alloc_mmap_handler: 11758 20001000-20002000 already mapped failed -16 [ 1203.845895] binder: BINDER_SET_CONTEXT_MGR already set [ 1203.871159] binder: 11758:11760 ioctl 40046207 0 returned -16 [ 1203.924086] binder_alloc: 11758: binder_alloc_buf, no vma [ 1203.933923] binder: 11758:11771 transaction failed 29189/-3, size 24-8 line 3147 [ 1203.948691] binder: 11758:11771 ioctl c0306201 20000440 returned -14 [ 1203.959998] binder: release 11758:11760 transaction 722 out, still active [ 1203.974008] binder: unexpected work type, 4, not freed [ 1203.992313] binder: undelivered TRANSACTION_COMPLETE [ 1204.008438] binder: undelivered TRANSACTION_ERROR: 29189 [ 1204.028619] binder: send failed reply for transaction 722, target dead [ 1204.896189] net_ratelimit: 20 callbacks suppressed [ 1204.896199] protocol 88fb is buggy, dev hsr_slave_0 [ 1204.906375] protocol 88fb is buggy, dev hsr_slave_1 [ 1205.697309] protocol 88fb is buggy, dev hsr_slave_0 [ 1205.703174] protocol 88fb is buggy, dev hsr_slave_1 [ 1205.709670] protocol 88fb is buggy, dev hsr_slave_0 [ 1205.715203] protocol 88fb is buggy, dev hsr_slave_1 18:39:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:50 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2b}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r1 = semget$private(0x0, 0x4, 0x4) semctl$SEM_STAT(r1, 0x0, 0x12, 0x0) semtimedop(0x0, &(0x7f0000000140)=[{0x0, 0x9, 0x1800}], 0x1, &(0x7f0000000200)={0x0, 0x989680}) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0xfff, 0x4) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0xc6, 0x7, 0x81, 0x3, 0x99, 0x7, 0x4, 0x81, 0x8, 0x7fff, 0x2, 0xff, 0xfffffffffffffff8, 0x101], 0xf000, 0x1000}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22}}, 0xfff, 0x82b5}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001940)=ANY=[@ANYBLOB="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"], 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r2 = add_key(&(0x7f0000000600)='rxrpc\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000001740)="00406b80b1ff9a0cba1d20170e3324d3b126eab23f58a514bcb9793c30d7e4e78b79ee77117ec9d53f984e93fa24e9a1748cdaf443b27de92caef3c57e8586f435a4926dbeb07a794e632acb45d512b6007ee6cdf63e46a22b6ab05f6692c516f002af79f4c9e4dd339bb749223262849ca278f6da1864262a4a5561c725e560ba2f1f86a8894bf3cc3babd4a2d9233b878473cc7e90ee62ac5191506e1e37404fed483547026eee9d812eec6e98b57e7caa3ee105afa46086055f49089a747053d51e6f572aceacc83a0d608ccd27010ff8ded09acdadab686c6fe791", 0xdd, 0xfffffffffffffffc) r3 = add_key(&(0x7f00000005c0)='big_key\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f00000006c0)="c6", 0x1, r2) keyctl$search(0xa, r3, &(0x7f0000000800)='trusted\x00', &(0x7f0000000840)={'syz'}, r3) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000380)={[0xf000, 0x4, 0x2001, 0x3000], 0x0, 0xd8, 0x7}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0}, &(0x7f0000000500)=0x210) syz_open_procfs(r5, &(0x7f0000000040)='net/udplide6\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f00000002c0)={{0x1, 0x5}, 'port1\x00', 0x51, 0x16043c, 0x1, 0x3, 0x4, 0x543, 0x1ff, 0x0, 0x7, 0x4b}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000700)=""/4096, &(0x7f0000001700)=0x1000) rt_sigprocmask(0x0, &(0x7f0000000240)={0x4f123a47}, &(0x7f0000000280), 0x8) syz_open_dev$video(&(0x7f00000004c0)='/dev/video#\x00', 0x7, 0x400) socket$isdn_base(0x22, 0x3, 0x0) getdents64(r4, &(0x7f0000001900)=""/11, 0xfffffffffffffce2) 18:39:50 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x3) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=""/234, &(0x7f0000000140)=0xea) ioctl(r0, 0x80984120, &(0x7f0000000000)="cd395c3ee5ed10bfd483cdd53547a88e0493158bf33b667b79dbbc062ca40cd0") 18:39:50 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, 0x1ff}, 0x1c) 18:39:50 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000040)={0x10, 0xf0ffffff00000f00}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1ffdffff14000702000000ff000600000000001b00053c3300", @ANYRES32], 0x24c}}, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2080) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', r2}, 0x10) recvmmsg(r1, &(0x7f0000006780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 18:39:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0xffffffffff600000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:50 executing program 0: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f0000000000)={0xffffffffffffff4f, 0x0, 0x0, 0xbaab88c8adfd6273, 0x0, 0x0}) [ 1205.941445] binder: 11790:11791 got transaction to invalid handle 18:39:50 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x1ff}, 0x1c) 18:39:50 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xc5, 0x4000) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000040)={0x2, 0x1f, 0x7, 0x1, 0x4, 0x2, 0x6, 0x8, 0xfff, 0x9, 0xfc00000000000000, 0x8}) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000200), 0x15b, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newrule={0x34, 0x20, 0xa3bc010931239d7f, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}, @FRA_SRC={0x8}]}, 0x34}}, 0x1) [ 1205.987862] binder: 11790:11791 transaction failed 29201/-22, size 24-8 line 2994 [ 1206.022756] binder: 11790:11791 ioctl c0306201 20000440 returned -14 18:39:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1206.083341] binder_alloc: binder_alloc_mmap_handler: 11790 20001000-20002000 already mapped failed -16 [ 1206.096815] protocol 88fb is buggy, dev hsr_slave_0 [ 1206.103016] protocol 88fb is buggy, dev hsr_slave_1 [ 1206.108503] protocol 88fb is buggy, dev hsr_slave_0 [ 1206.114276] protocol 88fb is buggy, dev hsr_slave_1 18:39:50 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, 0x1ff}, 0x1c) [ 1206.176240] binder: BINDER_SET_CONTEXT_MGR already set [ 1206.181601] binder: 11790:11791 ioctl 40046207 0 returned -16 [ 1206.237162] binder: 11790:11812 got transaction to invalid handle [ 1206.285974] binder: undelivered TRANSACTION_ERROR: 29201 [ 1206.292849] binder: 11790:11812 transaction failed 29201/-22, size 24-8 line 2994 [ 1206.343678] binder: 11790:11812 ioctl c0306201 20000440 returned -14 [ 1206.376646] binder: undelivered TRANSACTION_ERROR: 29201 18:39:51 executing program 3: socketpair$unix(0x1, 0x201, 0x0, &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200000, 0x40) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x9) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$int_in(r1, 0x800010c0045004, 0x0) 18:39:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:51 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@loopback, 0x40}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x3f00000000000000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x10011, r1, 0x0) perf_event_open(&(0x7f00000006c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x0, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x3}) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) mmap$perf(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8, 0x80010, r2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00\"\x00'}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x1, 0x10}, &(0x7f0000000340)=0xc) fsync(r1) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x45, 0x0) sigaltstack(&(0x7f0000000000/0x4000)=nil, &(0x7f0000000b00)) r4 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x6, 0x0) readv(r3, 0x0, 0x0) mkdir(0x0, 0x0) fcntl$setsig(r0, 0xa, 0x10) umount2(&(0x7f0000000740)='./file0\x00', 0xd) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) io_setup(0x1, &(0x7f0000000000)) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) fstat(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) setresuid(r5, r6, r7) open(&(0x7f00000000c0)='./file0\x00', 0x601, 0x180) 18:39:51 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x1ff}, 0x1c) 18:39:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ustat(0x1c, &(0x7f0000000000)) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x200009ee, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40)}], 0x500, 0x0) 18:39:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:51 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, 0x0, 0x0) 18:39:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x20000010, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:51 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80fe]}, 0x1ff}, 0x1c) 18:39:51 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0fe]}, 0x1ff}, 0x1c) 18:39:51 executing program 3: setxattr$trusted_overlay_upper(&(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0) clone(0x44100100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) getpeername$inet(0xffffffffffffffff, 0x0, &(0x7f0000000640)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x87}}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="480000000000000014010000010000000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0503080000000000", @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='C\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="c600000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0f00000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ffff070000000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='*\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000a6689550f4adc75eacac0a65ce4b00000055e3000013f4027282bcd5000000000000000000"], @ANYBLOB='M\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="f400000000000000", @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="db00000000000000"], @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48, 0x7}, 0x0) ptrace$peek(0x4, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vga_arbiter\x00', 0x800, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) [ 1206.933869] binder: 11839:11854 ioctl c0306201 20000440 returned -14 18:39:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:51 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00]}, 0x1ff}, 0x1c) [ 1207.078929] IPVS: ftp: loaded support on port[0] = 21 [ 1207.094237] binder_alloc: binder_alloc_mmap_handler: 11839 20001000-20002000 already mapped failed -16 [ 1207.137862] rdma_op 00000000a018ad76 conn xmit_rdma (null) [ 1207.162202] binder: BINDER_SET_CONTEXT_MGR already set [ 1207.196416] binder: 11839:11850 ioctl 40046207 0 returned -16 [ 1207.212333] binder: release 11839:11854 transaction 730 out, still active [ 1207.227112] binder: unexpected work type, 4, not freed [ 1207.227765] binder_alloc: 11839: binder_alloc_buf, no vma [ 1207.240486] binder: undelivered TRANSACTION_COMPLETE 18:39:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1207.258953] binder: send failed reply for transaction 730, target dead 18:39:51 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x80000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000000c0)={0x6, 0x600000000000000, [0x40000073], [0xc2]}) 18:39:51 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80]}, 0x1ff}, 0x1c) [ 1207.302734] binder: 11839:11854 transaction failed 29189/-3, size 24-8 line 3147 18:39:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000b7e000/0x4000)=nil, 0x4000, 0x13, 0x8012, r0, 0x80000000000000) [ 1207.347067] binder: 11839:11854 ioctl c0306201 20000440 returned -14 [ 1207.370653] binder: undelivered TRANSACTION_ERROR: 29189 18:39:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:39:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:39:52 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0]}, 0x1ff}, 0x1c) 18:39:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000b7e000/0x4000)=nil, 0x4000, 0x13, 0x8012, r0, 0x80000000000000) [ 1207.532067] binder: 11894:11895 ioctl c0306201 20000440 returned -14 [ 1207.562027] rdma_op 000000009a1608c4 conn xmit_rdma (null) 18:39:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7a, 0x0, [0x40000000, 0x0, 0x11, 0x3], [0xc1]}) [ 1207.603348] binder_alloc: binder_alloc_mmap_handler: 11894 20001000-20002000 already mapped failed -16 [ 1207.706554] binder: BINDER_SET_CONTEXT_MGR already set [ 1207.712385] binder: 11894:11895 ioctl 40046207 0 returned -16 [ 1207.762763] IPVS: ftp: loaded support on port[0] = 21 [ 1207.806517] binder: send failed reply for transaction 735 to 11894:11895 [ 1207.813519] binder: undelivered TRANSACTION_COMPLETE [ 1207.821238] kvm [11907]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 [ 1207.832634] binder: undelivered TRANSACTION_ERROR: 29189 [ 1210.256224] net_ratelimit: 20 callbacks suppressed [ 1210.256234] protocol 88fb is buggy, dev hsr_slave_0 [ 1210.266341] protocol 88fb is buggy, dev hsr_slave_1 [ 1210.271463] protocol 88fb is buggy, dev hsr_slave_0 [ 1210.276577] protocol 88fb is buggy, dev hsr_slave_1 [ 1210.496192] protocol 88fb is buggy, dev hsr_slave_0 [ 1210.501309] protocol 88fb is buggy, dev hsr_slave_1 [ 1211.136182] protocol 88fb is buggy, dev hsr_slave_0 [ 1211.141314] protocol 88fb is buggy, dev hsr_slave_1 [ 1211.937471] protocol 88fb is buggy, dev hsr_slave_0 [ 1211.943579] protocol 88fb is buggy, dev hsr_slave_1 [ 1215.296187] net_ratelimit: 20 callbacks suppressed [ 1215.296197] protocol 88fb is buggy, dev hsr_slave_0 [ 1215.306314] protocol 88fb is buggy, dev hsr_slave_1 [ 1216.097058] protocol 88fb is buggy, dev hsr_slave_0 [ 1216.102571] protocol 88fb is buggy, dev hsr_slave_1 [ 1216.110171] protocol 88fb is buggy, dev hsr_slave_0 [ 1216.116434] protocol 88fb is buggy, dev hsr_slave_1 [ 1216.496205] protocol 88fb is buggy, dev hsr_slave_0 [ 1216.501368] protocol 88fb is buggy, dev hsr_slave_1 [ 1216.506564] protocol 88fb is buggy, dev hsr_slave_0 [ 1216.511643] protocol 88fb is buggy, dev hsr_slave_1 [ 1220.656227] net_ratelimit: 20 callbacks suppressed [ 1220.656237] protocol 88fb is buggy, dev hsr_slave_0 [ 1220.666407] protocol 88fb is buggy, dev hsr_slave_1 [ 1220.671600] protocol 88fb is buggy, dev hsr_slave_0 [ 1220.676743] protocol 88fb is buggy, dev hsr_slave_1 [ 1220.907735] protocol 88fb is buggy, dev hsr_slave_0 [ 1220.914175] protocol 88fb is buggy, dev hsr_slave_1 [ 1221.536911] protocol 88fb is buggy, dev hsr_slave_0 [ 1221.542997] protocol 88fb is buggy, dev hsr_slave_1 [ 1222.337319] protocol 88fb is buggy, dev hsr_slave_0 [ 1222.343800] protocol 88fb is buggy, dev hsr_slave_1 18:40:10 executing program 3: setxattr$trusted_overlay_upper(&(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0) clone(0x44100100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) getpeername$inet(0xffffffffffffffff, 0x0, &(0x7f0000000640)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x87}}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="480000000000000014010000010000000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0503080000000000", @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='C\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="c600000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0f00000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ffff070000000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='*\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000a6689550f4adc75eacac0a65ce4b00000055e3000013f4027282bcd5000000000000000000"], @ANYBLOB='M\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="f400000000000000", @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="db00000000000000"], @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48, 0x7}, 0x0) ptrace$peek(0x4, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vga_arbiter\x00', 0x800, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) 18:40:10 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}, 0x1ff}, 0x1c) 18:40:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000b7e000/0x4000)=nil, 0x4000, 0x13, 0x8012, r0, 0x80000000000000) 18:40:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:40:10 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9ae9, 0x10100) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001140)={'broute\x00', 0x0, 0x3, 0x1000, [], 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140)=""/4096}, &(0x7f0000000040)=0x78) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xd1, &(0x7f0000000080)=0xa4ffffff, 0x4) [ 1225.659480] binder: 11923:11924 ioctl c0306201 20000440 returned -14 [ 1225.688227] IPVS: ftp: loaded support on port[0] = 21 [ 1225.696149] net_ratelimit: 20 callbacks suppressed [ 1225.696159] protocol 88fb is buggy, dev hsr_slave_0 18:40:10 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x1ff}, 0x1c) [ 1225.706292] protocol 88fb is buggy, dev hsr_slave_1 [ 1225.713502] binder_alloc: binder_alloc_mmap_handler: 11923 20001000-20002000 already mapped failed -16 [ 1225.728149] binder: BINDER_SET_CONTEXT_MGR already set [ 1225.729458] rdma_op 00000000f2903912 conn xmit_rdma (null) [ 1225.742453] binder: 11923:11924 ioctl 40046207 0 returned -16 18:40:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1225.765836] binder_alloc: 11923: binder_alloc_buf, no vma [ 1225.791752] binder: release 11923:11924 transaction 739 out, still active [ 1225.801069] binder: 11923:11931 transaction failed 29189/-3, size 24-8 line 3147 18:40:10 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000240)='./file0\x00', 0x800d, 0xffffffffffffffff) r2 = add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000380)="85946224058eee0b8d0c10e281adc54c20bbf00e6f3bf861fac70d50d91f0ba1e57616ff776c200e976faa2c13e66adfb26d984e47c88e83caab6c7ba7935488df242c9a8f957d21a148404ec8cbf559c19f760b30ad40117dbf0b76497da436a49c00f5067b9cb953a3769f7c8c25d6f324ca36418ff3e3452c0ed4ed919a6b357bfe549932592953d079265a85f96a58bcaa5ac344d69e95086aac4b9743ff28fedde439306cc1b3da47e406c1c95dd5457c2a0161270cb83d561b298f9984bebd426de7838b0f9605dc62cf289ffcecec3a4214349dd07b0136e50063f0c53e6d946ee037c6a8aa5f93c4fab4a5da", 0xf0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000001c0)={r2, 0x5, 0x5}, &(0x7f0000000280)={'enc=', 'pkcs1', ' hash=', {'sm3-ce\x00'}}, &(0x7f0000000480)="5c12392cce5e4433a5d5db0dc52f8a434520260139fa0d2ce74086aa9a06173a8c95a047633ba9eef98dadc13a252348251fdf11d777d1bc8e7c896b6bdd31d7ade8d77c0ee6429d5df02f22485359b86f1deae62b7fe2209ff5870e2c68cbf0967758329fc59c43142d2ab33b6410067583944ee9f91b41bc5c2d65985f1efac4880971612abc808726320df155e56a5923533140e367aa25bd948c25f793986a67fe37396c58398dabb8c17608b6c9bd5062067df5afefe55ebe7f", &(0x7f0000000540)=""/255) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x30, &(0x7f0000000080)=']security\'posix_acl_accessvboxnet0ppp0mime_type\x00'}, 0x30) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x2) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=r3) ioctl$TCXONC(r0, 0x540a, 0x7fff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='ecryptfs\x00', 0x0, &(0x7f0000000340)=']security\'posix_acl_accessvboxnet0ppp0mime_type\x00') 18:40:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket(0x10, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r2, &(0x7f00000017c0), 0x1a3, 0x400000000000) ioctl$EVIOCSABS0(r2, 0x401845c0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x7) ioctl$FICLONE(r1, 0x40049409, r3) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) [ 1225.816475] binder: unexpected work type, 4, not freed [ 1225.878014] binder: undelivered TRANSACTION_COMPLETE [ 1225.883348] binder: send failed reply for transaction 739, target dead [ 1225.894990] binder: 11923:11931 ioctl c0306201 20000440 returned -14 18:40:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1225.922885] ecryptfs_parse_options: eCryptfs: unrecognized option []security'posix_acl_accessvboxnet0ppp0mime_type] [ 1225.934995] binder: undelivered TRANSACTION_ERROR: 29189 