MON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(0xffffffffffffffff) 11:54:09 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x80000, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e24, @rand_addr=0x341}}, 0x0, 0xf5, 0x0, "d9c26ab6575ece9b7a958fb7b4bdf733c19171a3c0321ca10f84233057ebab65baf639b7c6663f62e2f138303c6093785eea6acb8270d7503368c0711132f1ed40aac76941310d2cce449bf7dfe4ddde"}, 0xd8) userfaultfd(0x0) socket$packet(0x11, 0x0, 0x300) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x208000) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000900)={0xdbb, 0x0, 0x3}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000000)=@generic={0x0, 0x6, 0x1}) socket$packet(0x11, 0x3, 0x300) r4 = socket$netlink(0x10, 0x3, 0x1000000000b) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x2400200) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f00000007c0)={0x7, 0xffffffffffffffff, [], {0x0, @reserved}}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xe01f0300, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e515320000000002008801260001000000640000000001", 0x30, 0x1a0}]) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, &(0x7f0000000600)='trusted$\x00', 0x9, 0x1) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000880)=0x1) dup3(r5, r5, 0x80000) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=""/252, &(0x7f0000000400)=""/148, &(0x7f00000004c0)=""/176, 0x1d004}) write(r4, &(0x7f0000000340)="2700000014000707030e0000120f0a0011000100f5fe0012ff00dd00078e151f75080039000500782e07f7", 0x2b) r6 = socket$packet(0x11, 0x2, 0x300) fsetxattr$trusted_overlay_origin(r6, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000940)='y\x00', 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000006500), 0x2c7, 0x0, &(0x7f0000006700)) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2}}}, 0x90) 11:54:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000004180)=[{{&(0x7f0000000100)=@xdp, 0x80, &(0x7f0000000540)=[{&(0x7f0000000180)=""/146, 0x92}, {&(0x7f0000000240)=""/83, 0x53}, {&(0x7f0000000300)=""/16, 0x10}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f00000003c0)=""/132, 0x84}, {&(0x7f0000000480)=""/72, 0x48}], 0x6, &(0x7f00000005c0)=""/23, 0x17}, 0x7}, {{&(0x7f0000000600)=@generic, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/108, 0x6c}, {&(0x7f0000000700)=""/108, 0x6c}], 0x2}}, {{&(0x7f00000007c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000840)=""/9, 0x9}], 0x1, &(0x7f00000008c0)=""/127, 0x7f}, 0x3}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000940)=""/4, 0x4}], 0x1, &(0x7f00000009c0)=""/73, 0x49}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000a40)=""/195, 0xc3}, {&(0x7f0000000b40)=""/12, 0xc}, {&(0x7f0000000b80)=""/221, 0xdd}, {&(0x7f0000000c80)=""/53, 0x35}, {&(0x7f0000000cc0)=""/239, 0xef}], 0x5, &(0x7f0000000e40)=""/7, 0x7}, 0x4}, {{&(0x7f0000000e80)=@un=@abs, 0x80, &(0x7f0000001200)=[{&(0x7f0000000f00)=""/134, 0x86}, {&(0x7f0000000fc0)=""/151, 0x97}, {&(0x7f0000001080)=""/194, 0xc2}, {&(0x7f0000001180)=""/68, 0x44}], 0x4, &(0x7f0000001240)=""/122, 0x7a}, 0xecd}, {{&(0x7f00000012c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001340)=""/214, 0xd6}, {&(0x7f0000001440)=""/178, 0xb2}, {&(0x7f0000001500)=""/11, 0xb}, {&(0x7f0000001540)=""/99, 0x63}, {&(0x7f00000015c0)=""/137, 0x89}, {&(0x7f0000001680)=""/106, 0x6a}, {&(0x7f0000001700)=""/20, 0x14}, {&(0x7f0000001740)=""/99, 0x63}, {&(0x7f00000017c0)=""/239, 0xef}], 0x9, &(0x7f0000001980)=""/237, 0xed}, 0x3}, {{&(0x7f0000001a80)=@sco, 0x80, &(0x7f0000002b00)=[{&(0x7f0000001b00)=""/4096, 0x1000}], 0x1, &(0x7f0000002b40)=""/11, 0xb}, 0x1}, {{&(0x7f0000002b80)=@in, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002c00)=""/17, 0x11}, {&(0x7f0000002c40)=""/162, 0xa2}, {&(0x7f0000002d00)=""/106, 0x6a}], 