18:40:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1225.970012] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1226.056582] Error parsing options; rc = [-22] [ 1226.085155] binder: 11959:11960 ioctl c0306201 20000440 returned -14 [ 1226.126458] binder_alloc: binder_alloc_mmap_handler: 11959 20001000-20002000 already mapped failed -16 [ 1226.149933] binder: BINDER_SET_CONTEXT_MGR already set [ 1226.166416] binder: 11959:11960 ioctl 40046207 0 returned -16 [ 1226.185513] binder_alloc: 11959: binder_alloc_buf, no vma [ 1226.197338] binder: release 11959:11960 transaction 744 out, still active [ 1226.205226] binder: 11959:11965 transaction failed 29189/-3, size 24-8 line 3147 [ 1226.213380] binder: unexpected work type, 4, not freed [ 1226.233269] binder: undelivered TRANSACTION_COMPLETE [ 1226.243491] binder: 11959:11965 ioctl c0306201 20000440 returned -14 [ 1226.260569] binder: send failed reply for transaction 744, target dead 18:40:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'bond0\x00\x00\x00\x00\xf9\x8b\x00'}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000040)="0f35dfba57e8647866b80e010f00d0f3420f0666bad004edc7442400a5000000c744240261110000c7442406000000000f0114240f01744900f3d21b420f6e8a0c000000673e66410f388143f4", 0x4d}], 0x23d, 0x0, 0x0, 0x24) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:40:10 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x1ff}, 0x1c) 18:40:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x7fffffff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e22, 0x5e51991c, @loopback, 0xff}}, 0x5, 0x7}, 0x90) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0x1000001e2) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x269, &(0x7f0000000040)=[{&(0x7f0000000580)=""/190, 0xf}, {&(0x7f0000000200)=""/222, 0xde}, {&(0x7f0000000d00)=""/152, 0x98}, {&(0x7f0000000fc0)=""/214, 0xfffffd9b}], 0x4, 0x0, 0x230}}], 0x1, 0x0, 0x0) 18:40:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:40:10 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x101000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e24, @remote}], 0x5c) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000340)=""/219, &(0x7f0000000140)=0xdb) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f00000002c0)=[@mask_cswp={0x13, 0x114, 0xc, {{}, &(0x7f0000000e80), &(0x7f0000000ec0)}}], 0x58}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) r3 = getuid() r4 = fcntl$getown(r1, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000005c0)={{0x2, 0x1, 0xfff, 0xffffffffffffffff, 'syz0\x00', 0x2}, 0x1, 0x400, 0x4, r4, 0x4, 0x7f, 'syz0\x00', &(0x7f0000000040)=['self\'\x00', '/dev/input/mice\x00', 'user(system\x00', 'vcan0\x00'], 0x28, [], [0x9, 0xfffffffffffffffd, 0x8, 0x800]}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000280)={0x0, 0x5, "a9771c1941"}, &(0x7f0000000440)=0xd) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000700)={r5, 0x77, 0x4, [0x6, 0x7, 0xfffffffffffffd47, 0x9]}, &(0x7f0000000740)=0x10) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@local, @in=@broadcast, 0x4e20, 0x0, 0x4e22, 0x6, 0xa, 0x20, 0x20, 0x0, r2, r3}, {0x7, 0x100000001, 0xffffffffffffff8a, 0x7ff, 0x7, 0x7ff, 0x2, 0x4}, {0x6, 0x1, 0x7, 0x2}, 0x7, 0x6e6bb0, 0x0, 0x1, 0x2, 0x2}, {{@in6=@mcast2, 0x4d2, 0xff}, 0x0, @in6=@local, 0x0, 0x1, 0x3, 0x8001, 0x8a, 0x9905, 0x54d1}}, 0xe8) [ 1226.288108] binder: undelivered TRANSACTION_ERROR: 29189 [ 1226.331133] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? 18:40:10 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x1ff}, 0x1c) 18:40:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1226.405952] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 1226.424505] binder: 11985:11986 ioctl c0306201 20000440 returned -14 [ 1226.492769] binder_alloc: binder_alloc_mmap_handler: 11985 20001000-20002000 already mapped failed -16 [ 1226.502460] protocol 88fb is buggy, dev hsr_slave_0 [ 1226.502515] protocol 88fb is buggy, dev hsr_slave_1 [ 1226.502614] protocol 88fb is buggy, dev hsr_slave_0 [ 1226.502657] protocol 88fb is buggy, dev hsr_slave_1 [ 1226.536595] binder: BINDER_SET_CONTEXT_MGR already set 18:40:11 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, 0x1ff}, 0x1c) [ 1226.542695] binder: 11985:11986 ioctl 40046207 0 returned -16 18:40:11 executing program 5: syz_open_dev$sndctrl(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000004c0)=ANY=[], 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) socket(0x40008010, 0x4, 0x3) write$P9_RMKDIR(r1, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x45, 0x3, 0x3}}, 0x14) socket(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r3 = dup(r2) set_robust_list(&(0x7f0000000480)={0x0, 0x8, &(0x7f0000000440)}, 0x18) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000003c0)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000500)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000040)={0x3e, 0x3a6, 0x34}) 18:40:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1226.625318] binder: send failed reply for transaction 749 to 11985:11986 [ 1226.652700] binder: undelivered TRANSACTION_COMPLETE [ 1226.683634] binder: undelivered TRANSACTION_ERROR: 29189 18:40:11 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x1ff}, 0x1c) 18:40:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x200, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00\x00\x00\x00\x00\x00\x00\t0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r1, &(0x7f00000005c0)=""/4096, 0x1000) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000040)={0x401, 0x6}) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) 18:40:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:40:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1226.896177] protocol 88fb is buggy, dev hsr_slave_0 [ 1226.901331] protocol 88fb is buggy, dev hsr_slave_1 [ 1226.906550] protocol 88fb is buggy, dev hsr_slave_0 [ 1226.911703] protocol 88fb is buggy, dev hsr_slave_1 [ 1226.984470] binder: 12021:12022 ioctl c0306201 20000440 returned -14 [ 1227.030598] binder_alloc: binder_alloc_mmap_handler: 12021 20001000-20002000 already mapped failed -16 [ 1227.111933] binder: BINDER_SET_CONTEXT_MGR already set 18:40:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x2, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x1, 0x101002) poll(&(0x7f0000000080), 0x0, 0x1) 18:40:11 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, 0x1ff}, 0x1c) 18:40:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x200, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00\x00\x00\x00\x00\x00\x00\t0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r1, &(0x7f00000005c0)=""/4096, 0x1000) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000040)={0x401, 0x6}) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) 18:40:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1227.176256] binder: 12021:12022 ioctl 40046207 0 returned -16 [ 1227.176308] binder_alloc: 12021: binder_alloc_buf, no vma [ 1227.188120] binder: send failed reply for transaction 753 to 12021:12022 [ 1227.195058] binder: undelivered TRANSACTION_COMPLETE [ 1227.206795] binder: undelivered TRANSACTION_ERROR: 29189 [ 1227.218969] binder: 12021:12031 transaction failed 29189/-3, size 24-8 line 3147 18:40:11 executing program 5: r0 = socket$packet(0x11, 0x4, 0x300) r1 = dup3(r0, r0, 0x80000) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000100)={0x0, @bt={0x3, 0x7, 0x1, 0x2, 0x6, 0xffffffffffffffff, 0x1, 0x5, 0x2, 0x8001, 0x40, 0x1ff, 0x3d, 0x80, 0x1, 0x5}}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x0, 0x5}, 0x1c) 18:40:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x2, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1227.325222] binder: 12021:12031 ioctl c0306201 20000440 returned -14 18:40:11 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x80001, 0x0) write$eventfd(r0, &(0x7f0000000200)=0xd72, 0x8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x4000000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x3f00000000000000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x10011, r1, 0x0) perf_event_open(&(0x7f00000006c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x0, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x3}) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00\"\x00'}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x1, 0x10}, &(0x7f0000000340)=0xc) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x45, 0x0) sigaltstack(&(0x7f0000000000/0x4000)=nil, &(0x7f0000000b00)) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x6, 0x0) readv(r2, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000000)) open(&(0x7f00000000c0)='./file0\x00', 0x601, 0x180) 18:40:11 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, 0x1ff}, 0x1c) 18:40:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000ff2000/0x2000)=nil, 0x2000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000000000)={{0x0, 0xffffffff, 0x7f, 0x3, 0x2, 0x2}, 0x4, 0x6, 0x4111, 0xfa, 0xffffffffffffffe0, "284a9cc9c53a6608105775de47b5dda3fdd68ea1be3d13c1096c33efdf92a2cba314b095ff0fe8fd4537755dc819c03cf33f06458139a5eaad523d823a323a4897c5df9e9e1c2fe9e4feba1230aee05595ca4d7862c8af1c9a2d442b39bcc012043865fe995037acc9cfe6ca9e2b8d12e472969b21f37217550a2508c57102b7"}) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1227.407882] binder: undelivered TRANSACTION_ERROR: 29189 18:40:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:40:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x4, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:12 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000d40)={0xa, 0x0, [{0x2, 0x1000, &(0x7f0000001080)=""/4096}, {0x7002, 0x17, &(0x7f0000000240)=""/23}, {0x0, 0xbe, &(0x7f0000000640)=""/190}, {0x3000, 0x29, &(0x7f0000000540)=""/41}, {0xf000, 0xc0, &(0x7f0000000940)=""/192}, {0x100000, 0xee, &(0x7f0000000a00)=""/238}, {0x100002, 0x25, &(0x7f0000000700)=""/37}, {0x11000, 0x4b, &(0x7f0000000b00)=""/75}, {0x2000, 0x5c, &(0x7f0000000b80)=""/92}, {0x2000, 0xc1, &(0x7f0000000c40)=""/193}]}) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000003c0)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x7fff, &(0x7f0000000500)=""/44) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x5}, 0x1dc) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) socket$kcm(0x2, 0x0, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000900)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]) ioctl$SIOCSIFHWADDR(r4, 0x8924, 0x0) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0), 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x9, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x5}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000c00)={r5, &(0x7f0000000a80), 0x0}, 0x18) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video0\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000400)) getresuid(&(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000600)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 18:40:12 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x1ff}, 0x1c) [ 1227.608136] binder: 12067:12074 ioctl c0306201 20000440 returned -14 18:40:12 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, 0x1ff}, 0x1c) [ 1227.770146] binder_alloc: binder_alloc_mmap_handler: 12067 20001000-20002000 already mapped failed -16 [ 1227.807937] binder: BINDER_SET_CONTEXT_MGR already set 18:40:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x34000, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1227.834238] binder_alloc: 12067: binder_alloc_buf, no vma [ 1227.902591] binder: release 12067:12074 transaction 758 out, still active [ 1227.910297] binder: 12067:12069 ioctl 40046207 0 returned -16 [ 1227.916514] binder: unexpected work type, 4, not freed [ 1227.926685] binder: 12067:12074 transaction failed 29189/-3, size 24-8 line 3147 18:40:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x40000, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1227.950085] binder: undelivered TRANSACTION_COMPLETE [ 1227.955360] binder: send failed reply for transaction 758, target dead [ 1228.013454] binder: 12067:12074 ioctl c0306201 20000440 returned -14 18:40:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x1, 0x2000000000002) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000280), 0x108) r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x444, 0x40600) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000400)={0xa153, &(0x7f00000003c0)="a910fb8ea9cf7d6598811104d3324ca1cf30527008c597f331923d89fcf6f2"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x7d, 0x0) mremap(&(0x7f00007c0000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000054000/0x2000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x40000000001, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x1d', 0x80, 0x4e1, &(0x7f00001a7f05)=""/251}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vhci\x00', 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)=ANY=[], 0x0) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000740)=""/155, 0x9b) chroot(&(0x7f0000000040)='./file0\x00') ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000840)={0xffffffffffff7fff}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x3) ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000000000)={0x1000, 'syz0\x00'}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, 0x0, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0xffff) 18:40:12 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0x1ff}, 0x1c) [ 1228.107227] binder: undelivered TRANSACTION_ERROR: 29189 18:40:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:40:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x400300, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1228.325685] binder: 12116:12117 ioctl c0306201 20000440 returned -14 [ 1228.409336] binder_alloc: binder_alloc_mmap_handler: 12116 20001000-20002000 already mapped failed -16 [ 1228.454659] binder: BINDER_SET_CONTEXT_MGR already set [ 1228.491725] binder: 12116:12117 ioctl 40046207 0 returned -16 [ 1228.493901] binder_alloc: 12116: binder_alloc_buf, no vma [ 1228.569956] binder: release 12116:12117 transaction 763 out, still active [ 1228.579206] binder: 12116:12128 transaction failed 29189/-3, size 24-8 line 3147 [ 1228.596769] binder: unexpected work type, 4, not freed [ 1228.602140] binder: undelivered TRANSACTION_COMPLETE 18:40:13 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x1ff}, 0x1c) 18:40:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x1000000, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:13 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/26, 0x27) [ 1228.635030] binder: 12116:12128 ioctl c0306201 20000440 returned -14 [ 1228.646202] binder: send failed reply for transaction 763, target dead [ 1228.734538] binder: undelivered TRANSACTION_ERROR: 29189 18:40:13 executing program 5: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x4035aa40, 0x10d000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) remap_file_pages(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='%\x00', 0x1) remap_file_pages(&(0x7f0000003000/0x9000)=nil, 0x9000, 0x0, 0x0, 0x0) 18:40:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x2000000, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:13 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0x1ff}, 0x1c) 18:40:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:40:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x800) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000000c0)={[{0xf0401c5, 0x3, 0x3, 0x100000001, 0x200000000, 0x4, 0x5, 0x59e11eeb, 0xbeb5806, 0x1, 0x1, 0x590b, 0x6}, {0x0, 0x8, 0x8, 0xc8, 0x401, 0x3, 0x2, 0x2, 0x7, 0x6, 0x7, 0x800}, {0xffffffffffffffff, 0x3, 0x6, 0x9, 0x5, 0x9, 0x8f4, 0x5, 0x1000, 0x6, 0x1f, 0x2, 0x9}], 0x2}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8000400}, 0x1c) 18:40:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x1, 0x2000000000002) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000280), 0x108) r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x444, 0x40600) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000400)={0xa153, &(0x7f00000003c0)="a910fb8ea9cf7d6598811104d3324ca1cf30527008c597f331923d89fcf6f2"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x7d, 0x0) mremap(&(0x7f00007c0000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000054000/0x2000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x40000000001, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x1d', 0x80, 0x4e1, &(0x7f00001a7f05)=""/251}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vhci\x00', 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)=ANY=[], 0x0) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000740)=""/155, 0x9b) chroot(&(0x7f0000000040)='./file0\x00') ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000840)={0xffffffffffff7fff}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x3) ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000000000)={0x1000, 'syz0\x00'}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, 0x0, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0xffff) [ 1228.937845] binder: 12153:12154 transaction failed 29189/-22, size 24-8 line 2994 [ 1228.937873] binder: 12153:12154 ioctl c0306201 20000440 returned -14 18:40:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x4000000000000, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:13 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, &(0x7f0000005d80)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/190, 0xbe}], 0x2}, 0x9}, {{&(0x7f0000001240)=@isdn, 0x80, &(0x7f00000013c0)=[{&(0x7f00000012c0)=""/196, 0xc4}], 0x1, &(0x7f0000001400)=""/62, 0x3e}, 0x6}, {{&(0x7f0000006000)=@generic, 0x80, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/144, 0x90}, {&(0x7f0000001580)=""/86, 0x56}], 0x2, &(0x7f0000001640)=""/114, 0x72}, 0xffffffffffff0001}, {{0x0, 0x0, &(0x7f0000002880), 0x3}, 0x6}, {{&(0x7f00000028c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002940)=""/13, 0xd}, {&(0x7f0000002980)=""/218, 0xda}, {&(0x7f0000002a80)=""/16, 0x10}], 0x3, &(0x7f0000002b00)=""/146, 0x92}, 0x3f}, {{&(0x7f0000002bc0)=@ll, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002c40)=""/202, 0xca}], 0x1, &(0x7f0000006080)=""/156, 0x9c}, 0xffff}, {{&(0x7f0000002e40)=@alg, 0x80, &(0x7f0000004240)=[{&(0x7f0000002ec0)=""/242, 0xf2}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/173, 0xad}, {&(0x7f0000004080)=""/232, 0xe8}, {&(0x7f0000004180)}, {&(0x7f00000041c0)=""/12, 0xc}, {&(0x7f0000004200)=""/21, 0x15}], 0x1000004f, &(0x7f00000042c0)=""/212, 0xd4}, 0xc2}, {{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f00000043c0)=""/177, 0xb1}, {&(0x7f0000004480)}, {&(0x7f00000044c0)=""/134, 0x86}], 0x3, &(0x7f00000045c0)=""/4096, 0x1000}, 0x80000001}, {{&(0x7f00000055c0)=@nfc_llcp, 0x80, &(0x7f0000005a80), 0x0, &(0x7f0000005b00)=""/187, 0xbb}, 0x100000001}, {{&(0x7f0000005bc0)=@can, 0x80, &(0x7f0000005c80)=[{&(0x7f0000005c40)=""/63, 0x3f}], 0x1, &(0x7f0000005cc0)=""/171, 0xab}, 0x400}], 0xa, 0x2040, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000004180)) dup2(r0, r1) getsockopt$inet6_int(r0, 0x29, 0x41, 0x0, &(0x7f0000001440)=0xfffffffffffffe8a) 18:40:13 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, 0x1ff}, 0x1c) [ 1229.045958] binder: 12153:12162 transaction failed 29189/-22, size 24-8 line 2994 18:40:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f00000000c0)=""/91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x29d559bc) [ 1229.119094] binder: undelivered TRANSACTION_ERROR: 29189 [ 