0x3, &(0x7f0000002dc0)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000003dc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000004080)=[{&(0x7f0000003e40)=""/221, 0xdd}, {&(0x7f0000003f40)=""/55, 0x37}, {&(0x7f0000003f80)=""/100, 0x64}, {&(0x7f0000004000)=""/90, 0x5a}], 0x4, &(0x7f00000040c0)=""/177, 0xb1}, 0x1}], 0xa, 0x2020, &(0x7f0000004400)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000004480)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000004540)={&(0x7f0000004440)={0x10, 0x0, 0x0, 0x80480005}, 0xc, &(0x7f0000004500)={&(0x7f00000044c0)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040054}, 0x80) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0xe06, 0x4) preadv(r3, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) 11:54:09 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)=0x84) close(r2) close(r1) 11:54:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000006c000000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:09 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200400, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000080)) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f00000000c0)={{0x2, @name="366fbbece774e01dbdddec9a7dcf1ade8573385633d102bd771896d404f9a866"}, 0x8, 0xec9, 0x4}) close(r2) close(r1) 11:54:09 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) fgetxattr(r0, &(0x7f0000000140)=@random={'security.', 'vmnet0GPLuserprocnodevprocselfmime_typeppp1nodev&\x00'}, &(0x7f0000000280)=""/231, 0xe7) r1 = userfaultfd(0x0) r2 = memfd_create(&(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x2) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f00000000c0)={0x0, 0x0, {0xd52, 0x4, 0x201b, 0x0, 0x0, 0x6, 0x1, 0x7}}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r1) close(r1) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20000, 0x0) 11:54:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_targets\x00') init_module(&(0x7f0000000200)="2c28e200", 0x4, &(0x7f0000000180)='\x00') ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000100)={0xc, {0x7, 0x7, 0xfffffffffffffffe, 0x4}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x3, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r2, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) [ 1159.657715] binder_alloc: binder_alloc_mmap_handler: 20090 20001000-20004000 already mapped failed -16 [ 1159.672362] binder_alloc: 20090: binder_alloc_buf, no vma [ 1159.686860] binder: BINDER_SET_CONTEXT_MGR already set [ 1159.720737] binder: 20090:20098 ioctl 40046207 0 returned -16 11:54:09 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)=0xffffffa4) close(r2) close(r1) 11:54:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000001200000000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_free(r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r2, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) 11:54:09 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x101040, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x6, &(0x7f0000000080)=0x7, 0x4) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, 0x7, {0x200}}, 0x18) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r3) close(r3) [ 1159.898855] binder_alloc: binder_alloc_mmap_handler: 20121 20001000-20004000 already mapped failed -16 [ 1159.910504] binder: BINDER_SET_CONTEXT_MGR already set [ 1159.921686] binder: 20121:20124 ioctl 40046207 0 returned -16 [ 1159.923604] binder_alloc: 20121: binder_alloc_buf, no vma 11:54:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)=0x88000000) close(r2) close(r1) 11:54:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@mcast2, 0x7, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) 11:54:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000180000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(0xffffffffffffffff) 11:54:10 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000), 0xfffffeeb) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)={0x8001, 0xb, 0x4, 0x10, {0x0, 0x7530}, {0x2, 0x1, 0xe49, 0x2, 0x9, 0x1, "37bbf1a4"}, 0x10000, 0x3, @userptr=0x7, 0x4}) preadv(r1, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) 11:54:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000300000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1160.528067] binder_alloc: binder_alloc_mmap_handler: 20142 20001000-20004000 already mapped failed -16 [ 1160.539968] binder_alloc: 20142: binder_alloc_buf, no vma 11:54:10 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r3) close(r2) 11:54:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)=0xff0f) close(r2) close(r1) 11:54:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x1}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0xfffffd68}], 0x16d55475f83c5476, 0x0) [ 1160.699729] binder_alloc: binder_alloc_mmap_handler: 20163 20001000-20004000 already mapped failed -16 [ 1160.719558] binder: BINDER_SET_CONTEXT_MGR already set [ 1160.726728] binder: 20163:20168 ioctl 40046207 0 returned -16 [ 1160.734575] binder_alloc: 20163: binder_alloc_buf, no vma 11:54:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto(r0, &(0x7f0000000080)="5dab7ea6e3e463e647a0467c78d03f9fcdbe0523018167ec7c05134533101a077d78e25b1c6996020ea4d841602b51d63f0cd2a363b090d6b6ef9c7d430e3e7b72b234ffcb02ba8ea3d5598295aaeb4903fbd860f051602eaa64e556cbc8ff2eda8048c1fb6cdcb17fc06ef9fdb33fc0582bc2db8453097bc95da2475696e424adcd88e948968833b3665d9d3191edafec68f72a51f2c032bd52ed5e9da5a7feca1947", 0xa3, 0x40000, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x2711, @my=0x0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000700)='/selinux/status\x00', 0x0, 0x0) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000740)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='a\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000027bd7000ffdbdf25010000000000000008410000004c0018c800000062726f6164636173742d6c696e6b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000400)={0x0, 0x4, 0x100, 0x5, [], [], [], 0x0, 0x48, 0xfffffffffffffffe, 0x2, "5d25c292d747868f7b28c39df16ce30a"}) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r5) getsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f0000000000)={@empty, @dev}, &(0x7f00000001c0)=0x8) close(r2) 11:54:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x80000000, 0x200002) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x80000001) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000068000000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:10 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x104, 0x70bd28, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000040), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f00000003c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e23, 0x3cc8, @loopback, 0xa520}}, 0x3f, 0x8, 0x6, 0x2, 0x2}, &(0x7f00000004c0)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000500)={r4, 0x14d6, 0x30}, &(0x7f0000000540)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/28, 0xfffffffffffffe54}], 0x1000000000000329, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000240)={0x6, 0x7fff, 0x0, 0x0, 0x8}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000300)={{0x7, 0x7f}, 'port1\x00', 0x81, 0x0, 0xfffffffffffffffb, 0x5, 0x21, 0xfffffffffffffffb, 0x75, 0x0, 0x7, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) 11:54:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)=0x8400) close(r2) close(r1) [ 1160.939663] binder: BINDER_SET_CONTEXT_MGR already set [ 1160.954405] binder_alloc: 20186: binder_alloc_buf, no vma [ 1160.974253] binder: 20186:20190 ioctl 40046207 0 returned -16 