1229.127546] binder: 12153:12162 ioctl c0306201 20000440 returned -14 18:40:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x40030000000000, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1229.180064] binder: undelivered TRANSACTION_ERROR: 29189 18:40:13 executing program 5: creat(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x4810904, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000100)=@sg0='/dev/sg0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='rootfs\x00', 0x800000, &(0x7f00000001c0)='nfs\x00') perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, @perf_config_ext, 0xa00000000, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 18:40:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:40:13 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0x1ff}, 0x1c) [ 1229.401279] binder: 12193:12195 ioctl c0306201 20000440 returned -14 [ 1229.446114] rpcbind: RPC call returned error 22 18:40:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x100000000000000, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1229.479770] binder_alloc: binder_alloc_mmap_handler: 12193 20001000-20002000 already mapped failed -16 18:40:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xc8) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8000000000000000, 0x101000) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) shutdown(r1, 0x1) [ 1229.526473] binder: BINDER_SET_CONTEXT_MGR already set 18:40:14 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x40}) read(r0, &(0x7f0000000000)=""/128, 0x80) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x400, 0x0) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000180)={0x6, 0xcb, 0x7fffffff, 0x6, 0x7fffffff, 0x1, 0x5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socketpair$unix(0x1, 0x4000000000000001, 0x0, &(0x7f00000000c0)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x8, 0x181001) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1e, 0x8031, 0xffffffffffffffff, 0x0) [ 1229.582200] binder: 12193:12195 ioctl 40046207 0 returned -16 [ 1229.667965] binder_alloc: 12193: binder_alloc_buf, no vma [ 1229.687374] binder: 12193:12219 transaction failed 29189/-3, size 24-8 line 3147 [ 1229.696863] Unknown ioctl 1075867666 [ 1229.744232] binder: release 12193:12195 transaction 770 out, still active [ 1229.752515] binder: 12193:12219 ioctl c0306201 20000440 returned -14 [ 1229.763061] binder: unexpected work type, 4, not freed [ 1229.785067] binder: undelivered TRANSACTION_COMPLETE [ 1229.815950] binder: undelivered TRANSACTION_ERROR: 29189 [ 1229.839242] binder: send failed reply for transaction 770, target dead 18:40:14 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f00000003c0)={{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d1a}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0xfffffffffffffffe, 0x0, [0x0, 0x1000000]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)=""/197) 18:40:14 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc000000]}, 0x1ff}, 0x1c) 18:40:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x200000000000000, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:14 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7ff, 0x4002) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f00000000c0)) unshare(0x8000000) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x842, 0x0, &(0x7f00000001c0)={0x0, 0x1, 0x5}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000040)) 18:40:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:40:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0xf, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1229.990314] binder: 12228:12230 ioctl c0306201 20000440 returned -14 18:40:14 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe800000]}, 0x1ff}, 0x1c) 18:40:14 executing program 3: socket$rxrpc(0x21, 0x2, 0xa) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x14}}}}}}, 0x0) [ 1230.055237] binder_alloc: binder_alloc_mmap_handler: 12228 20001000-20002000 already mapped failed -16 18:40:14 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x4000000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x3f00000000000000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x10011, r1, 0x0) perf_event_open(&(0x7f00000006c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x0, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x3}) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00\"\x00'}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x1, 0x10}, &(0x7f0000000340)=0xc) sigaltstack(&(0x7f0000000000/0x4000)=nil, &(0x7f0000000b00)) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x20100, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000b40)={"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"}) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x6, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) io_setup(0x1, &(0x7f0000000000)) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x180) [ 1230.106355] binder: BINDER_SET_CONTEXT_MGR already set [ 1230.111752] binder: 12228:12230 ioctl 40046207 0 returned -16 [ 1230.137170] binder_alloc: 12228: binder_alloc_buf, no vma 18:40:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x80, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0xc9}, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00') r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000000c0)={0x10001, 0x6, 0x3, {0x0, 0x1c9c380}, 0x81, 0x8}) sendfile(r2, r1, 0x0, 0x81) [ 1230.226902] binder: release 12228:12230 transaction 775 out, still active [ 1230.234354] binder: 12228:12240 transaction failed 29189/-3, size 24-8 line 3147 [ 1230.249893] binder: unexpected work type, 4, not freed 18:40:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x24, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1230.273071] binder: undelivered TRANSACTION_COMPLETE [ 1230.286421] binder: 12228:12240 ioctl c0306201 20000440 returned -14 [ 1230.314789] binder: send failed reply for transaction 775, target dead [ 1230.617028] Unknown ioctl 1075867666 18:40:15 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) prctl$PR_GET_NAME(0x10, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x180) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, 0xffffffffffffff9c}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 18:40:15 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec00000]}, 0x1ff}, 0x1c) 18:40:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x68, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:40:15 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) 18:40:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000080)=0x6, &(0x7f0000000100)=0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bpq0\x00', 0x10) clone(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) [ 1230.762479] binder: 12278:12280 ioctl c0306201 20000440 returned -14 18:40:15 executing program 3: r0 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, &(0x7f00000000c0)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='yeah\x00', 0x5) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) lseek(r2, 0x0, 0x1) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc08}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000300)=@assoc_value, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000480)={0xffffffff}, 0x4) [ 1230.823474] binder_alloc: binder_alloc_mmap_handler: 12278 20001000-20002000 already mapped failed -16 18:40:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x5000, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1230.885455] binder: BINDER_SET_CONTEXT_MGR already set 18:40:15 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}, 0x1ff}, 0x1c) [ 1230.946813] binder: 12278:12280 ioctl 40046207 0 returned -16 [ 1230.986268] binder_alloc: 12278: binder_alloc_buf, no vma [ 1230.991939] binder: 12278:12301 transaction failed 29189/-3, size 24-8 line 3147 [ 1231.031705] binder: send failed reply for transaction 780 to 12278:12280 [ 1231.045957] binder: undelivered TRANSACTION_COMPLETE [ 1231.056188] net_ratelimit: 20 callbacks suppressed [ 1231.056196] protocol 88fb is buggy, dev hsr_slave_0 [ 1231.056506] binder: 12278:12301 ioctl c0306201 20000440 returned -14 [ 1231.061314] protocol 88fb is buggy, dev hsr_slave_1 18:40:15 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000]}, 0x1ff}, 0x1c) [ 1231.078465] protocol 88fb is buggy, dev hsr_slave_0 [ 1231.080680] binder_release_work: 1 callbacks suppressed [ 1231.080687] binder: undelivered TRANSACTION_ERROR: 29189 [ 1231.083567] protocol 88fb is buggy, dev hsr_slave_1 18:40:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1231.137859] binder: undelivered TRANSACTION_ERROR: 29189 18:40:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x20000918, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = accept4$tipc(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000140)=0x10, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0xc280) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, {0x8, 0x40, 0x7, 0x6, 0xff, 0x3}, 0x8}, 0xa) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) [ 1231.296162] protocol 88fb is buggy, dev hsr_slave_0 [ 1231.299679] binder: 12313:12315 ioctl c0306201 20000440 returned -14 [ 1231.301359] protocol 88fb is buggy, dev hsr_slave_1 18:40:15 executing program 5: r0 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000180)="05", 0x1}], 0x1, 0x81805) lseek(r0, 0x0, 0x3) 18:40:15 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x1ff}, 0x1c) [ 1231.401859] binder_alloc: binder_alloc_mmap_handler: 12313 20001000-20002000 already mapped failed -16 [ 1231.492619] binder: BINDER_SET_CONTEXT_MGR already set 18:40:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x2, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1231.599668] binder: 12313:12315 ioctl 40046207 0 returned -16 [ 1231.599733] binder_alloc: 12313: binder_alloc_buf, no vma [ 1231.610753] binder: send failed reply for transaction 785 to 12313:12315 18:40:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) fcntl$getflags(r1, 0xb) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x7, 0x100, 0x5, {}, {}, {0x0, 0x1, 0x5, 0x40}, 0x1, @can={{0x2, 0x6, 0x7fffffff}, 0x7, 0x1, 0x0, 0x0, "ea78fcc7c231cdec"}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000240)={@loopback, @dev, @local}, &(0x7f0000000280)=0xc) munmap(&(0x7f00001bf000/0x2000)=nil, 0x2000) mmap(&(0x7f00001c0000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) mq_open(&(0x7f00000001c0)='memory.stat\x00', 0x80, 0x0, &(0x7f0000000200)={0x7539, 0x919, 0x8, 0x7ff, 0x91, 0x1, 0x1, 0x5}) [ 1231.655468] binder: undelivered TRANSACTION_COMPLETE [ 1231.689782] binder: 12313:12319 transaction failed 29189/-3, size 24-8 line 3147 [ 1231.694646] binder: undelivered TRANSACTION_ERROR: 29189 18:40:16 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x1ff}, 0x1c) [ 1231.738662] binder: 12313:12319 ioctl c0306201 20000440 returned -14 [ 1231.789954] binder: undelivered TRANSACTION_ERROR: 29189 [ 1231.936158] protocol 88fb is buggy, dev hsr_slave_0 [ 1231.941294] protocol 88fb is buggy, dev hsr_slave_1 18:40:16 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x800, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x1a1000, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r1, 0x4) r2 = socket$inet(0x2, 0x80003, 0x100) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000280)={'syzkaller1\x00', 0x7ff}) r3 = socket$packet(0x11, 0x8000000003, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x0, 0x8000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000380)) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x400000000000030, 0x0) r6 = accept4(r5, &(0x7f0000000180)=@caif=@dbg, &(0x7f0000000100)=0x80, 0x800) bind$alg(r6, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) keyctl$describe(0xb, 0x0, 0x0, 0x0) 18:40:16 executing program 5: socketpair$unix(0x1, 0x800000000000002, 0x0, &(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0x10) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x1, 0x2a0800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffc3) 18:40:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:40:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x5, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:16 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, 0x1ff}, 0x1c) 18:40:16 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400002, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e21, 0x8, @remote, 0x5}, {0xa, 0x4e20, 0x3, @local, 0x80000001}, 0x80000000, [0x3, 0x3ff, 0x81, 0x140, 0x0, 0x0, 0x2, 0x40]}, 0x5c) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000180)={r0, r0, 0x3}) unlink(&(0x7f0000000240)='./file0\x00') 18:40:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x6, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1232.483785] binder: 12356:12357 ioctl c0306201 20000440 returned -14 18:40:17 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x1ff}, 0x1c) 18:40:17 executing program 5: unshare(0x600) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ashmem\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000080)={0x1, 0x0, {0x479, 0x2, 0x301d, 0x0, 0x4, 0x5, 0x0, 0x6}}) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/udmabuf\x00', 0x2) [ 1232.549453] binder_alloc: binder_alloc_mmap_handler: 12356 20001000-20002000 already mapped failed -16 18:40:17 executing program 0: r0 = socket(0x40000000011, 0x3, 0xfffffffffffffff8) fstat(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) chown(&(0x7f0000000580)='./file0\x00', r1, r2) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x4f5, 0x400) r4 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x10000000009, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f0000000080)={0x2, 0x9}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x2280c0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f0000000100)={0xffffffffffffffff}, 0x4, 0xffffffffffffffff, 0x1c, 0x1, @in={0x2, 0x4e22, @multicast1}}}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000000)={0x3, 0x9632}) syz_open_dev$adsp(&(0x7f0000000380)='/dev/adsp#\x00', 0x7, 0x200) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x5000000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000240)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r6}}, 0x18) [ 1232.656390] binder: BINDER_SET_CONTEXT_MGR already set [ 1232.674384] binder: 12356:12357 ioctl 40046207 0 returned -16 [ 1232.681321] binder_alloc: 12356: binder_alloc_buf, no vma [ 1232.694016] binder: 12356:12380 transaction failed 29189/-3, size 24-8 line 3147 18:40:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x7, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1232.719852] binder: 12356:12380 ioctl c0306201 20000440 returned -14 [ 1232.736165] protocol 88fb is buggy, dev hsr_slave_0 [ 1232.737570] binder: release 12356:12357 transaction 790 out, still active [ 1232.741389] protocol 88fb is buggy, dev hsr_slave_1 18:40:17 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, 0x1ff}, 0x1c) [ 1232.797801] binder: unexpected work type, 4, not freed [ 1232.879570] binder: undelivered TRANSACTION_COMPLETE [ 1232.916342] binder: undelivered TRANSACTION_ERROR: 29189 [ 1232.956998] binder: send failed reply for transaction 790, target dead 18:40:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x320) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0xa, 0x10, "f3e7617c37e299de68d7db78b0b74978468f0cc842b6bb2b4ff9a6389a587abe7f612bedda1a48c8290ddf5bd21a37e81102a5595ec4e00415fc31c1a16f9d16", "e7a7baf4959e5ad91620022b437977e2870ea17c2e65bb9e6efe183e9950766ef7845a83edc0e3c44dd8ecd6509a80e82da078b60ac0b229bc0f43c01fbb77d1", "8bb610868ff9f194410e6283fe34b8e076ed4f77285127e44f701810b17fb23c", [0x81, 0x3]}) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="05"]) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x15200}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:40:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) r5 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000380)=0xc) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) getgroups(0xa, &(0x7f00000004c0)=[0xee01, 0x0, 0xee00, 0x0, r2, 0xee00, 0x0, r7, 0x0, 0x0]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f00000005c0)=[0xee00, 0x0, 0xee00, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000600)={{}, {0x1, 0x7}, [{0x2, 0x5, r1}, {0x2, 0x3, r3}, {0x2, 0x1, r4}, {0x2, 0x7, r5}, {0x2, 0x6, r6}], {0x4, 0x4}, [{0x8, 0x4, r7}, {0x8, 0x5, r8}, {0x8, 0x1, r9}, {0x8, 0x5, r10}, {0x8, 0x4, r11}], {0x10, 0x1}, {0x20, 0x7}}, 0x74, 0x1) r12 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dlm_plock\x00', 0x1, 0x0) ioctl$SG_GET_VERSION_NUM(r12, 0x2282, &(0x7f00000006c0)) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r14, 0x1, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) 18:40:17 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x100000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'ipddp0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x10000, 0x0) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000100)={0x14d, 0x9, 0x800000000000}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001400010300000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140001000400000000000000000000000a64e2d4"], 0x2c}}, 0x0) 18:40:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:40:17 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, 0x1ff}, 0x1c) 18:40:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{0x2}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{0x4}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1233.404526] binder: 12400:12401 ioctl c0306201 20000440 returned -14 [ 1233.442464] binder_alloc: binder_alloc_mmap_handler: 12400 20001000-20002000 already mapped failed -16 18:40:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local}, 0xc) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x13, 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r1, r2, 0x0) timerfd_create(0x7, 0x0) 18:40:18 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x1ff}, 0x1c) [ 1233.503884] binder: BINDER_SET_CONTEXT_MGR already set [ 1233.574114] binder: 12400:12401 ioctl 40046207 0 returned -16 [ 1233.598999] binder: release 12400:12401 transaction 795 out, still active [ 1233.606543] binder_alloc: 12400: binder_alloc_buf, no vma 18:40:18 executing program 0: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00', 0x20, 0x2, 0x1d8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x250) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000940], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x1fc) [ 1233.619536] binder: unexpected work type, 4, not freed [ 1233.633192] binder: 12400:12416 transaction failed 29189/-3, size 24-8 line 3147 [ 1233.649002] binder: undelivered TRANSACTION_COMPLETE [ 1233.654258] binder: send failed reply for transaction 795, target dead 18:40:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{0x34000}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:18 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x1ff}, 0x1c) [ 1233.676932] binder: 12400:12416 ioctl c0306201 20000440 returned -14 [ 1233.716728] binder: undelivered TRANSACTION_ERROR: 29189 18:40:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) r3 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000000c0)) ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="1d1cb8bfe63c91372428e26a4854edd8d8a02e094096046d98e0afb3a3362a705cb0d07ae56348b58ac0fed3c61924168f1585f7b926488a0299c3e64ca9785d1f78c919b34228d17920cd2707ffc7e0df86bbaa986dfedb186062219bc3d585c38a7ede4ca34734e2f207252d0241df3fed00b5b40b0db9d973270bd0ff15601f57b413979db8c52d99c66b7d34e1e300cb3f854e5796506d1d64cb5e562be52a584296ba0a68b8652dee840e66127e91f9b7c2a63bd29e958e655b04d41a11284dc8897b596159f77e5b6d625b8db793274c59dd1310f9603c0fe3724b8407dfc1bbc9248463a805f1f7eea08341c40951d072da2998e1e1fb279b0b1c"}], 0x40, 0x0) 18:40:18 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0305302, &(0x7f0000dc5f98)) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) write$P9_RREMOVE(r2, &(0x7f0000000080)={0x7, 0x7b, 0x1}, 0x7) 18:40:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:40:18 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x159) r0 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) close(r1) clone(0x2102001dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480), 0x0) 18:40:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{0x40000}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:18 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, 0x1ff}, 0x1c) [ 1233.934409] binder: 12453:12455 ioctl c0306201 20000440 returned -14 [ 1233.992586] binder_alloc: binder_alloc_mmap_handler: 12453 20001000-20002000 already mapped failed -16 [ 1234.023949] binder: BINDER_SET_CONTEXT_MGR already set [ 1234.034323] binder: 12453:12455 ioctl 40046207 0 returned -16 18:40:18 executing program 5: clone(0x2102407ff3, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f00000000c0)) exit(0x510) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4) write(r0, &(0x7f00000004c0)="230089e4d322be9f42856d115bab0d516715ac73e2f4f0fa242bda3a79bbde30e2af5fbff930b660105cef37bd864b95ef57f443face3828c554f1a9faf4752ca88dda34a76b73887024f504b442322590f4147a2238a89c248cc6745c4fc3832db32b11e1c9c72fd61181802760fb4f3b499cc52e4641bf64ba80793bdcc8a9d564e9e9", 0x84) wait4(0x0, 0x0, 0x40000000, 0x0) getdents64(r0, 0x0, 0x0) 18:40:18 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000040)={0x6000, 0x100000}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2d, 'memory'}, {0x2d, 'rdma'}, {0x2d, 'io'}]}, 0x12) write$cgroup_subtree(r2, 0x0, 0x0) [ 1234.042977] binder_alloc: 12453: binder_alloc_buf, no vma [ 1234.075349] binder: release 12453:12455 transaction 800 out, still active 18:40:18 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x1ff}, 0x1c) 18:40:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{0x400300}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1234.086939] binder: 12453:12466 transaction failed 29189/-3, size 24-8 line 3147 [ 1234.103931] binder: unexpected work type, 4, not freed [ 1234.122429] binder: undelivered TRANSACTION_COMPLETE [ 1234.156829] binder: 12453:12466 ioctl c0306201 20000440 returned -14 [ 1234.170721] binder: send failed reply for transaction 800, target dead [ 1234.195492] binder: undelivered TRANSACTION_ERROR: 29189 18:40:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:40:18 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}, 0x1ff}, 0x1c) [ 1234.306726] binder: 12491:12492 ioctl c0306201 20000440 returned -14 [ 1234.323449] binder_alloc: binder_alloc_mmap_handler: 12491 20001000-20002000 already mapped failed -16 [ 1234.374844] binder: BINDER_SET_CONTEXT_MGR already set [ 1234.411721] binder: 12491:12492 ioctl 40046207 0 returned -16 [ 1234.419805] binder_alloc: 12491: binder_alloc_buf, no vma [ 1234.425594] binder: 12491:12503 transaction failed 29189/-3, size 24-8 line 3147 [ 1234.440753] binder: 12491:12503 ioctl c0306201 20000440 returned -14 [ 1234.449055] binder: release 12491:12492 transaction 805 out, still active [ 1234.465836] binder: unexpected work type, 4, not freed [ 1234.471835] binder: undelivered TRANSACTION_COMPLETE [ 1234.477486] binder: undelivered TRANSACTION_ERROR: 29189 [ 1234.483316] binder: send failed reply for transaction 805, target dead 18:40:19 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}]}) ioctl$TIOCCBRK(r0, 0x5428) 18:40:19 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3ee, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000140)={'raw\x00'}, &(0x7f00000000c0)=0x54) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000000002d00000000e0ff0000000000"]}}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000280)=0x80000001) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x4, 0x4) 18:40:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{0x1000000}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:19 executing program 0: timer_delete(0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x40000, 0x0) syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x0, 0x10c00) r0 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x2, 0x2) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) openat$udambuf(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/udmabuf\x00', 0x2) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4) r2 = accept$alg(r1, 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x840, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000200)={0x100000000, 0x11, 0x1}) sendmmsg$alg(r2, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000000)={0x0, 0x800100, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1008}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f00000007c0)) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, 0x0) 18:40:19 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000]}, 0x1ff}, 0x1c) 18:40:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:40:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{0x2000000}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1234.856521] binder: 12510:12512 ioctl c0306201 20000440 returned -14 [ 1234.878042] binder_alloc: binder_alloc_mmap_handler: 12510 20001000-20002000 already mapped failed -16 18:40:19 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaaaafeffaaaaa8]}, 0x1ff}, 0x1c) [ 1234.937562] binder: BINDER_SET_CONTEXT_MGR already set [ 1234.959494] binder: 12510:12512 ioctl 40046207 0 returned -16 18:40:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x803}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x802, 0x0) rseq(0x0, 0x0, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000240)=ANY=[@ANYBLOB="4800ee29599a069e5ed477b82d9162e61de0c9e20024dd4e10dd91371b45d5b799524256ab1259c1df326800a69710c82e3623a65d39d613e27444c7a49f336eb8e896a7133f019a26ced3fc62db94a93342b677067f24ed431b228da9c670d4c850725cf7cb557f4e1173a4ad6cc5eaf38ffb51070b0300000000000000394ea72da8561194df7a93f0cd3d32023fd66ccaf4635d"], 0x0) ppoll(&(0x7f0000000080)=[{r1}], 0x1, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180), 0x8) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000380)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) [ 1235.007924] binder_alloc: 12510: binder_alloc_buf, no vma 18:40:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{0x4000000000000}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:19 executing program 5: setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000002d80), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x6, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400), 0x0) recvmmsg(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) shutdown(r0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioprio_get$pid(0x0, 0x0) 18:40:19 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x1ff}, 0x1c) [ 1235.054678] binder: send failed reply for transaction 810 to 12510:12512 [ 1235.065352] binder: undelivered TRANSACTION_COMPLETE [ 1235.085309] binder: 12510:12540 transaction failed 29189/-3, size 24-8 line 3147 [ 1235.093492] binder: undelivered TRANSACTION_ERROR: 29189 18:40:19 executing program 0: setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x840, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000200)={0x100000000, 0x11, 0x1}) sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x800100, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1008}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) sched_yield() setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000240)=@security={'security\x00', 0xe, 0x4, 0x438, 0x110, 0x110, 0x278, 0x0, 0x0, 0x368, 0x368, 0x368, 0x368, 0x368, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xc8, 0x110}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xffffffff, 'syz0\x00', 0x3}}}, {{@ipv6={@mcast2, @mcast1, [0xffffffff, 0xffffff00, 0xffffffff, 0xff0000ff], [0xffffff00, 0x0, 0xffffffff], 'syzkaller0\x00', 'ipddp0\x00', {0xff}, {0xff}, 0x7f, 0x6, 0x6, 0x14}, 0x0, 0x140, 0x168, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x6, 0x4, 0x1, [0x8, 0x3, 0x9, 0x0, 0x9e, 0x10001, 0x9, 0x1, 0x4, 0x8, 0x2a08caab, 0x5, 0x6, 0xfffffffffffff800, 0x2000000000000, 0x3], 0x4}}, @common=@srh={0x30, 'srh\x00', 0x0, {0x0, 0x1000, 0x4, 0x5, 0x3ff, 0x2288, 0x24}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x4}}}, {{@ipv6={@remote, @rand_addr="a7ff1ffe8d08b01d8ed2040353a5310c", [0x0, 0xff000000, 0x0, 0xffffffff], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'syzkaller0\x00', 'bond_slave_1\x00', {}, {0xff}, 0xaf, 0x48c, 0x7, 0x46}, 0x0, 0xc8, 0xf0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x21}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) [ 1235.155214] binder: 12510:12540 ioctl c0306201 20000440 returned -14 18:40:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{0x40030000000000}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1235.216722] binder: undelivered TRANSACTION_ERROR: 29189 18:40:19 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}, 0x1ff}, 0x1c) 18:40:19 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x4000000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10011, r0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$audion(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x1010, r1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, 0x0, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r3, &(0x7f0000000040)=""/28, 0x7575) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x0, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000380)) gettid() ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000400)={0x0, 0x0, @ioapic}) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) 18:40:19 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}, 0x1ff}, 0x1c) [ 1235.373619] binder: 12565:12567 ioctl c0306201 20000440 returned -14 [ 1235.403477] binder_alloc: binder_alloc_mmap_handler: 12565 20001000-20002000 already mapped failed -16 18:40:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{0x100000000000000}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1235.458329] binder: BINDER_SET_CONTEXT_MGR already set [ 1235.490287] binder: 12565:12567 ioctl 40046207 0 returned -16 [ 1235.524838] binder_alloc: 12565: binder_alloc_buf, no vma [ 1235.542311] binder: 12565:12583 transaction failed 29189/-3, size 24-8 line 3147 [ 1235.559001] binder: 12565:12583 ioctl c0306201 20000440 returned -14 [ 1235.578786] binder: release 12565:12567 transaction 815 out, still active 18:40:20 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10aaaafeffaaaaa8]}, 0x1ff}, 0x1c) [ 1235.604182] binder: unexpected work type, 4, not freed [ 1235.632586] binder: undelivered TRANSACTION_COMPLETE [ 1235.661462] binder: send failed reply for transaction 815, target dead 18:40:20 executing program 3: r0 = socket$inet(0x2, 0x7, 0x42f2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x1, 0x160, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000340], 0x0, 0x0, &(0x7f0000000340)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0xb, 0x0, 0x8100, 'bcsf0\x00\x00\x00\x00\b\x00', 'sit0\x00\x00\x02\x00\x00\x00\xff\xff\x00', 'ipddp0\x00', 'veth0\x00', @broadcast, [], @empty, [], 0xa0, 0xa0, 0xd0, [@vlan={'vlan\x00', 0x8, {{0x1, 0x0, 0x0, 0x1}}}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1d8) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@md5={0x1, "aae877975406abfe91a9e4873f668d24"}, 0x11, 0x2) 18:40:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{0x200000000000000}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:40:20 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, 0x1ff}, 0x1c) 18:40:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'\x00\xacs\x00\x00\x00\x00\x00\xec\x97?\x82\x0f|@\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20000000339) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x3, 0x30, 0x2, 0x8}, &(0x7f0000000040)=0x18) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x9, 0x8004, 0x3, 0x1000, 0x61, 0x5, 0x7, r1}, &(0x7f00000000c0)=0x20) close(r0) [ 1236.096202] net_ratelimit: 20 callbacks suppressed [ 1236.096211] protocol 88fb is buggy, dev hsr_slave_0 [ 1236.106424] protocol 88fb is buggy, dev hsr_slave_1 18:40:20 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}, 0x1ff}, 0x1c) [ 1236.181004] binder: 12603:12605 ioctl c0306201 20000440 returned -14 [ 1236.205844] binder_alloc: binder_alloc_mmap_handler: 12603 20001000-20002000 already mapped failed -16 18:40:20 executing program 3: r0 = socket$packet(0x11, 0x207, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xe, 0x0, 0x0) 18:40:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{0x0, 0x2}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1236.246583] binder_alloc: 12603: binder_alloc_buf, no vma [ 1236.292020] binder: BINDER_SET_CONTEXT_MGR already set [ 1236.334381] binder: release 12603:12605 transaction 820 out, still active [ 1236.345303] binder: 12603:12605 ioctl 40046207 0 returned -16 [ 1236.348204] binder: 12603:12613 transaction failed 29189/-3, size 24-8 line 3147 [ 1236.354236] binder: unexpected work type, 4, not freed [ 1236.382633] binder: undelivered TRANSACTION_COMPLETE [ 1236.389280] binder: send failed reply for transaction 820, target dead 18:40:21 executing program 5: setxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.capability\x00', 0x0, 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x8000000000) getresuid(0x0, 0x0, &(0x7f00000001c0)) getrusage(0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000140)) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000a80)='keyring]\x00'}, 0x30) ioctl$TIOCGPGRP(r1, 0x540f, 0x0) ioctl$int_out(r0, 0x5462, &(0x7f0000000080)) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) shmget(0x0, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) openat$pfkey(0xffffffffffffff9c, 0x0, 0x10800, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x0, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x0) unshare(0x40000000) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f00000000c0)={0x0, {0x1}}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, 0x0) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000040)={0x10, 0x40, &(0x7f00000003c0)="dc1093aefbec5751a567b879542dbe63149d5734b65cb50bc918118137bb94956e28f88052b942dab87e64a331f76a5a4d4f2f2e7c0bf49f49deeaa8ffb4006420bb35200ee27690473d353e6fab86ebe492090e30f68c9390d3bfb8575d1b6ac339c166e6a5d1b770da08f56bb2c3aa607cd552f35750c5a6afb8e3a08466ff2441e5512b5f1dd37b2c8e6cec4d2328cd4accc5f68da0793feb3798a78ad63dbe6b61349cd9366675ec64239eab7285b59d0bdbb48e6a92515280d7216a6c04a89eb1d57752415d940b4482506dcd146a3166e400ad67692772427a96d34be2", {0x4, 0x81, 0x38414262, 0x5, 0x1, 0x100000001, 0x9, 0x3ff}}) syz_open_dev$loop(0x0, 0x100000001, 0x0) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f00000004c0)) 18:40:21 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000]}, 0x1ff}, 0x1c) 18:40:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070") getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_default\x00', &(0x7f00000000c0)=""/26, 0x1a) socket$isdn(0x22, 0x3, 0x11) syz_emit_ethernet(0x2e, &(0x7f0000000140)={@local, @empty, [{[], {0x8100, 0x2, 0x6, 0x3}}], {@arp={0x4305, @ether_ipv4={0xf00f, 0x8100, 0x6, 0x4, 0x0, @local, @dev, @dev}}}}, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0xc8, 0x1, 0x101, "471971550a15824d31812570fe153b3d", "f26a80ec0135457d5a37229da141556766e625dec4b2c93595bfb3166e327b7c10c8ab951d6978547d21caa42813a1baff94ffacd972ea5e1f9a904e709145ea6a68c63a0b594468817915740908be2ae36fc4255f875d905d920cedccf5cc2dd9f4cd9061d711b2f6f311d44a3a935cb88f4fd7f9a3aa6f9ea14804a244795ca1c4fd78d0e99a324b09718b24228d660a97feaf07994712396af4b31c69e25a0680b13a7a9555b3fd597f06abd7a3b108f90c"}, 0xc8, 0x1) 18:40:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{0x0, 0x4}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1236.446249] binder: 12603:12613 ioctl c0306201 20000440 returned -14 [ 1236.452984] binder_release_work: 1 callbacks suppressed [ 1236.452992] binder: undelivered TRANSACTION_ERROR: 29189 18:40:21 executing program 0: sched_setaffinity(0x0, 0xfffffffffffffc29, &(0x7f0000000140)=0x105) r0 = syz_open_dev$vcsa(0x0, 0x4, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000100)={0x7, 0x6e}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000000c0)=0x1, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000000680)={&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xa}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000500)="fe", 0x1}], 0x1}, 0x20048845) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240)={r3, 0x0, 0x7}, 0x8) dup3(r1, r2, 0x0) 18:40:21 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000180)={0x5, [0x4, 0x4, 0x4, 0x0, 0x8]}, 0xe) ptrace$getregset(0x4205, r0, 0x201, &(0x7f0000000100)={0x0}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x17f) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000000c0)={0x100, 0x6, 0x7fff, 0xdd, 0xe, 0x1, 0x7fff, 0x3, 0x8, 0x5, 0x1, 0x20}) 18:40:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:40:21 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}, 0x1ff}, 0x1c) 18:40:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{0x0, 0x34000}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1236.735527] binder: 12653:12654 ioctl c0306201 20000440 returned -14 18:40:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={r2, 0x3}) ftruncate(r1, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r3, 0x0) mlock(&(0x7f0000006000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1) mlock(&(0x7f0000003000/0x3000)=nil, 0x3000) 18:40:21 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000]}, 0x1ff}, 0x1c) 18:40:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{0x0, 0x40000}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1236.813486] binder_alloc: binder_alloc_mmap_handler: 12653 20001000-20002000 already mapped failed -16 [ 1236.859291] binder: BINDER_SET_CONTEXT_MGR already set [ 1236.864652] binder: 12653:12654 ioctl 40046207 0 returned -16 [ 1236.896154] protocol 88fb is buggy, dev hsr_slave_0 [ 1236.901341] protocol 88fb is buggy, dev hsr_slave_1 [ 1236.906560] protocol 88fb is buggy, dev hsr_slave_0 [ 1236.911650] protocol 88fb is buggy, dev hsr_slave_1 [ 1236.928135] binder_alloc: 12653: binder_alloc_buf, no vma [ 1236.964253] binder: release 12653:12654 transaction 825 out, still active [ 1236.972285] IPVS: ftp: loaded support on port[0] = 21 [ 1236.974703] binder: 12653:12673 transaction failed 29189/-3, size 24-8 line 3147 [ 1236.995879] binder: unexpected work type, 4, not freed [ 1237.009459] binder: undelivered TRANSACTION_COMPLETE [ 1237.018758] binder: 12653:12673 ioctl c0306201 20000440 returned -14 [ 1237.045442] binder: send failed reply for transaction 825, target dead [ 1237.065822] binder: undelivered TRANSACTION_ERROR: 29189 18:40:21 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'veth1_to_hsr\x00', {0x2, 0x4e24, @rand_addr=0x80000001}}) 18:40:21 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15aaaafeffaaaaa8]}, 0x1ff}, 0x1c) 