11:54:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000004c000000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r2) close(r1) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="0ea34dd58dfba909a2c365139d0192e98d6036467d230ec3a2c7f9875c2cba0ba9e87220b78c3531ae080ac54450b84f696625b615f31ad14095841d807ca8a076574fb4d1890ce761e58f26fb5c32248bceda4616dc51ba597528101a51120f0654353f917190021037c00a324dd729daa544c1290b14c692c861", 0x7b, r3) 11:54:11 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x193000) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0xbd0000, 0x8, 0xbe, [], &(0x7f00000000c0)={0x990a7c, 0x5e, [], @p_u8=&(0x7f0000000080)=0x8000}}) close(r2) close(r1) 11:54:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) preadv(r1, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) 11:54:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)=0x1100000000000000) close(r2) close(r1) 11:54:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) r3 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) mq_timedreceive(r3, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) mq_timedsend(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x8000, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb58906d6b66732e66617400020120000200008000f8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r4, 0x80047210, &(0x7f0000000140)) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x8000a0, &(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2cabd8a9d0775244cf805b4db600"]) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000580)) clock_gettime(0x0, &(0x7f0000000680)) mq_timedreceive(r4, &(0x7f00000005c0)=""/164, 0xa4, 0x705d, &(0x7f00000006c0)={0x77359400}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1161.428982] binder: BINDER_SET_CONTEXT_MGR already set 11:54:11 executing program 1: r0 = socket$inet6(0xa, 0x4, 0x2d53) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000040), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r2 = getpgrp(0x0) r3 = syz_open_procfs(r2, &(0x7f0000000180)='coredump_filter\x00') write$binfmt_misc(r1, &(0x7f0000001540)={'syz1', "1b60696c52a1da0bc8ea8d41458c4e6d3b2bafbc8e972cffd1c9fd949dc95bc6ab01ba18244669223a35377eab495864e320dcdfa8589cef494b99f2c8113c5dbf0c520764385f93db533b0e7b7be4733178f65d078ae64cda4b1596c7f8ef3e848bda6c9539a5caaf3716e85f05a3f7ad56cdb95402bf0e405cd623ca17a3b3c9daa64bf4296e4575c3530551e1d7073b8cb800770efea04caca7fe1e86ac9a00255d02e68553f0c4a2c6458e8b6bdda326399e31c44285777c23b5ec1eb59136d8e49d7b5ad8f840991eada914242979cb880d79d5c749815e82c04707f2552ff276ecc66c5ad648420773d9ae0b283be221b743e4fa7c7fbd46c5e0163b4d4636ef88a482d36bd7b59bb13510ca77a22da3b0cb90191872ea144cda7454f5536bf8cb33269491ede6645f51e594ece4eb708fa69c891179a2ba2e9e64a91b6d269ef786c9e5fc8c01ed828d4fdeeeabee898f09cfbfe84fe51f8f65a2cb911f22d34c5b03e77c524a0e80c55294e0e43deaa05cb222ec60e31a72542d13bd0128941d2d95b519602fe5e503a567b2411c1779a3400e0841b479e2deea8f41b157ebbc5f32bd5e912c08e652965f96a8ac2a11d47e22e872b98a99303c9545005fea5348c5a15a0c5b14f0e373f6ce8165eb787e88867c51d181a24bc2cfa688d00a531a543131300607a5d0404e26adbb6cdaae10cd256729343856589e52443982718eec2e1f05df23a422bfc86dc2784794b89a385cf01ae1fc7a57926c5e3005b069ef8775a0ca3b66308361752f74a1f25926ef048ce5afd920501c2ae68242d2d404e5ce1d0c7180f313c250d260c89ffaaa8eb79edde259724deef94e155adc31e3da87d3dc26641bb31007bccede61e48702b8464fdeac4a201840e19e550fe7c5d55c229862c6bcad91f6dddd083d76c984fe64f922aef63f0327bf93247cb102d3ea5b7cc3f55ec25dc1baa7b5f246467e97a9a6c3d0df41d5e4218218c04b7a48d12089a1e99ed334439ccd193e5507d3e1b6e27fdf088727c0a828b0dfa2edcdfb3fa5d6d28322c90a3241d0826219f57eded804252b7dda4e4b0abd525f010191c82e6ec2c4c13542787dd7b336d071a59b289510c2d850ff46a715c3ee919278f50ec78b109f810b38e73d7f85303908d4228a836e22d99168a660675eb3fc3747945889882c79570d083986b6ce80648b64d151972f610986c2e86d21cd16666d398e18693cc59126f2c5256c4afc4d71e72800d970a96372b49911877919f09faaae3091de0cfd2b522dfcac70d74ffedcc6002b65c8fe1c7cd58f075bc61100527caffdd52eae1549232d4c70eb22cf7b0b299729537de38df310f52dc3d0e2b82788227422b9210c2374736d67a8b43bfbf617b190356c30eb46d30b2033119cc88385703968dcc0a15420b1f50fb0b887b4bd12647a621dfd30b41f7786aae7be57bc8b1382fa761c92d182ea734b52c79eff5a0736a163d12078d82b7d01b0197984b9a6d2643220944c740de44977b1134ddf4609db433b58d4b661690edcc85bc3bc49864dd5800e772bd964607bccafe1267fbd919079c872e5ee8643af08f411609c2482ce56a107592a06804e35096ffba923c12ca22f15f3c09c17ad4e59833be6d9d813a7f238767da6d54f83cf81ae09f37f6d240200913ff45b705dba14eeb59b5ee41bd03a961364eee3abeefdeccf7dc37025551127f8befff6df27dda830104bc1eed898f8e60920c16571a93bb40357771b0b3a48c989411601b8a3a8a76e13746e6110580a852d334abfc38897f8fc003c5357f39c518b74aee5771bd31e21170f447632b7212c6db79d99917034051336670c19530afced3c6572339da303baa127274cbae26081902100ac794ffb1511c38219704c892049343517ea794aacc69d71c93540421302f4d99e0b95900a28e01078bda292cf3e90711768f83a6844b099e38b8aaed8c0cacc625fe3cc979145329ad21f1548da46a8f107e20bffac285f4ffc94bfa231bd7c5dcd4e7f387b06a635aec53a2dd90cfcfa0516fbb9f4dbd081f5cb582dc2f4e976f73c5e47523d9d50fc809e7dfb152bc27ef6708996919f0d746aa627f6b898870ca3c5e5d37651b1e986b4cff1f74fb638df568573c77c1198c86507172d1d6ca7c3ebe90375bdd7690ad7aae34894f236ac421f2d89c442166bcc979d460fca98b7ac152705723a0399da54f6d912bb4a92412987aad473c20845f8e35316036909d4ee0174324880cb7f280416913a14550f9d6a32747729210510d507479a924c9748dc7abde94fe027006abe80ec21060bad9cf962faec09f4596e3dea784d0a5b0c88bd89c5618d3bc75144847234c415ec2cddba407e1c96c75b2825effae326465780dec1b80b7087fef57ac5e31a23ff47f332809a0f4107dcbb327cb797a7758266c1bf07397a6021d354869a790ab5e95997c7567ccfd4866a11d4e5402313b8ab8560aa8c18f4817af47e60e4b76cd80ceccf58bed6389e72a558a9b84d7b877458bb06f338c2c12b1bd30706a807b93d0bd03b57ee8399e034636ffa1c67743eb0bd001562acbf7aee3fdbe3789aedc0fe5844245a3fc5a015c6bfa2095c34c2f29efd031f47b186fcbe727c7e435012cc3dcdaeffc9e7c89e283310554cf0c12510c9b495b3f64c221bb9b464a78c53ad740a7c4ede9e034ff02127194214a912b604e9f631bfe070881c51c5fc33b00943a7c10ecce952f0fdc230da27afaef72b8c073de0fb91401068458fece4c9491401fa1e737bd793855a74254be0576bf0222cde7f984ed39b74f2ffeb261b4a4c49b6113a2bee35b46967119cfa1cf469e76cc4a91a2f5b18b7f13fcf3b17fa81f5692e4ab2fdd7c1ccdf1c32727f419b9492ecaf449b6dab6fa472415658f64e865e20fbb7aaa1120f654efa44578e0750dad4e998c4a3b35adf83b3f9144c2528a63d58655701fae2a0c94c113f71e7dff8f34c3715564ea615287d24b1d48a66620a3674cef2a4825d6681b80de93548a558e3127cbad5d5753083d5b5033c7c964c32f90517bad265c98cadfe8db10de4d144b8b0be9a836250a1ece91dd4be4ae2d984d6e4d992f140c67066f8890e26e913e27a8c0552d1cd44592426214c911712e7432bd25dff8e6b67a1b299f428fb8831fbc3b58b6521c145435158f917864cbc82c620a5cffe88a8afe0abd9857e637faf616a787f533e7ab55c72867e3320d2401e56fcdd37974f1ad9b38c65f12d3f2cc2bbdbf0df6325a5ffdcaad599c96a77172442161af4a81717fd8701bf42cf0c313c8c191b3754dc1fe48420ae5b54aa9988f37df33c5e7e74f6b1409bbed359d562de9a0ca158fe0ec9a6b53092bfdc6dff07f390b0f17c6cda7e9f25cc628fa1faaa2b651fbfc4dd248d3628f1c447df29cff1dca5c285720351de430bade744f29e4b00b74cab57d1d5682496e4cd767e3d8dbe8563df881ad7dd92936081945656103490d83da3c6380ef0d1db80a3bf16a81dbe057f34f0d5e2440e5f0a5fe586c1a61abf1416bc1642079a8c81ece5dca5a8366b57f95642f048462d2c0be3726acc3139b1f2876de85167b570ad239a52a603ec72e0e879c35f2fb11250879c8bca1c60992edaaeaad96d04d3b11c2f003cc0bb91952208895431173d128c1742014010f26461b4993ceb3105c09aa39db615534845065149cac88ab0c2507a334c2e5459ff695fdf8a4dbbab1aa241fbcc7f209a99a25c9264752d2c88dda47935e709e7cbf3399f9bdd7704a2b060f825a9764dcc2efe6220c1b567fa3a0953a4d5b90eab9aa98e37a862afe22792679811f6be9336cac8b45bab3b1c1d94650ae236386aef7de2140762532517b4bc92ed9ec273ec6b90f1024d95567834462cf37308bbb18622143e1376c4314b504d53194cc524a1e786bf4a4b1c6f472c469520882bb7a124c9cd1c12069ed4b3313d98