18:40:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{0x0, 0x400300}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:21 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x6, 0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x3, 0x0, 0x0, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x34, &(0x7f0000000000)={0xc, 0x4, 0x20}) 18:40:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1237.290512] IPVS: ftp: loaded support on port[0] = 21 [ 1237.306179] protocol 88fb is buggy, dev hsr_slave_0 [ 1237.311331] protocol 88fb is buggy, dev hsr_slave_1 [ 1237.316526] protocol 88fb is buggy, dev hsr_slave_0 [ 1237.321595] protocol 88fb is buggy, dev hsr_slave_1 [ 1237.403191] binder: 12691:12692 ioctl c0306201 20000440 returned -14 18:40:22 executing program 3: mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0xfffffffffffffffd, 0x4001b071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x200, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xffd8) recvmmsg(r1, &(0x7f0000001f4c), 0x8000000000001c0, 0x0, 0x0) 18:40:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{0x0, 0x1000000}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:22 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42c00) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'ip_vti0\x00', {0x2, 0x4e20, @broadcast}}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000040)=0x8, 0x4) 18:40:22 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600000000000000]}, 0x1ff}, 0x1c) 18:40:22 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r1) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x8, 0x2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8020000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xdc, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x24}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_LINK={0x2c, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x14) bind$alg(r2, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) [ 1237.479768] binder_alloc: binder_alloc_mmap_handler: 12691 20001000-20002000 already mapped failed -16 [ 1237.526490] binder: BINDER_SET_CONTEXT_MGR already set [ 1237.531858] binder: 12691:12692 ioctl 40046207 0 returned -16 18:40:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{0x0, 0x2000000}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:22 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) [ 1237.644223] binder: release 12691:12692 transaction 830 out, still active [ 1237.655517] binder: unexpected work type, 4, not freed [ 1237.669131] binder: undelivered TRANSACTION_COMPLETE 18:40:22 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x6, 0x100) bind$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0xf0c, 0x2000) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x1, 0x30000) ioctl$VIDIOC_ENUMSTD(r3, 0xc0485619, &(0x7f00000001c0)={0x8, 0x10003, "260ecf78b208b723d27f2037ac99ce181c9d275be82f3a26", {0xa143, 0x5a95}}) rt_sigprocmask(0x0, &(0x7f0000055000)={0xffb}, 0x0, 0x8) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x16) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x7fff, 0x5, 0x3, 0x0, "bba530b916e63fea3aff51a6f394cee6eea7770c306520853de5ee48e1e5db0675c2d3ecda824f915df58980128da0a89a79ab4506d2da317a0c8f980e377315", "f63b08ad95a484b3a4ef64574d3b8b61f775490ddd648bb806056e15a4f21ef4", [0x7fff, 0x5]}) r4 = getpid() r5 = gettid() setxattr$security_selinux(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.selinux\x00', &(0x7f0000000500)='system_u:object_r:ssh_agent_exec_t:s0\x00', 0x26, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000fc7000)=""/128, 0x80}], 0x100000000000029e) tgkill(r4, r5, 0x1000000000001) signalfd4(r1, &(0x7f0000000080)={0x8f4b}, 0x8, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000003c0)=""/162) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x460680, 0x0) 18:40:22 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16aaaafeffaaaaa8]}, 0x1ff}, 0x1c) [ 1237.701495] binder: send failed reply for transaction 830, target dead 18:40:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:40:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{0x0, 0x4000000000000}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:22 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x1fffffffffffff51, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x2e}}, &(0x7f0000000200)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\b\x00\x00\x00\x00\x00\x00\x00\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\xdepW\xcd\xee', 0x7, 0x0, 0x0, 0x2, 0x0, [], 0x0, 0x10000000}, 0x48) 18:40:22 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1700000000000000]}, 0x1ff}, 0x1c) [ 1237.892402] binder: 12745:12747 ioctl c0306201 20000440 returned -14 [ 1237.913786] binder_alloc: binder_alloc_mmap_handler: 12745 20001000-20002000 already mapped failed -16 [ 1237.914146] binder: BINDER_SET_CONTEXT_MGR already set 18:40:22 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f00000003c0)="1f0000000104ff00004354c007110000f305010008000100010423dcffdf00", 0x1f) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4000, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000080)=""/151) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000200000052000000cf", 0x1f) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000140)) [ 1237.985432] binder: release 12745:12747 transaction 834 out, still active [ 1237.995578] binder: 12745:12747 ioctl 40046207 0 returned -16 [ 1238.006692] binder: unexpected work type, 4, not freed [ 1238.034886] binder: undelivered TRANSACTION_COMPLETE 18:40:22 executing program 5: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) getpid() tkill(r1, 0x30) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0d2fc73cda1fb504b70a000a00000000a5430e5f9b30711480698d97911582f5540bad3640000000e800000000000000ef3d6b00000000bdb6"], 0x39) r2 = syz_open_procfs(r1, &(0x7f0000000000)='io\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, @in6={0xa, 0x4e24, 0x3f, @rand_addr="51c3737bf23d9efc8a1b9755d05d67a1", 0x101}, @in6={0xa, 0x4e23, 0x0, @remote, 0x7}], 0x54) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x3, 0x2000) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0x9, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 18:40:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{0x0, 0x40030000000000}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) [ 1238.070083] binder: send failed reply for transaction 834, target dead [ 1238.100033] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1238.189051] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 18:40:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x9) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f00000001c0)) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000100)=0x4, 0x4) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/36, 0x24}, 0x2000) sendmmsg(r1, &(0x7f00000000c0), 0x182, 0x0) 18:40:23 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17aaaafeffaaaaa8]}, 0x1ff}, 0x1c) 18:40:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:40:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{0x0, 0x100000000000000}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:23 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgro\x01\x00\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='io.max\x00\xe3\xc6\xa1\xbc\x16\x94p`R\xfbqcm\xab\x87\xf6\xb6y8uoG\x18\xd4\xc8*R6\x84\xfb\xfbU0xffffffffffffffff, 0xffffffffffffffff}) getgroups(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getrule={0x14, 0x22, 0x401}, 0x251}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x80000, 0x40) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000200)={0x2, r3}) [ 1238.521828] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1238.524998] binder: 12803:12806 ioctl c0306201 20000440 returned -14 18:40:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) fcntl$setflags(r0, 0x2, 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="fc00000048000700ab0925ee090007000a060000000000000001369321000100ff0100000005d00000000000000398996c92770411419da79bb94b46fe000000bc00020000036c6c256f1a272f2e117c22ebc205214000000000008934d07302ad031720d7d5bb6b07e4f40000000000005a32e280fc83ab82f605f70c9ddef245c1bc79", 0x84) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000180)=0x1) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0x200000d7}], 0x1) write$binfmt_elf32(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000038000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080e2bdded2f21cd2b25846fdd38f89de31920c25548c0798bc7b7d36ea4223b7161731a3a1800451c62045f4d1795918771bef496f028ebc3eba879f84758fa06fb8abb9124ac1dc60fea25ae287c65695cf17c840f45eaaf403cd6be8e616ef21cd3bf37cbda54aa62b9c63e46d45224b4c36cdf6c3d4158dff7197a1e9231a591d232790dfbc0ae714cb027436"], 0xe6) 18:40:23 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000]}, 0x1ff}, 0x1c) [ 1238.569058] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 18:40:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000340)={0x0, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xec\xff\xff\xff\xff\xff\xff\xff\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000480)=""/195, 0xc3}, 0x4d6) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uhid\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040), 0x21c}], 0x8) 18:40:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{0x0, 0x200000000000000}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f00001a7000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000b89000/0x3000)=nil) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc04000, 0x4000000000000008) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) [ 1238.694056] binder_alloc: binder_alloc_mmap_handler: 12803 20001000-20002000 already mapped failed -16 [ 1238.767359] binder_alloc: 12803: binder_alloc_buf, no vma [ 1238.780238] binder: 12803:12806 transaction failed 29189/-3, size 24-8 line 3147 [ 1238.788769] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1238.795502] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 18:40:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540)=0x2, &(0x7f0000000580)}}], 0x58}, 0x10) [ 1238.830525] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1238.849497] binder: release 12803:12806 transaction 838 out, still active [ 1238.857517] binder: 12803:12806 ioctl c0306201 20000440 returned -14 [ 1238.864206] binder: unexpected work type, 4, not freed [ 1238.865790] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 18:40:23 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18aaaafeffaaaaa8]}, 0x1ff}, 0x1c) 18:40:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="2bfe47665e5dea"], &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x201000, 0x0) chroot(&(0x7f00000000c0)='./file0/../file0\x00') chdir(&(0x7f0000000340)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc} HID v0.00 Device [syz0] on syz1 [ 1241.054559] binder: 12892:12893 ioctl c0306201 20000440 returned -14 18:40:25 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00000000000000]}, 0x1ff}, 0x1c) 18:40:25 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='dax\x00', 0x0, 0x0) [ 1241.114698] binder_alloc: binder_alloc_mmap_handler: 12892 20001000-20002000 already mapped failed -16 [ 1241.161250] binder: BINDER_SET_CONTEXT_MGR already set 18:40:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540)=0x40000, &(0x7f0000000580)}}], 0x58}, 0x10) [ 1241.205540] binder: 12892:12893 ioctl 40046207 0 returned -16 18:40:25 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x40000000) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0x2f1}, &(0x7f0000000300)}, 0x191) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x141000, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000500)='/dev/dsp#\x00', 0x288dab09, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000740)) io_setup(0x9, 0x0) io_destroy(0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000340)) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x0, 0x7, 0x20, 0x4, 0x0, 0x0, 0x8, 0x0, 0x100000000, 0x0, 0x8, 0xffffffffffffd5c2, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000180)=0xffffffffffffffff) perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x70, 0x401, 0x0, 0x40, 0x9, 0x0, 0x9, 0x1, 0x6, 0x8000, 0x0, 0x200, 0xe2, 0x9, 0x0, 0x1d9, 0x80, 0x4, 0x8000, 0x0, 0x9, 0x9, 0x0, 0x6, 0x2, 0x5, 0x6d23, 0x3, 0x6205, 0xff, 0x5, 0x8, 0x2, 0x4b7, 0x5, 0x7f, 0x4, 0x0, 0x3, 0x0, @perf_config_ext={0x401, 0x1ff}, 0x10, 0x0, 0x2, 0x0, 0x5, 0xfffffffffffffffe, 0x7}, r3, 0x7, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x20111, r1, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) dup2(r3, r0) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) close(r1) getresuid(&(0x7f0000000440), &(0x7f0000000140), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 18:40:25 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0xfffffff, 0x8000, 0x901f, [], &(0x7f0000000140)={0x9a091e, 0x2, [], @p_u16=&(0x7f00000000c0)=0x5842}}) r1 = syz_open_dev$loop(&(0x7f0000000580)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000000000)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='\'', 0x1}], 0x1, 0x1806) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r3, 0x4004560e, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000007c0), 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, 0x0, 0x9e50) dup2(r2, r1) [ 1241.312003] binder_alloc: 12892: binder_alloc_buf, no vma 18:40:25 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) r1 = dup2(r0, r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000000c0)={{0x5}, 0x0, 0x0, 0x0, {}, 0x0, 0x4}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xf003, &(0x7f0000000000), 0x4, r2, 0xe}) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000200)='/dev/capi20\x00', 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000140)={{0x3, 0x5}, 'port1\x00', 0xc0, 0x800, 0x7fffffff, 0x2, 0x9, 0xfffffffffffffffe, 0x5, 0x0, 0x3, 0x100}) [ 1241.352853] binder: 12892:12920 transaction failed 29189/-3, size 24-8 line 3147 18:40:25 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1aaaaafeffaaaaa8]}, 0x1ff}, 0x1c) [ 1241.439718] binder: release 12892:12893 transaction 848 out, still active [ 1241.447574] binder: 12892:12920 ioctl c0306201 20000440 returned -14 [ 1241.457574] net_ratelimit: 20 callbacks suppressed [ 1241.457636] protocol 88fb is buggy, dev hsr_slave_0 [ 1241.460578] binder: unexpected work type, 4, not freed [ 1241.463389] protocol 88fb is buggy, dev hsr_slave_1 [ 1241.479071] protocol 88fb is buggy, dev hsr_slave_0 [ 1241.484693] protocol 88fb is buggy, dev hsr_slave_1 18:40:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540)=0x400300, &(0x7f0000000580)}}], 0x58}, 0x10) [ 1241.486261] binder: undelivered TRANSACTION_COMPLETE 18:40:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1241.517664] binder: undelivered TRANSACTION_ERROR: 29189 [ 1241.545467] binder: send failed reply for transaction 848, target dead 18:40:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)) pselect6(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x9) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x19) [ 1241.696939] protocol 88fb is buggy, dev hsr_slave_0 [ 1241.702775] protocol 88fb is buggy, dev hsr_slave_1 18:40:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540)=0x1000000, &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:26 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00000000000000]}, 0x1ff}, 0x1c) 18:40:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008911, &(0x7f0000000040)="0adc947bbd1f123c123f31") pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDDELIO(r1, 0x4b35, 0x3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000240)="58000000140019", 0x7}], 0x1) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000400)=0xe8) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000140)={0x0, 0x101, 0x1012}) sendmsg$xdp(r1, &(0x7f0000000700)={&(0x7f0000000440)={0x2c, 0x5, r4, 0x13}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000480)="7da3f1464479832308f022cc4427ee460b2225cde81df5292c3eb15bd5abbac99ab6cda542e3d2be1c108544f05f8dd0ccb3d425f2778fb59fece70b8080d970b389fc6f31bf8b26ab40b8ef409c5156884d550ab4927990ec51fdc4b840ac352932a5424bc402e437dd21eda2a002447b662531a6bc4bf3dbe30d9b6bdc8dac7bf63781df7fdff9a52f18e7bf4a9d2258", 0x91}, {&(0x7f0000000540)="ef74459af20e161f9df07cee68d18b30a62156392194a7ce75eee04e91ea2c75f3ffad7d4507686c95f49c29783026e312013fe6c10bd390ebe3da97776d65c3f70b6ea0a87d58a6edef881726a41e5c774d04cebd2f3d6106caa8e2072ccbae507fc2dde697a985880c06e2ecadf7bf601331ea63a61b94485b329ed29eed578916e8367614c2910f9da44004efe7dd9b21", 0x92}, {&(0x7f0000000600)="21e144421012eb472b0b6f95247e241615016b7e51a4ce83ef5a0a0cdd5d0ab4a0e43847aacf008d18d218f2f9aebbae7f66f6e78253fd9a80a11edd1c6b5fb30230bba8a50e0bd9ae7d88f5fef09210688fc9a0cae20e91c208ff5895c5343dc9a420a8c5ab7ec7e3f55d8f7ab0797a4906a23ddad3a211050552ca1f119231b55fe6b5b7bb1347ee6c", 0x8a}, {&(0x7f0000000c80)="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", 0x1000}], 0x4, 0x0, 0x0, 0x4004}, 0x40800) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x27ed7bf) prctl$PR_GET_NO_NEW_PRIVS(0x27) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/current\x00', 0x2, 0x0) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0xb96, 0xff, 0x80000000, 0x200}, {0x0, 0xffffffffffff7fff, 0xd3d, 0x8000}, {0xffffffffffffff81, 0x5, 0x8, 0x5}, {0x4, 0x1, 0x4, 0x8}, {0x5, 0x9, 0x5, 0x7f}, {0xb1, 0xc4, 0x100, 0x8001}]}, 0x10) getgroups(0x7, &(0x7f0000000000)=[0x0, 0xee00, 0xffffffffffffffff, 0xee00, 0x0, 0xee00, 0xee00]) write$FUSE_ENTRY(r1, &(0x7f0000000080)={0x90, 0xffffffffffffffff, 0x8000000006, {0x0, 0x800000000003, 0x0, 0x400000009, 0x1000, 0x10001, {0x6, 0x5, 0x0, 0xffffffffffff8000, 0x1, 0x3f, 0x983e, 0x0, 0x9, 0x2, 0x101, r5, r6, 0x91, 0x100}}}, 0x90) [ 1242.008494] binder: 12953:12955 ioctl c0306201 20000440 returned -14 [ 1242.038648] [ 1242.040328] ====================================================== [ 1242.046637] WARNING: possible circular locking dependency detected 18:40:26 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1baaaafeffaaaaa8]}, 0x1ff}, 0x1c) [ 1242.048877] binder_alloc: binder_alloc_mmap_handler: 12953 20001000-20002000 already mapped failed -16 [ 1242.053051] 5.0.0+ #10 Not tainted [ 1242.053058] ------------------------------------------------------ [ 1242.053068] syz-executor.3/12959 is trying to acquire lock: [ 1242.053074] 000000009177ee32 (&sig->cred_guard_mutex){+.+.}, at: proc_pid_attr_write+0x1fa/0x530 [ 1242.053113] [ 1242.053113] but task is already holding lock: [ 1242.093090] 000000004400cce6 (&pipe->mutex/1){+.+.}, at: pipe_lock+0x6e/0x80 [ 1242.100346] [ 1242.100346] which lock already depends on the new lock. [ 1242.100346] [ 1242.108664] [ 1242.108664] the existing dependency chain (in reverse order) is: [ 1242.116295] [ 1242.116295] -> #1 (&pipe->mutex/1){+.+.}: [ 1242.121957] lock_acquire+0x16f/0x3f0 [ 1242.126314] __mutex_lock+0xf7/0x1310 [ 1242.130748] mutex_lock_nested+0x16/0x20 [ 1242.135351] fifo_open+0x159/0xb00 [ 1242.139437] do_dentry_open+0x488/0x1160 [ 1242.144041] vfs_open+0xa0/0xd0 [ 1242.147859] path_openat+0x10e9/0x46e0 [ 1242.152275] do_filp_open+0x1a1/0x280 [ 1242.156602] do_open_execat+0x137/0x690 [ 1242.161110] __do_execve_file.isra.0+0x178d/0x23f0 [ 1242.166590] __x64_sys_execve+0x8f/0xc0 [ 1242.171107] do_syscall_64+0x103/0x610 [ 1242.175575] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1242.181290] [ 1242.181290] -> #0 (&sig->cred_guard_mutex){+.