313b00ae57fb33e2417600f56896002813932d7a91d64772dde5ad862af731bd13322203aa330a69c8883d8251c281030ce98f398fd610b4dd5eb85b16cbaaeff09e3de632fdbc9b9270391af7db31cab0bbcc8585699c08a906be2db1ca9b482d0d8ccf510dca797d66f692215ff12420764378f65bcfec4551caf4be6edeff21e553f5f8e26ae9a8412eca7b307a859532504fadbd746b4ef0edb7fc8f03542e055cdb454d0b023811c0c19f08f10f04873aecfb5a7338193a23112516fc5fa212e88fa2ae7696044dcf4219dc52b17ce600229381b64a2dbf256a11ecef79e50c0d8fc92dc2255869627d4c089aff701e9b8cc67e6b8dc1c959fd06b2aa74a8a2039533b82a4eb1695caf09440a7a3bf7730f9f28d7b486018ca912269c805d03690fbf9f3551d1c26b6f2d45b646d3cf49640a44bf8c55ad65e32a882dd9fc632c7f82d5043dc0c1d1232848045ce1780b26379ab32d48b50a8bc1fbc8a3ab99348fe4b41aaf5930a34af7cd2b357608bb36a8be119d2b9a96f6cfe11a83ba427fcdcc28720cfed1680df5ff7ed0648299ed31e41370aa43e4cc819184c3cb9c849a197548242e9f6a21032be45d5498643c669208b61cda52bc8e1e298ba9a7e4cc507088a0c0f6df9c470c1fe42b964c882a80267b39b4adc868c352a07eaae5624255371e4467c9790fe7a5fd2480b69cc7729071087ffcca155eff5893a7e863412129a6a9de5dbf07e9e8e3de971fe5a93a1a7d73c81d1942f7e2cced28620401a2766c0afe35d3d50699a43c0e8a8b24fdb3ac15030dbcbd815e030bf77131ebca8e0ba8c5f5922abfa8b505b40450484ff216435e96845465e03697e22762216b7cf5a348ab7222c123dc37d913c6652b27f89407b7cd41298b3e68990b666ab327da26691de8b951e4276d497c0fa3dddd506bb62d7ed8a0ee6e6fa269cceaee7fa5e0e35ddca8b25c347e98210904b67ef22bedcc1ceb9f74126ae067b549300c861d136d741b7f434902ed1fda28205ccef18beb9e0b250c40ca7e8b456a956acebc687f29f8e249e8d3cffa9220b7c0860e321ec609133bd402805bfbe9d274c982c9419bd2066e04e0cd93e3beb45a43e1cdf082d504498bf5c726c29420d11ecb430b37f594a85eb3ee4af686b7eca32c306947bfc57f7fb1499e53b9e6230b16788159c55781cf21a78437af575750d402c2fb44d534515708493809739ea47fa00d9fc85fe01c2d0bf1c68bf81f02f62ff1bd98be4180dfa0e8d2669b7cf9baff76e512f76f5f0eb1fe16aa2a3f7d878b4c4770e62ae08b99c8fee5a71a9d123dd955c6dcfcd0e77bc8a1669d1bc75bea6f1ed8705507cdb32706bd1f65d723ce37c4ea17d4eb1a261610745bce3720b4093c553603fd8c82baec039b2d5a9f5998e19d89f670c3646bbd297d051411a13500ba7da615845769130869dbef25795322f1ed708f6c67bcc18ef18891a3d585cfbafc9217abc49ae45346541a3ac16a378ff5e97421414f5142ba9b0bd3790b73fa4835270999508d4bbdd5310bf6a9792e65c2a3ff68e565c54a582b8b124297b8c4b014760a0ac559d8fd012f32c1cae42cb813e976eef27323f1116d9dba4f97ab2cce44900ff26801652a012c03c7c432637d8f6a2c0dd0194792fcc8bc336770fa7b577fe2e9e03935e8437c1e7707199b2f9490ea114ed8bd5efba8c12ebba71293b20edde90de292be0f065d91e0fc4c8ce0e1798d31e417f9dfdb9b79ee75563c84268c81c39b35f4a13d9cc28d3a5e704708915dc9e0ec9811cdd87081"}, 0x1004) preadv(r3, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000540)="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", 0x1000}, {0x0}, {&(0x7f0000000100)="258860665d5ddfb231753111a430f5b58885422c60c92282a2e68dd80cb824f65c88585151e3a8ed20392135fa8df3c870fbf8c975c1ff3696fa9d5661455d48450b92cfc6c5755da6b6", 0x4a}], 0x3) [ 1161.449777] binder_alloc: 20211: binder_alloc_buf, no vma [ 1161.458491] binder: 20211:20216 ioctl 40046207 0 returned -16 11:54:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000004c00000000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:11 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x4}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x84042, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x7, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x21, 0x0, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000010000/0x3000)=nil, 0x3000}, 0x2}) close(r0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000080)={0x1, 0x1ca}, 0x2) close(0xffffffffffffffff) r5 = gettid() sched_rr_get_interval(r5, &(0x7f0000000200)) fcntl$setown(r1, 0x8, r5) 11:54:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)=0x8400000000000000) close(r2) close(r1) 