+.}: [ 1242.187641] __lock_acquire+0x239c/0x3fb0 [ 1242.192331] lock_acquire+0x16f/0x3f0 [ 1242.196678] __mutex_lock+0xf7/0x1310 [ 1242.201015] mutex_lock_interruptible_nested+0x16/0x20 [ 1242.206829] proc_pid_attr_write+0x1fa/0x530 [ 1242.211953] __vfs_write+0x116/0x8e0 [ 1242.216202] __kernel_write+0x110/0x3b0 [ 1242.220715] write_pipe_buf+0x15d/0x1f0 [ 1242.225229] __splice_from_pipe+0x39a/0x7e0 [ 1242.230090] splice_from_pipe+0x108/0x170 [ 1242.234787] default_file_splice_write+0x3c/0x90 [ 1242.240102] do_splice+0x70a/0x1490 [ 1242.244388] __x64_sys_splice+0x2c6/0x330 [ 1242.249071] do_syscall_64+0x103/0x610 [ 1242.253489] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1242.259192] [ 1242.259192] other info that might help us debug this: [ 1242.259192] [ 1242.267334] Possible unsafe locking scenario: [ 1242.267334] [ 1242.273390] CPU0 CPU1 [ 1242.278051] ---- ---- [ 1242.282713] lock(&pipe->mutex/1); [ 1242.286345] lock(&sig->cred_guard_mutex); [ 1242.293211] lock(&pipe->mutex/1); [ 1242.299375] lock(&sig->cred_guard_mutex); [ 1242.303706] [ 1242.303706] *** DEADLOCK *** [ 1242.303706] [ 1242.309774] 2 locks held by syz-executor.3/12959: [ 1242.314622] #0: 0000000061256130 (sb_writers#6){.+.+}, at: do_splice+0xdf9/0x1490 [ 1242.322372] #1: 000000004400cce6 (&pipe->mutex/1){+.+.}, at: pipe_lock+0x6e/0x80 [ 1242.330033] [ 1242.330033] stack backtrace: [ 1242.334571] CPU: 0 PID: 12959 Comm: syz-executor.3 Not tainted 5.0.0+ #10 [ 1242.341522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1242.350905] Call Trace: [ 1242.353527] dump_stack+0x172/0x1f0 [ 1242.357178] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 1242.362569] check_prev_add.constprop.0+0xf11/0x23c0 [ 1242.367707] ? find_held_lock+0x35/0x130 [ 1242.371805] ? check_usage+0x570/0x570 [ 1242.375732] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1242.380852] ? graph_lock+0x7b/0x200 [ 1242.384573] ? __lockdep_reset_lock+0x450/0x450 [ 1242.389253] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1242.394827] __lock_acquire+0x239c/0x3fb0 [ 1242.398991] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1242.404565] ? mark_held_locks+0xf0/0xf0 [ 1242.408665] lock_acquire+0x16f/0x3f0 [ 1242.412476] ? proc_pid_attr_write+0x1fa/0x530 [ 1242.417175] ? proc_pid_attr_write+0x1fa/0x530 [ 1242.421776] __mutex_lock+0xf7/0x1310 [ 1242.425592] ? proc_pid_attr_write+0x1fa/0x530 [ 1242.430200] ? proc_pid_attr_write+0x1fa/0x530 [ 1242.434807] ? mutex_trylock+0x1e0/0x1e0 [ 1242.438896] ? check_stack_object+0x114/0x160 [ 1242.443415] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1242.448976] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1242.454534] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1242.460091] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1242.465673] ? _copy_from_user+0xdd/0x150 [ 1242.469840] mutex_lock_interruptible_nested+0x16/0x20 [ 1242.475149] ? mutex_lock_interruptible_nested+0x16/0x20 [ 1242.480618] proc_pid_attr_write+0x1fa/0x530 [ 1242.485042] __vfs_write+0x116/0x8e0 [ 1242.488774] ? proc_loginuid_write+0x4d0/0x4d0 [ 1242.493367] ? kernel_read+0x120/0x120 [ 1242.497294] __kernel_write+0x110/0x3b0 [ 1242.501295] write_pipe_buf+0x15d/0x1f0 [ 1242.505270] ? do_splice_direct+0x2a0/0x2a0 [ 1242.510034] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1242.515594] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 1242.520974] __splice_from_pipe+0x39a/0x7e0 [ 1242.525306] ? do_splice_direct+0x2a0/0x2a0 [ 1242.529645] ? do_splice_direct+0x2a0/0x2a0 [ 1242.533983] splice_from_pipe+0x108/0x170 [ 1242.538157] ? splice_shrink_spd+0xd0/0xd0 [ 1242.542897] default_file_splice_write+0x3c/0x90 [ 1242.547674] ? generic_splice_sendpage+0x50/0x50 [ 1242.552461] do_splice+0x70a/0x1490 [ 1242.556109] ? ksys_dup3+0x3e0/0x3e0 [ 1242.559864] ? opipe_prep.part.0+0x2d0/0x2d0 [ 1242.564324] ? __fget_light+0x1a9/0x230 [ 1242.568313] __x64_sys_splice+0x2c6/0x330 [ 1242.572477] do_syscall_64+0x103/0x610 [ 1242.576383] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1242.581589] RIP: 0033:0x457f29 [ 1242.584807] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1242.603718] RSP: 002b:00007f674592fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1242.611444] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29 [ 1242.618723] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 1242.626002] RBP: 000000000073bfa0 R08: 0000000000010005 R09: 0000000000000000 [ 1242.633283] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f67459306d4 [ 1242.641101] R13: 00000000004c6d75 R14: 00000000004db970 R15: 00000000ffffffff [ 1242.648681] protocol 88fb is buggy, dev hsr_slave_0 [ 1242.648961] binder: BINDER_SET_CONTEXT_MGR already set 18:40:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540)=0x2000000, &(0x7f0000000580)}}], 0x58}, 0x10) [ 1242.653774] protocol 88fb is buggy, dev hsr_slave_1 [ 1242.664902] binder: 12953:12955 ioctl 40046207 0 returned -16 [ 1242.677454] binder_alloc: 12953: binder_alloc_buf, no vma [ 1242.683596] binder: 12953:12963 transaction failed 29189/-3, size 24-8 line 3147 [ 1242.691941] binder: 12953:12963 ioctl c0306201 20000440 returned -14 [ 1242.698834] binder: release 12953:12955 transaction 853 out, still active [ 1242.707133] binder: unexpected work type, 4, not freed [ 1242.716662] kobject: 'iosched' (0000000032284f59): kobject_cleanup, parent (null) [ 1242.725212] kobject: 'iosched' (0000000032284f59): calling ktype release [ 1242.736207] binder: undelivered TRANSACTION_COMPLETE [ 1242.743218] binder: undelivered TRANSACTION_ERROR: 29189 [ 1242.746786] kobject: 'iosched': free name [ 1242.749110] binder: send failed reply for transaction 853, target dead [ 1242.753866] kobject: 'loop0' (00000000d10c0b45): kobject_cleanup, parent (null) [ 1242.768059] kobject: 'loop0' (00000000d10c0b45): calling ktype release [ 1242.774789] kobject: 'queue' (0000000025d87262): kobject_cleanup, parent (null) [ 1242.783209] kobject: 'queue' (0000000025d87262): calling ktype release [ 1242.790708] kobject: 'queue': free name [ 1242.794758] kobject: '0' (00000000e2592510): kobject_cleanup, parent (null) [ 1242.796007] kobject: 'rx-0' (0000000000293ac6): kobject_cleanup, parent 0000000061b67e58 [ 1242.802996] kobject: '0' (00000000e2592510): calling ktype release [ 1242.811139] kobject: 'rx-0' (0000000000293ac6): auto cleanup 'remove' event [ 1242.822243] kobject: 'loop0': free name [ 1242.832226] kobject: 'loop1' (00000000f0a541d2): kobject_uevent_env [ 1242.843898] kobject: 'loop1' (00000000f0a541d2): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1242.854608] kobject: '0': free name 18:40:27 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7fffffff, 0x4, 0x1}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2800000000000000290000003900000000000000000000a58aa49f00001000f00000eea991c8dddb"], 0x28}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000ef, 0x0) 18:40:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540)=0x1000000, &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:40:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) write$UHID_INPUT(r0, &(0x7f0000004240)={0x8, "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", 0xffffffffffffffec}, 0xf0ab9711) sendfile(r0, r2, 0x0, 0x20020102000007) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) [ 1242.866468] kobject: 'rx-0' (0000000000293ac6): kobject_uevent_env [ 1242.872847] kobject: 'rx-0' (0000000000293ac6): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1242.880206] kobject: 'cpu0' (000000000ee5e14d): kobject_cleanup, parent (null) [ 1242.892092] kobject: 'loop2' (00000000f59fad03): kobject_uevent_env 18:40:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540)=0x4000000000000, &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:27 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c00000000000000]}, 0x1ff}, 0x1c) [ 1242.921284] kobject: 'loop2' (00000000f59fad03): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1242.934029] kobject: 'cpu0' (000000000ee5e14d): calling ktype release [ 1242.945444] kobject: 'rx-0' (0000000000293ac6): auto cleanup kobject_del [ 1242.958815] kobject: 'cpu0': free name [ 1242.961709] kobject: 'loop3' (000000001adab5db): kobject_uevent_env [ 1242.973458] binder: 12974:12981 ioctl c0306201 20000440 returned -14 [ 1242.977135] kobject: 'cpu1' (000000000fa13d96): kobject_cleanup, parent (null) [ 1242.985352] kobject: 'rx-0' (0000000000293ac6): calling ktype release [ 1243.006979] kobject: 'rx-0': free name [ 1243.011132] kobject: 'loop3' (000000001adab5db): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:40:27 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1baaaafeffaaaaa8]}, 0x1ff}, 0x1c) [ 1243.024426] kobject: 'tx-0' (00000000a383a93a): kobject_cleanup, parent 0000000061b67e58 [ 1243.043723] kobject: 'tx-0' (00000000a383a93a): auto cleanup 'remove' event [ 1243.043989] kobject: 'cpu1' (000000000fa13d96): calling ktype release [ 1243.052414] kobject: 'loop5' (0000000061b7f566): kobject_uevent_env 18:40:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540)=0x40030000000000, &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:27 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ca039feffb3f33c]}, 0x1ff}, 0x1c) 18:40:27 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7fffffff, 0x4, 0x1}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2800000000000000290000003900000000000000000000a58aa49f00001000f00000eea991c8dddb"], 0x28}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000ef, 0x0) [ 1243.072024] kobject: 'loop5' (0000000061b7f566): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1243.095935] kobject: 'tx-0' (00000000a383a93a): kobject_uevent_env [ 1243.112461] kobject: 'cpu1': free name [ 1243.119559] kobject: 'tx-0' (00000000a383a93a): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1243.136112] protocol 88fb is buggy, dev hsr_slave_0 [ 1243.136174] kobject: 'mq' (000000007acf3304): kobject_cleanup, parent (null) [ 1243.141337] protocol 88fb is buggy, dev hsr_slave_1 18:40:27 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1baaaafeffaaaaa8]}, 0x1ff}, 0x1c) 18:40:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540)=0x100000000000000, &(0x7f0000000580)}}], 0x58}, 0x10) [ 1243.169475] kobject: 'loop1' (00000000f0a541d2): kobject_uevent_env [ 1243.176406] kobject: 'tx-0' (00000000a383a93a): auto cleanup kobject_del [ 1243.189386] kobject: 'loop1' (00000000f0a541d2): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1243.208922] kobject: 'loop5' (0000000061b7f566): kobject_uevent_env [ 1243.209296] kobject: 'mq' (000000007acf3304): calling ktype release 18:40:27 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7fffffff, 0x4, 0x1}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2800000000000000290000003900000000000000000000a58aa49f00001000f00000eea991c8dddb"], 0x28}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000ef, 0x0) 18:40:27 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1caaaafeffaaaaa8]}, 0x1ff}, 0x1c) [ 1243.215653] kobject: 'loop5' (0000000061b7f566): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1243.227410] kobject: 'tx-0' (00000000a383a93a): calling ktype release [ 1243.259290] kobject: 'tx-0': free name [ 1243.263443] kobject: 'mq': free name [ 1243.269315] kobject: 'loop2' (00000000f59fad03): kobject_uevent_env [ 1243.272991] kobject: 'queues' (0000000061b67e58): kobject_cleanup, parent (null) [ 1243.298293] kobject: 'queues' (0000000061b67e58): calling ktype release [ 1243.313692] kobject: 'queues' (0000000061b67e58): kset_release [ 1243.315359] kobject: 'loop2' (00000000f59fad03): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1243.320795] kobject: 'queues': free name [ 1243.336947] kobject: 'ip6gre0' (000000008f85f652): kobject_uevent_env [ 1243.343716] kobject: 'ip6gre0' (000000008f85f652): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1243.354956] kobject: 'loop1' (00000000f0a541d2): kobject_uevent_env [ 1243.355563] binder_alloc: binder_alloc_mmap_handler: 12974 20001000-20002000 already mapped failed -16 [ 1243.361696] kobject: 'loop1' (00000000f0a541d2): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1243.385300] kobject: 'loop1' (00000000f0a541d2): kobject_uevent_env [ 1243.392029] kobject: 'ip6gre0' (000000008f85f652): kobject_cleanup, parent (null) [ 1243.396299] binder_alloc: 12974: binder_alloc_buf, no vma [ 1243.404834] kobject: 'loop1' (00000000f0a541d2): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1243.416855] kobject: 'ip6gre0' (000000008f85f652): auto cleanup 'remove' event [ 1243.422166] binder: BINDER_SET_CONTEXT_MGR already set [ 1243.424374] kobject: 'ip6gre0' (000000008f85f652): kobject_uevent_env [ 1243.437174] binder: 12974:12981 transaction failed 29189/-3, size 24-8 line 3147 [ 1243.437622] kobject: 'loop2' (00000000f59fad03): kobject_uevent_env [ 1243.451566] kobject: 'ip6gre0' (000000008f85f652): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1243.460734] binder: release 12974:12981 transaction 858 out, still active [ 1243.462054] kobject: 'loop2' (00000000f59fad03): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1243.473936] binder: 12974:12975 ioctl 40046207 0 returned -16 [ 1243.478499] kobject: 'ip6gre0' (000000008f85f652): calling ktype release [ 1243.491859] binder: unexpected work type, 4, not freed [ 1243.492508] kobject: 'ip6gre0': free name [ 1243.501021] binder: 12974:12981 ioctl c0306201 20000440 returned -14 [ 1243.512543] kobject: 'rx-0' (0000000097ea8b6e): kobject_cleanup, parent 00000000194ed869 [ 1243.513782] binder: undelivered TRANSACTION_COMPLETE [ 1243.522333] kobject: 'rx-0' (0000000097ea8b6e): auto cleanup 'remove' event [ 1243.537542] kobject: 'rx-0' (0000000097ea8b6e): kobject_uevent_env [ 1243.544087] kobject: 'rx-0' (0000000097ea8b6e): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1243.559446] kobject: 'rx-0' (0000000097ea8b6e): auto cleanup kobject_del [ 1243.560439] binder: undelivered TRANSACTION_ERROR: 29189 18:40:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1243.566862] kobject: 'rx-0' (0000000097ea8b6e): calling ktype release [ 1243.582496] kobject: 'rx-0': free name [ 1243.588103] kobject: 'tx-0' (00000000007041bc): kobject_cleanup, parent 00000000194ed869 [ 1243.590401] binder: send failed reply for transaction 858, target dead [ 1243.596900] kobject: 'tx-0' (00000000007041bc): auto cleanup 'remove' event [ 1243.614624] kobject: 'tx-0' (00000000007041bc): kobject_uevent_env [ 1243.619021] kobject: 'loop4' (000000008c8ba127): kobject_uevent_env [ 1243.624181] kobject: 'tx-0' (00000000007041bc): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1243.638005] kobject: 'tx-0' (00000000007041bc): auto cleanup kobject_del [ 1243.638468] kobject: 'loop4' (000000008c8ba127): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1243.647269] kobject: 'tx-0' (00000000007041bc): calling ktype release [ 1243.665716] kobject: 'tx-0': free name [ 1243.669857] kobject: 'queues' (00000000194ed869): kobject_cleanup, parent (null) [ 1243.678430] kobject: 'queues' (00000000194ed869): calling ktype release [ 1243.685200] kobject: 'queues' (00000000194ed869): kset_release [ 1243.691301] kobject: 'queues': free name [ 1243.695607] kobject: 'ip6tnl0' (0000000002ec53f1): kobject_uevent_env [ 1243.702249] kobject: 'ip6tnl0' (0000000002ec53f1): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1243.714386] binder: 13019:13020 transaction failed 29189/-22, size 24-8 line 2994 [ 1243.722267] binder: 13019:13020 ioctl c0306201 20000440 returned -14 [ 1243.730607] binder: 13019:13022 transaction failed 29189/-22, size 24-8 line 2994 [ 1243.738369] binder: 13019:13022 ioctl c0306201 20000440 returned -14 [ 1243.745195] binder: undelivered TRANSACTION_ERROR: 29189 [ 1243.751093] kobject: 'ip6tnl0' (0000000002ec53f1): kobject_cleanup, parent (null) [ 1243.760885] binder: undelivered TRANSACTION_ERROR: 29189 [ 1243.769478] kobject: 'ip6tnl0' (0000000002ec53f1): auto cleanup 'remove' event [ 1243.770894] kobject: 'loop4' (000000008c8ba127): kobject_uevent_env [ 1243.777703] kobject: 'ip6tnl0' (0000000002ec53f1): kobject_uevent_env [ 1243.785426] kobject: 'loop4' (000000008c8ba127): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1243.793386] kobject: 'ip6tnl0' (0000000002ec53f1): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1243.813520] kobject: 'ip6tnl0' (0000000002ec53f1): calling ktype release [ 1243.820607] kobject: 'ip6tnl0': free name 18:40:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) write$UHID_INPUT(r0, &(0x7f0000004240)={0x8, "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", 0xffffffffffffffec}, 0xf0ab9711) sendfile(r0, r2, 0x0, 0x20020102000007) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) 18:40:28 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d00000000000000]}, 0x1ff}, 0x1c) 18:40:28 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1baaaafeffaaaaa8]}, 0x1ff}, 0x1c) 18:40:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540)=0x200000000000000, &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:28 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7fffffff, 0x4, 0x1}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2800000000000000290000003900000000000000000000a58aa49f00001000f00000eea991c8dddb"], 0x28}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000ef, 0x0) 18:40:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1243.825863] kobject: 'rx-0' (0000000069af23fe): kobject_cleanup, parent 000000008ae639e8 [ 1243.837736] kobject: 'rx-0' (0000000069af23fe): auto cleanup 'remove' event [ 1243.844908] kobject: 'rx-0' (0000000069af23fe): kobject_uevent_env [ 1243.853063] kobject: 'rx-0' (0000000069af23fe): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1243.876362] kobject: 'loop3' (000000001adab5db): kobject_uevent_env [ 1243.882864] kobject: 'loop3' (000000001adab5db): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1243.910688] kobject: 'rx-0' (0000000069af23fe): auto cleanup kobject_del [ 1243.918476] kobject: 'rx-0' (0000000069af23fe): calling ktype release 18:40:28 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7fffffff, 0x4, 0x1}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2800000000000000290000003900000000000000000000a58aa49f00001000f00000eea991c8dddb"], 0x28}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) 18:40:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)=0x2}}], 0x58}, 0x10) 18:40:28 executing program 0: socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1baaaafeffaaaaa8]}, 0x1ff}, 0x1c) 18:40:28 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1daaaafeffaaaaa8]}, 0x1ff}, 0x1c) [ 1243.930002] kobject: 'rx-0': free name [ 1243.936441] kobject: 'tx-0' (0000000011518225): kobject_cleanup, parent 000000008ae639e8 [ 1243.939288] kobject: 'loop5' (0000000061b7f566): kobject_uevent_env [ 1243.947660] kobject: 'tx-0' (0000000011518225): auto cleanup 'remove' event [ 1243.961815] binder: 13034:13041 ioctl c0306201 20000440 returned -14 [ 1243.998771] kobject: 'loop5' (0000000061b7f566): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1244.018894] kobject: 'tx-0' (0000000011518225): kobject_uevent_env [ 1244.035977] kobject: 'tx-0' (0000000011518225): kobject_uevent_env: uevent_suppress caused the event to drop! 18:40:28 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7fffffff, 0x4, 0x1}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) 18:40:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)=0x4}}], 0x58}, 0x10) [ 1244.040267] kobject: 'loop2' (00000000f59fad03): kobject_uevent_env [ 1244.083758] kobject: 'tx-0' (0000000011518225): auto cleanup kobject_del [ 1244.086322] kobject: 'loop2' (00000000f59fad03): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1244.114476] kobject: 'tx-0' (0000000011518225): calling ktype release [ 1244.127322] kobject: 'tx-0': free name [ 1244.131307] kobject: 'queues' (000000008ae639e8): kobject_cleanup, parent (null) [ 1244.132736] kobject: 'loop1' (00000000f0a541d2): kobject_uevent_env [ 1244.146617] kobject: 'queues' (000000008ae639e8): calling ktype release [ 1244.160673] kobject: 'queues' (000000008ae639e8): kset_release [ 1244.167185] kobject: 'queues': free name [ 1244.171711] kobject: 'sit0' (000000009b6fcb87): kobject_uevent_env [ 1244.175026] kobject: 'loop1' (00000000f0a541d2): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1244.182157] kobject: 'sit0' (000000009b6fcb87): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1244.192772] kobject: 'loop1' (00000000f0a541d2): kobject_uevent_env [ 1244.204474] kobject: 'loop1' (00000000f0a541d2): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1244.214159] binder_alloc: binder_alloc_mmap_handler: 13034 20001000-20002000 already mapped failed -16 [ 1244.216615] kobject: 'loop5' (0000000061b7f566): kobject_uevent_env [ 1244.227958] binder: BINDER_SET_CONTEXT_MGR already set [ 1244.235697] kobject: 'loop5' (0000000061b7f566): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1244.236224] kobject: 'sit0' (000000009b6fcb87): kobject_cleanup, parent (null) [ 1244.258720] binder: 13034:13035 ioctl 40046207 0 returned -16 [ 1244.264874] binder_alloc: 13034: binder_alloc_buf, no vma [ 1244.272841] kobject: 'sit0' (000000009b6fcb87): auto cleanup 'remove' event [ 1244.278627] binder: 13034:13041 transaction failed 29189/-3, size 24-8 line 3147 [ 1244.281377] binder: release 13034:13041 transaction 865 out, still active [ 1244.291297] kobject: 'sit0' (000000009b6fcb87): kobject_uevent_env [ 1244.295921] binder: unexpected work type, 4, not freed [ 1244.301693] binder: 13034:13041 ioctl c0306201 20000440 returned -14 [ 1244.313537] binder: undelivered TRANSACTION_COMPLETE [ 1244.319242] binder: send failed reply for transaction 865, target dead [ 1244.319494] kobject: 'sit0' (000000009b6fcb87): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1244.333875] binder: undelivered TRANSACTION_ERROR: 29189 [ 1244.339695] kobject: 'sit0' (000000009b6fcb87): calling ktype release [ 1244.348544] kobject: 'sit0': free name [ 1244.352881] kobject: 'loop4' (000000008c8ba127): kobject_uevent_env [ 1244.359831] kobject: 'loop4' (000000008c8ba127): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1244.370591] kobject: 'rx-0' (000000001042738c): kobject_cleanup, parent 00000000b96a4993 [ 1244.386739] kobject: 'rx-0' (000000001042738c): auto cleanup 'remove' event [ 1244.393942] kobject: 'rx-0' (000000001042738c): kobject_uevent_env [ 1244.400470] kobject: 'rx-0' (000000001042738c): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1244.410580] kobject: 'rx-0' (000000001042738c): auto cleanup kobject_del [ 1244.417514] kobject: 'rx-0' (000000001042738c): calling ktype release [ 1244.424114] kobject: 'rx-0': free name [ 1244.428127] kobject: 'tx-0' (0000000096d8d355): kobject_cleanup, parent 00000000b96a4993 [ 1244.436417] kobject: 'tx-0' (0000000096d8d355): auto cleanup 'remove' event [ 1244.443525] kobject: 'tx-0' (0000000096d8d355): kobject_uevent_env [ 1244.449891] kobject: 'tx-0' (0000000096d8d355): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1244.460012] kobject: 'tx-0' (0000000096d8d355): auto cleanup kobject_del [ 1244.466938] kobject: 'tx-0' (0000000096d8d355): calling ktype release [ 1244.473541] kobject: 'tx-0': free name [ 1244.477506] kobject: 'queues' (00000000b96a4993): kobject_cleanup, parent (null) [ 1244.485918] kobject: 'queues' (00000000b96a4993): calling ktype release [ 1244.492735] kobject: 'queues' (00000000b96a4993): kset_release [ 1244.498768] kobject: 'queues': free name [ 1244.503078] kobject: 'ip6_vti0' (000000008435c0d2): kobject_uevent_env [ 1244.509787] kobject: 'ip6_vti0' (000000008435c0d2): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1244.578686] kobject: 'ip6_vti0' (000000008435c0d2): kobject_cleanup, parent (null) [ 1244.587409] kobject: 'ip6_vti0' (000000008435c0d2): auto cleanup 'remove' event [ 1244.594876] kobject: 'ip6_vti0' (000000008435c0d2): kobject_uevent_env [ 1244.601716] kobject: 'ip6_vti0' (000000008435c0d2): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1244.612174] kobject: 'ip6_vti0' (000000008435c0d2): calling ktype release [ 1244.619197] kobject: 'ip6_vti0': free name [ 1244.624158] kobject: 'rx-0' (00000000b9905f6a): kobject_cleanup, parent 000000004d9fd193 [ 1244.632477] kobject: 'rx-0' (00000000b9905f6a): auto cleanup 'remove' event [ 1244.639682] kobject: 'rx-0' (00000000b9905f6a): kobject_uevent_env [ 1244.646010] kobject: 'rx-0' (00000000b9905f6a): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1244.656250] kobject: 'rx-0' (00000000b9905f6a): auto cleanup kobject_del [ 1244.663150] kobject: 'rx-0' (00000000b9905f6a): calling ktype release [ 1244.669790] kobject: 'rx-0': free name [ 1244.673724] kobject: 'tx-0' (00000000ea1dd5b7): kobject_cleanup, parent 000000004d9fd193 [ 1244.681997] kobject: 'tx-0' (00000000ea1dd5b7): auto cleanup 'remove' event [ 1244.689165] kobject: 'tx-0' (00000000ea1dd5b7): kobject_uevent_env [ 1244.695483] kobject: 'tx-0' (00000000ea1dd5b7): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1244.705652] kobject: 'tx-0' (00000000ea1dd5b7): auto cleanup kobject_del [ 1244.712647] kobject: 'tx-0' (00000000ea1dd5b7): calling ktype release [ 1244.719398] kobject: 'tx-0': free name 18:40:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) write$UHID_INPUT(r0, &(0x7f0000004240)={0x8, "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", 0xffffffffffffffec}, 0xf0ab9711) sendfile(r0, r2, 0x0, 0x20020102000007) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) 18:40:29 executing program 0: socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1baaaafeffaaaaa8]}, 0x1ff}, 0x1c) 18:40:29 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00000000000000]}, 0x1ff}, 0x1c) 18:40:29 executing program 5: socket$inet6(0xa, 0x3, 0x2) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7fffffff, 0x4, 0x1}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) 18:40:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)=0x34000}}], 0x58}, 0x10) 18:40:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1244.723329] kobject: 'queues' (000000004d9fd193): kobject_cleanup, parent (null) [ 1244.731822] kobject: 'queues' (000000004d9fd193): calling ktype release [ 1244.736917] kobject: 'loop3' (000000001adab5db): kobject_uevent_env [ 1244.760400] kobject: 'loop3' (000000001adab5db): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1244.768261] kobject: 'queues' (000000004d9fd193): kset_release 18:40:29 executing program 0: socket$inet6(0xa, 0x400000000001, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1baaaafeffaaaaa8]}, 0x1ff}, 0x1c) 18:40:29 executing program 5: socket$inet6(0xa, 0x3, 0x2) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) 18:40:29 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1eaaaafeffaaaaa8]}, 0x1ff}, 0x1c) 18:40:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)=0x40000}}], 0x58}, 0x10) [ 1244.808322] kobject: 'queues': free name [ 1244.815451] kobject: 'loop5' (0000000061b7f566): kobject_uevent_env [ 1244.831541] binder: 13065:13080 ioctl c0306201 20000440 returned -14 [ 1244.831915] kobject: 'ip_vti0' (00000000c29d2195): kobject_uevent_env [ 1244.846348] kobject: 'loop5' (0000000061b7f566): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:40:29 executing program 0: r0 = dup(0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1baaaafeffaaaaa8]}, 0x1ff}, 0x1c) [ 1244.879971] kobject: 'loop1' (00000000f0a541d2): kobject_uevent_env [ 1244.887442] kobject: 'ip_vti0' (00000000c29d2195): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1244.903137] kobject: 'loop1' (00000000f0a541d2): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1244.914772] kobject: 'loop2' (00000000f59fad03): kobject_uevent_env 18:40:29 executing program 5: socket$inet6(0xa, 0x3, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) [ 1244.922386] binder_alloc: binder_alloc_mmap_handler: 13065 20001000-20002000 already mapped failed -16 [ 1244.949680] kobject: 'loop2' (00000000f59fad03): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1244.959371] kobject: 'ip_vti0' (00000000c29d2195): kobject_cleanup, parent (null) [ 1244.974115] kobject: 'ip_vti0' (00000000c29d2195): auto cleanup 'remove' event [ 1244.976668] binder_alloc: 13065: binder_alloc_buf, no vma [ 1244.989291] kobject: 'ip_vti0' (00000000c29d2195): kobject_uevent_env [ 1245.003637] binder: BINDER_SET_CONTEXT_MGR already set [ 1245.011948] kobject: 'loop5' (0000000061b7f566): kobject_uevent_env [ 1245.013521] kobject: 'ip_vti0' (00000000c29d2195): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1245.022309] binder: 13065:13075 ioctl 40046207 0 returned -16 [ 1245.034962] kobject: 'loop5' (0000000061b7f566): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1245.045552] binder: release 13065:13080 transaction 870 out, still active [ 1245.046159] kobject: 'ip_vti0' (00000000c29d2195): calling ktype release [ 1245.053137] binder: 13065:13080 transaction failed 29189/-3, size 24-8 line 3147 [ 1245.064172] kobject: 'ip_vti0': free name [ 1245.067186] binder: unexpected work type, 4, not freed [ 1245.077290] kobject: 'loop2' (00000000f59fad03): kobject_uevent_env [ 1245.077684] kobject: 'batman_adv' (0000000012e9a8fc): kobject_uevent_env [ 1245.083845] binder: undelivered TRANSACTION_COMPLETE [ 1245.096009] kobject: 'loop2' (00000000f59fad03): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1245.098108] kobject: 'batman_adv' (0000000012e9a8fc): kobject_uevent_env: filter function caused the event to drop! [ 1245.106205] binder: 13065:13080 ioctl c0306201 20000440 returned -14 [ 1245.120311] kobject: 'batman_adv' (0000000012e9a8fc): kobject_cleanup, parent (null) [ 1245.122893] binder: send failed reply for transaction 870, target dead [ 1245.132308] kobject: 'batman_adv' (0000000012e9a8fc): calling ktype release [ 1245.147162] kobject: 'loop5' (0000000061b7f566): kobject_uevent_env [ 1245.153649] kobject: 'loop5' (0000000061b7f566): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1245.156225] kobject: (0000000012e9a8fc): dynamic_kobj_release [ 1245.171945] binder: undelivered TRANSACTION_ERROR: 29189 [ 1245.173955] kobject: 'batman_adv': free name [ 1245.182523] kobject: 'rx-0' (00000000db7dc1e8): kobject_cleanup, parent 00000000fd0b2469 [ 1245.200746] kobject: 'loop4' (000000008c8ba127): kobject_uevent_env [ 1245.203622] kobject: 'rx-0' (00000000db7dc1e8): auto cleanup 'remove' event [ 1245.216128] kobject: 'loop4' (000000008c8ba127): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1245.220317] kobject: 'rx-0' (00000000db7dc1e8): kobject_uevent_env [ 1245.233751] kobject: 'rx-0' (00000000db7dc1e8): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1245.253213] kobject: 'rx-0' (00000000db7dc1e8): auto cleanup kobject_del [ 1245.260503] kobject: 'rx-0' (00000000db7dc1e8): calling ktype release [ 1245.267345] kobject: 'rx-0': free name [ 1245.271348] kobject: 'tx-0' (000000005279429a): kobject_cleanup, parent 00000000fd0b2469 [ 1245.280037] kobject: 'tx-0' (000000005279429a): auto cleanup 'remove' event [ 1245.287206] kobject: 'tx-0' (000000005279429a): kobject_uevent_env [ 1245.293533] kobject: 'tx-0' (000000005279429a): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1245.303651] kobject: 'tx-0' (000000005279429a): auto cleanup kobject_del [ 1245.310600] kobject: 'tx-0' (000000005279429a): calling ktype release [ 1245.317256] kobject: 'tx-0': free name [ 1245.321177] kobject: 'queues' (00000000fd0b2469): kobject_cleanup, parent (null) [ 1245.329655] kobject: 'queues' (00000000fd0b2469): calling ktype release [ 1245.336484] kobject: 'queues' (00000000fd0b2469): kset_release [ 1245.342469] kobject: 'queues': free name [ 1245.346948] kobject: 'erspan0' (00000000bc90ec08): kobject_uevent_env [ 1245.353547] kobject: 'erspan0' (00000000bc90ec08): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1245.396198] kobject: 'erspan0' (00000000bc90ec08): kobject_cleanup, parent (null) [ 1245.404775] kobject: 'erspan0' (00000000bc90ec08): auto cleanup 'remove' event [ 1245.412247] kobject: 'erspan0' (00000000bc90ec08): kobject_uevent_env [ 1245.419367] kobject: 'erspan0' (00000000bc90ec08): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1245.429741] kobject: 'erspan0' (00000000bc90ec08): calling ktype release [ 1245.436674] kobject: 'erspan0': free name [ 1245.441570] kobject: 'batman_adv' (00000000ef0ae6a9): kobject_uevent_env [ 1245.448507] kobject: 'batman_adv' (00000000ef0ae6a9): kobject_uevent_env: filter function caused the event to drop! [ 1245.459178] kobject: 'batman_adv' (00000000ef0ae6a9): kobject_cleanup, parent (null) [ 1245.468002] kobject: 'batman_adv' (00000000ef0ae6a9): calling ktype release [ 1245.475131] kobject: (00000000ef0ae6a9): dynamic_kobj_release [ 1245.481130] kobject: 'batman_adv': free name [ 1245.485826] kobject: 'rx-0' (000000004643a86b): kobject_cleanup, parent 00000000f5bcd47d [ 1245.494171] kobject: 'rx-0' (000000004643a86b): auto cleanup 'remove' event [ 1245.501362] kobject: 'rx-0' (000000004643a86b): kobject_uevent_env [ 1245.507738] kobject: 'rx-0' (000000004643a86b): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1245.517884] kobject: 'rx-0' (000000004643a86b): auto cleanup kobject_del [ 1245.524777] kobject: 'rx-0' (000000004643a86b): calling ktype release [ 1245.531499] kobject: 'rx-0': free name [ 1245.535526] kobject: 'tx-0' (000000009a2476ad): kobject_cleanup, parent 00000000f5bcd47d [ 1245.543842] kobject: 'tx-0' (000000009a2476ad): auto cleanup 'remove' event [ 1245.551000] kobject: 'tx-0' (000000009a2476ad): kobject_uevent_env [ 1245.557397] kobject: 'tx-0' (000000009a2476ad): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1245.567517] kobject: 'tx-0' (000000009a2476ad): auto cleanup kobject_del [ 1245.574458] kobject: 'tx-0' (000000009a2476ad): calling ktype release [ 1245.581130] kobject: 'tx-0': free name [ 1245.585046] kobject: 'queues' (00000000f5bcd47d): kobject_cleanup, parent (null) 18:40:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) write$UHID_INPUT(r0, &(0x7f0000004240)={0x8, "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", 0xffffffffffffffec}, 0xf0ab9711) sendfile(r0, r2, 0x0, 0x20020102000007) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) 18:40:30 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}, 0x1ff}, 0x1c) 18:40:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)=0x400300}}], 0x58}, 0x10) 18:40:30 executing program 0: r0 = dup(0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1baaaafeffaaaaa8]}, 0x1ff}, 0x1c) 18:40:30 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) 18:40:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x307100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1245.593575] kobject: 'queues' (00000000f5bcd47d): calling ktype release [ 1245.600555] kobject: 'queues' (00000000f5bcd47d): kset_release [ 1245.606691] kobject: 'queues': free name [ 1245.611179] kobject: 'gretap0' (00000000f0d36bae): kobject_uevent_env [ 1245.618288] kobject: 'gretap0' (00000000f0d36bae): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1245.628781] kobject: 'loop3' (000000001adab5db): kobject_uevent_env [ 1245.635255] kobject: 'loop3' (000000001adab5db): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1245.667015] binder: 13106:13107 ioctl c0306201 20000440 returned -14 [ 1245.677918] binder_alloc: binder_alloc_mmap_handler: 13106 20001000-20002000 already mapped failed -16 [ 1245.690088] binder: BINDER_SET_CONTEXT_MGR already set [ 1245.695798] binder: 13106:13107 ioctl 40046207 0 returned -16 [ 1245.702651] binder_alloc: 13106: binder_alloc_buf, no vma [ 1245.708635] binder: 13106:13113 transaction failed 29189/-3, size 24-8 line 3147 18:40:30 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1faaaafeffaaaaa8]}, 0x1ff}, 0x1c) 18:40:30 executing program 0: r0 = dup(0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1baaaafeffaaaaa8]}, 0x1ff}, 0x1c) [ 1245.725890] binder: 13106:13113 ioctl c0306201 20000440 returned -14 [ 1245.746268] kobject: 'gretap0' (00000000f0d36bae): kobject_cleanup, parent (null) [ 1245.755083] kobject: 'gretap0' (00000000f0d36bae): auto cleanup 'remove' event [ 1245.764355] kobject: 'loop1' (00000000f0a541d2): kobject_uevent_env 18:40:30 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1baaaafeffaaaaa8]}, 0x1ff}, 0x1c) [ 1245.796253] kobject: 'loop1' (00000000f0a541d2): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1245.806841] binder: release 13106:13107 transaction 875 out, still active [ 1245.813845] binder: unexpected work type, 4, not freed [ 1245.831132] kobject: 'gretap0' (00000000f0d36bae): kobject_uevent_env 18:40:30 executing program 5: openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) 18:40:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)=0x1000000}}], 0x58}, 0x10) 18:40:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1245.841917] binder: undelivered TRANSACTION_COMPLETE [ 1245.851406] kobject: 'gretap0' (00000000f0d36bae): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1245.871287] binder: undelivered TRANSACTION_ERROR: 29189 [ 1245.881792] kobject: 'loop5' (0000000061b7f566): kobject_uevent_env [ 1245.901775] binder: send failed reply for transaction 875, target dead [ 1245.913946] kobject: 'loop5' (0000000061b7f566): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1245.929744] kobject: 'gretap0' (00000000f0d36bae): calling ktype release [ 1245.939906] binder: 13134:13135 ioctl c0306201 20000440 returned -14 [ 1245.953452] binder_alloc: binder_alloc_mmap_handler: 13134 20001000-20002000 already mapped failed -16 [ 1245.955599] kobject: 'gretap0': free name [ 1245.964111] binder: BINDER_SET_CONTEXT_MGR already set [ 1245.973899] kobject: 'loop2' (00000000f59fad03): kobject_uevent_env [ 1245.982388] binder: 13134:13135 ioctl 40046207 0 returned -16 [ 1245.984381] kobject: 'loop2' (00000000f59fad03): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1245.994463] binder_alloc: 13134: binder_alloc_buf, no vma [ 1246.004080] binder: 13134:13138 transaction failed 29189/-3, size 24-8 line 3147 [ 1246.010919] kobject: 'loop4' (000000008c8ba127): kobject_uevent_env [ 1246.017724] binder: release 13134:13135 transaction 880 out, still active [ 1246.026113] kobject: 'rx-0' (000000001015dba7): kobject_cleanup, parent 00000000bada2f06 [ 1246.026199] binder: 13134:13138 ioctl c0306201 20000440 returned -14 [ 1246.037796] kobject: 'rx-0' (000000001015dba7): auto cleanup 'remove' event [ 1246.041615] binder: unexpected work type, 4, not freed [ 1246.051682] kobject: 'loop4' (000000008c8ba127): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1246.057664] binder: undelivered TRANSACTION_COMPLETE [ 1246.067227] kobject: 'loop1' (00000000f0a541d2): kobject_uevent_env [ 1246.070864] kobject: 'rx-0' (000000001015dba7): kobject_uevent_env [ 1246.074673] kobject: 'loop1' (00000000f0a541d2): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1246.082793] binder: send failed reply for transaction 880, target dead [ 1246.105504] kobject: 'rx-0' (000000001015dba7): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1246.126366] binder: undelivered TRANSACTION_ERROR: 29189 [ 1246.133897] kobject: 'rx-0' (000000001015dba7): auto cleanup kobject_del [ 1246.142580] kobject: 'rx-0' (000000001015dba7): calling ktype release [ 1246.143970] kobject: 'loop4' (000000008c8ba127): kobject_uevent_env [ 1246.152936] kobject: 'rx-0': free name [ 1246.157290] kobject: 'loop4' (000000008c8ba127): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1246.160237] kobject: 'tx-0' (00000000857f36ef): kobject_cleanup, parent 00000000bada2f06 [ 1246.177794] kobject: 'tx-0' (00000000857f36ef): auto cleanup 'remove' event [ 1246.184920] kobject: 'tx-0' (00000000857f36ef): kobject_uevent_env [ 1246.191322] kobject: 'tx-0' (00000000857f36ef): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1246.201427] kobject: 'tx-0' (00000000857f36ef): auto cleanup kobject_del [ 1246.208357] kobject: 'tx-0' (00000000857f36ef): calling ktype release [ 1246.214964] kobject: 'tx-0': free name [ 1246.218957] kobject: 'queues' (00000000bada2f06): kobject_cleanup, parent (null) [ 1246.227454] kobject: 'queues' (00000000bada2f06): calling ktype release [ 1246.234220] kobject: 'queues' (00000000bada2f06): kset_release [ 1246.240274] kobject: 'queues': free name [ 1246.244615] kobject: 'gre0' (00000000b9ca8d44): kobject_uevent_env [ 1246.250998] kobject: 'gre0' (00000000b9ca8d44): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1246.296173] kobject: 'gre0' (00000000b9ca8d44): kobject_cleanup, parent (null) [ 1246.304486] kobject: 'gre0' (00000000b9ca8d44): auto cleanup 'remove' event [ 1246.312384] kobject: 'gre0' (00000000b9ca8d44): kobject_uevent_env [ 1246.319228] kobject: 'gre0' (00000000b9ca8d44): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1246.329690] kobject: 'gre0' (00000000b9ca8d44): calling ktype release [ 1246.336472] kobject: 'gre0': free name [ 1246.340887] kobject: 'rx-0' (00000000bf852465): kobject_cleanup, parent 0000000038dc6c88 [ 1246.349369] kobject: 'rx-0' (00000000bf852465): auto cleanup 'remove' event [ 1246.356635] kobject: 'rx-0' (00000000bf852465): kobject_uevent_env [ 1246.362963] kobject: 'rx-0' (00000000bf852465): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1246.373147] kobject: 'rx-0' (00000000bf852465): auto cleanup kobject_del [ 1246.380283] kobject: 'rx-0' (00000000bf852465): calling ktype release [ 1246.386935] kobject: 'rx-0': free name [ 1246.390866] kobject: 'tx-0' (000000005a469bce): kobject_cleanup, parent 0000000038dc6c88 [ 1246.399151] kobject: 'tx-0' (000000005a469bce): auto cleanup 'remove' event [ 1246.406805] kobject: 'tx-0' (000000005a469bce): kobject_uevent_env [ 1246.413170] kobject: 'tx-0' (000000005a469bce): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1246.423270] kobject: 'tx-0' (000000005a469bce): auto cleanup kobject_del [ 1246.430229] kobject: 'tx-0' (000000005a469bce): calling ktype release [ 1246.436846] kobject: 'tx-0': free name [ 1246.440766] kobject: 'queues' (0000000038dc6c88): kobject_cleanup, parent (null) [ 1246.449231] kobject: 'queues' (0000000038dc6c88): calling ktype release [ 1246.455996] kobject: 'queues' (0000000038dc6c88): kset_release [ 1246.462055] kobject: 'queues': free name [ 1246.466605] kobject: 'tunl0' (00000000656ebde4): kobject_uevent_env [ 1246.473026] kobject: 'tunl0' (00000000656ebde4): kobject_uevent_env: uevent_suppress caused the event to drop! 18:40:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) write$UHID_INPUT(r0, &(0x7f0000004240)={0x8, "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", 0xffffffffffffffec}, 0xf0ab9711) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) 18:40:31 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}, 0x1ff}, 0x1c) 18:40:31 executing program 5: openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) 18:40:31 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1baaaafeffaaaaa8]}, 0x1ff}, 0x1c) 18:40:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)=0x2000000}}], 0x58}, 0x10) 18:40:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x50a000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1246.506204] kobject: 'tunl0' (00000000656ebde4): kobject_cleanup, parent (null) [ 1246.514672] kobject: 'tunl0' (00000000656ebde4): auto cleanup 'remove' event [ 1246.537130] kobject: 'loop3' (000000001adab5db): kobject_uevent_env [ 1246.544153] kobject: 'loop3' (000000001adab5db): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:40:31 executing program 5: openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 1246.577101] binder: 13149:13156 ioctl c0306201 20000440 returned -14 [ 1246.583731] kobject: 'tunl0' (00000000656ebde4): kobject_uevent_env [ 1246.591532] binder_alloc: binder_alloc_mmap_handler: 13149 20001000-20002000 already mapped failed -16 [ 1246.595597] kobject: 'loop5' (0000000061b7f566): kobject_uevent_env [ 1246.615162] kobject: 'tunl0' (00000000656ebde4): kobject_uevent_env: uevent_suppress caused the event to drop! 18:40:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)=0x4000000000000}}], 0x58}, 0x10) 18:40:31 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1baaaafeffaaaaa8]}, 0x1ff}, 0x1c) 18:40:31 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20aaaafeffaaaaa8]}, 0x1ff}, 0x1c) [ 1246.637977] kobject: 'loop5' (0000000061b7f566): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1246.647645] kobject: 'tunl0' (00000000656ebde4): calling ktype release [ 1246.663924] kobject: 'tunl0': free name [ 1246.670206] binder: BINDER_SET_CONTEXT_MGR already set [ 1246.670212] binder_alloc: 13149: binder_alloc_buf, no vma 18:40:31 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x0, 0x0) [ 1246.670238] binder: 13149:13156 transaction failed 29189/-3, size 24-8 line 3147 [ 1246.680375] kobject: 'loop2' (00000000f59fad03): kobject_uevent_env [ 1246.699148] kobject: 'rx-0' (00000000c82e5119): kobject_cleanup, parent 00000000d0e92418 [ 1246.724278] kobject: 'loop2' (00000000f59fad03): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1246.739527] kobject: 'rx-0' (00000000c82e5119): auto cleanup 'remove' event [ 1246.751732] kobject: 'rx-0' (00000000c82e5119): kobject_uevent_env [ 1246.758874] kobject: 'loop1' (00000000f0a541d2): kobject_uevent_env [ 1246.770152] kobject: 'rx-0' (00000000c82e5119): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1246.782302] binder: release 13149:13156 transaction 885 out, still active 18:40:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)=0x40030000000000}}], 0x58}, 0x10) [ 1246.793017] kobject: 'rx-0' (00000000c82e5119): auto cleanup kobject_del [ 1246.793258] binder: 13149:13166 ioctl 40046207 0 returned -16 [ 1246.807396] kobject: 'loop1' (00000000f0a541d2): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1246.810173] kobject: 'rx-0' (00000000c82e5119): calling ktype release [ 1246.821157] binder: unexpected work type, 4, not freed [ 1246.826169] net_ratelimit: 20 callbacks suppressed [ 1246.826178] protocol 88fb is buggy, dev hsr_slave_0 [ 1246.839160] protocol 88fb is buggy, dev hsr_slave_1 [ 1246.843068] binder: 13149:13156 ioctl c0306201 20000440 returned -14 [ 1246.853814] binder: undelivered TRANSACTION_COMPLETE [ 1246.856348] kobject: 'rx-0': free name [ 1246.862951] kobject: 'tx-0' (000000005d5564bd): kobject_cleanup, parent 00000000d0e92418 [ 1246.867912] kobject: 'loop5' (0000000061b7f566): kobject_uevent_env [ 1246.883533] binder: send failed reply for transaction 885, target dead [ 1246.903514] kobject: 'tx-0' (000000005d5564bd): auto cleanup 'remove' event [ 1246.910684] binder: undelivered TRANSACTION_ERROR: 29189 [ 1246.916577] kobject: 'loop5' (0000000061b7f566): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1246.929590] kobject: 'tx-0' (000000005d5564bd): kobject_uevent_env [ 1246.939313] kobject: 'tx-0' (000000005d5564bd): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1246.944714] kobject: 'loop1' (00000000f0a541d2): kobject_uevent_env [ 1246.954427] kobject: 'tx-0' (000000005d5564bd): auto cleanup kobject_del [ 1246.963206] kobject: 'tx-0' (000000005d5564bd): calling ktype release [ 1246.970107] kobject: 'tx-0': free name [ 1246.974100] kobject: 'queues' (00000000d0e92418): kobject_cleanup, parent (null) [ 1246.975570] kobject: 'loop1' (00000000f0a541d2): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1246.984818] kobject: 'queues' (00000000d0e92418): calling ktype release [ 1247.001165] kobject: 'queues' (00000000d0e92418): kset_release [ 1247.002346] kobject: 'loop5' (0000000061b7f566): kobject_uevent_env [ 1247.007285] kobject: 'queues': free name [ 1247.007710] kobject: 'lo' (00000000553ae4ee): kobject_uevent_env [ 1247.018465] kobject: 'loop5' (0000000061b7f566): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1247.024576] kobject: 'lo' (00000000553ae4ee): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1247.038240] kobject: 'loop2' (00000000f59fad03): kobject_uevent_env [ 1247.050489] kobject: 'loop2' (00000000f59fad03): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1247.061446] kobject: 'loop4' (000000008c8ba127): kobject_uevent_env [ 1247.076846] kobject: 'loop4' (000000008c8ba127): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1247.086210] kobject: 'lo' (00000000553ae4ee): kobject_cleanup, parent (null) [ 1247.095348] kobject: 'lo' (00000000553ae4ee): auto cleanup 'remove' event [ 1247.102845] kobject: 'lo' (00000000553ae4ee): kobject_uevent_env [ 1247.109616] kobject: 'lo' (00000000553ae4ee): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1247.123641] kobject: 'lo' (00000000553ae4ee): calling ktype release [ 1247.131349] kobject: 'lo': free name [ 1247.296132] protocol 88fb is buggy, dev hsr_slave_0 [ 1247.301271] protocol 88fb is buggy, dev hsr_slave_1 [ 1247.306444] protocol 88fb is buggy, dev hsr_slave_0 [ 1247.311510] protocol 88fb is buggy, dev hsr_slave_1 18:40:31 executing program 0: socket$inet6(0xa, 0x400000000001, 0x0) r0 = dup(0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1baaaafeffaaaaa8]}, 0x1ff}, 0x1c) 18:40:31 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100000000000000]}, 0x1ff}, 0x1c) 18:40:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) recvfrom$unix(r0, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) 18:40:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)=0x100000000000000}}], 0x58}, 0x10) 18:40:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x70a000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:40:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:40:32 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21aaaafeffaaaaa8]}, 0x1ff}, 0x1c) [ 1247.404155] binder: 13196:13197 ioctl c0306201 20000440 returned -14 [ 1247.414696] kobject: 'loop3' (000000001adab5db): kobject_uevent_env [ 1247.420240] binder: BINDER_SET_CONTEXT_MGR already set [ 1247.436500] kobject: 'loop3' (000000001adab5db): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1247.448533] binder_alloc: binder_alloc_mmap_handler: 13196 20001000-20002000 already mapped failed -16 18:40:32 executing program 0: socket$inet6(0xa, 0x400000000001, 0x0) r0 = dup(0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1baaaafeffaaaaa8]}, 0x1ff}, 0x1c) 18:40:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)=0x200000000000000}}], 0x58}, 0x10) [ 1247.476482] kobject: 'loop1' (00000000f0a541d2): kobject_uevent_env [ 1247.476610] binder: 13198:13199 ioctl 40046207 0 returned -16 [ 1247.488901] binder_alloc: 13196: binder_alloc_buf, no vma [ 1247.488940] binder: 13198:13207 transaction failed 29189/-3, size 24-8 line 3147 [ 1247.496888] binder: BINDER_SET_CONTEXT_MGR already set [ 1247.513767] kobject: 'loop1' (00000000f0a541d2): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1247.546741] binder: 13196:13197 ioctl 40046207 0 returned -16 [ 1247.549741] binder_alloc: 13196: binder_alloc_buf, no vma [ 1247.569156] kobject: 'loop2' (00000000f59fad03): kobject_uevent_env [ 1247.587440] kobject: 'loop2' (00000000f59fad03): fill_kobj_path: path = '/devices/virtual/block/loop2' 18:40:32 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200000000000000]}, 0x1ff}, 0x1c) 18:40:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580), 0x2}}], 0x58}, 0x10) 18:40:32 executing program 0: socket$inet6(0xa, 0x400000000001, 0x0) r0 = dup(0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1baaaafeffaaaaa8]}, 0x1ff}, 0x1c) [ 1247.593224] binder: send failed reply for transaction 890 to 13196:13197 [ 1247.605766] binder: 13198:13207 ioctl c0306201 20000440 returned -14 [ 1247.621481] binder: undelivered TRANSACTION_COMPLETE [ 1247.623841] binder: 13196:13214 ioctl c0306201 20000440 returned -14 [ 1247.636517] binder: undelivered TRANSACTION_ERROR: 29189 18:40:32 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22aaaafeffaaaaa8]}, 0x1ff}, 0x1c) [ 1247.676383] binder: undelivered TRANSACTION_ERROR: 29189 [ 1247.696109] protocol 88fb is buggy, dev hsr_slave_0 [ 1247.701295] protocol 88fb is buggy, dev hsr_slave_1 [ 1247.706436] protocol 88fb is buggy, dev hsr_slave_0 [ 1247.711510] protocol 88fb is buggy, dev hsr_slave_1 18:40:32 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1baaaafeffaaaaa8]}, 0x1ff}, 0x1c) [ 1247.727718] kobject: 'loop1' (00000000f0a541d2): kobject_uevent_env [ 1247.747900] kobject: 'loop1' (00000000f0a541d2): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1247.777142] binder: undelivered TRANSACTION_ERROR: 29189 18:40:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540)=0x100000000000000, &(0x7f0000000580)}}], 0x58}, 0x10) [ 1247.800160] kobject: 'loop4' (000000008c8ba127): kobject_uevent_env [ 1247.818502] kobject: 'loop4' (000000008c8ba127): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1247.850613] kobject: 'loop2' (00000000f59fad03): kobject_uevent_env [ 1247.867057] kobject: 'loop2' (00000000f59fad03): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1247.903970] kobject: 'loop5' (0000000061b7f566): kobject_uevent_env [ 1247.912803] kobject: 'loop5' (0000000061b7f566): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1247.930794] kobject: 'loop5' (0000000061b7f566): kobject_uevent_env [ 1247.939856] kobject: 'loop5' (0000000061b7f566): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:40:32 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) recvfrom$unix(r0, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) 18:40:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x713000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) 18:40:32 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1baaaafeffaaaaa8]}, 0x1ff}, 0x1c) 18:40:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580), 0x4}}], 0x58}, 0x10) 18:40:32 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2300000000000000]}, 0x1ff}, 0x1c) 18:40:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540)=0x100000000000000, &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580), 0x34000}}], 0x58}, 0x10) [ 1248.232015] kobject: 'loop3' (000000001adab5db): kobject_uevent_env [ 1248.259324] kobject: 'loop3' (000000001adab5db): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1248.274696] binder: 13239:13246 ioctl c0306201 20000440 returned -14 18:40:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540)=0x100000000000000, &(0x7f0000000580)}}], 0x58}, 0x10) 18:40:32 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1baaaafeffaaaaa8]}, 0x1ff}, 0x1c) 18:40:32 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x239664feff08d478]}, 0x1ff}, 0x1c) [ 1248.313264] kobject: 'loop2' (00000000f59fad03): kobject_uevent_env [ 1248.320916] binder_alloc: binder_alloc_mmap_handler: 13239 20001000-20002000 already mapped failed -16 [ 1248.346146] kobject: 'loop2' (00000000f59fad03): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1248.360404] kobject: 'loop5' (0000000061b7f566): kobject_uevent_env [ 1248.372023] binder: BINDER_SET_CONTEXT_MGR already set [ 1248.390599] kobject: 'loop5' (0000000061b7f566): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1248.400945] binder: 13239:13246 ioctl 40046207 0 returned -16 18:40:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580), 0x40000}}], 0x58}, 0x10) 18:40:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0x5, 0x0) [ 1248.422189] binder_alloc: 13239: binder_alloc_buf, no vma [ 1248.425286] kobject: 'loop1' (00000000f0a541d2): kobject_uevent_env [ 1248.449873] kobject: 'loop1' (00000000f0a541d2): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1248.467268] binder: send failed reply for transaction 896 to 13239:13246 [ 1248.477297] binder: undelivered TRANSACTION_COMPLETE [ 1248.485929] binder: undelivered TRANSACTION_ERROR: 29189 [ 1248.492406] kobject: 'loop2' (00000000f59fad03): kobject_uevent_env [ 1248.502603] kobject: 'loop2' (00000000f59fad03): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1248.505835] binder_transaction: 1 callbacks suppressed [ 1248.505853] binder: 13239:13264 transaction failed 29189/-3, size 24-8 line 3147 [ 1248.539354] binder: 13239:13264 ioctl c0306201 20000440 returned -14 [ 1248.542720] kobject: 'loop5' (0000000061b7f566): kobject_uevent_env [ 1248.553424] kobject: 'loop5' (0000000061b7f566): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1248.569958] binder: undelivered TRANSACTION_ERROR: 29189 [ 1248.597392] kobject: 'loop4' (000000008c8ba127): kobject_uevent_env [ 1248.603917] kobject: 'loop4' (000000008c8ba127): fill_kobj_path: path = '/devices/virtual/block/loop4' 18:40:33 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) recvfrom$unix(r0, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) 18:40:33 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, 0x0, 0x0) 18:40:33 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400000000000000]}, 0x1ff}, 0x1c) 18:40:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580), 0x400300}}], 0x58}, 0x10) 18:40:33 executing program 5: socket(0xa, 0x5, 0x0) 18:40:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x740000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xbe19a2071b09198e, 0x0, 0x0}) [ 1249.050806] kobject: 'loop3' (000000001adab5db): kobject_uevent_env [ 1249.070934] binder: 13279:13280 ioctl c0306201 20000440 returned -14 [ 1249.076205] kobject: 'loop3' (000000001adab5db): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:40:33 executing program 5: socket(0x0, 0x5, 0x0) 18:40:33 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, 0x0, 0x0) 18:40:33 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2443f8fffed409cb]}, 0x1ff}, 0x1c) [ 1249.099944] binder_alloc: binder_alloc_mmap_handler: 13279 20001000-20002000 already mapped failed -16 [ 1249.122831] kobject: 'loop5' (0000000061b7f566): kobject_uevent_env [ 1249.130714] kobject: 'loop5' (0000000061b7f566): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:40:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580), 0x1000000}}], 0x58}, 0x10) [ 1249.148927] binder: BINDER_SET_CONTEXT_MGR already set [ 1249.158943] binder: 13279:13280 ioctl 40046207 0 returned -16 [ 1249.171516] kobject: 'loop1' (00000000f0a541d2): kobject_uevent_env [ 1249.183242] kobject: 'loop1' (00000000f0a541d2): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1249.183250] binder_alloc: 13279: binder_alloc_buf, no vma 18:40:33 executing program 5: socket(0x0, 0x5, 0x0) 18:40:33 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, 0x0, 0x0) [ 1249.183281] binder: 13279:13302 transaction failed 29189/-3, size 24-8 line 3147 [ 1249.201637] kobject: 'loop2' (00000000f59fad03): kobject_uevent_env [ 1249.220629] kobject: 'loop2' (00000000f59fad03): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1249.237028] binder: send failed re