11:54:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x101000) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x9) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x54, 0x0, &(0x7f0000000040)=0x100000070) close(r2) close(r1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa000001}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x204, 0x70bd26, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}}, 0x1) [ 1161.622633] binder: BINDER_SET_CONTEXT_MGR already set [ 1161.630853] binder_alloc: 20233: binder_alloc_buf, no vma [ 1161.637137] binder: 20233:20237 ioctl 40046207 0 returned -16 11:54:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000200)) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1008000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x420, 0x70bd28, 0x25dfdbfc, {{}, 0x0, 0x4107, 0x0, {0x14, 0x18, {0xfffffffffffffff8, @bearer=@l2={'eth', 0x3a, 'ip_vti0\x00'}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) preadv(r1, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) getresuid(&(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000440)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xe8) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='fuseblk\x00', 0x40000, &(0x7f00000006c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions='default_permissions'}], [{@fowner_gt={'fowner>', r5}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'wlan1vboxnet1trusted\'('}}, {@context={'context', 0x3d, 'root'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@hash='hash'}, {@appraise='appraise'}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) [ 1161.675085] 9pnet_virtio: no channels available for device 11:54:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r2) close(r1) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x800, 0x1014c0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, r4, 0x10, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x20048015) 11:54:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000006000000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0xf81, 0x8000) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000140)={r4, r0, 0x9}) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r6) close(r5) 11:54:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sync_file_range(r0, 0x7, 0x1, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000080)={0x1, 0x0, 0x3}) preadv(r1, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) 11:54:11 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000280)=""/4096, &(0x7f0000000000)=0x1000) close(r0) close(r1) 11:54:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)=0xa4ffffff) close(r2) close(r1) [ 1161.964938] binder: BINDER_SET_CONTEXT_MGR already set 11:54:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) getpgid(0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r1 = getpgid(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) 11:54:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000005000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1161.995466] binder: 20256:20267 ioctl 40046207 0 returned -16 11:54:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r4, 0x201, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1ff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xea25}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffffffff0000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x4801) close(r1) 11:54:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x40000, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r2, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) 11:54:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)=0x88) close(r2) close(r1) [ 1162.178220] binder: BINDER_SET_CONTEXT_MGR already set [ 1162.192813] binder_alloc: 20279: binder_alloc_buf, no vma 11:54:12 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="c73526b566a191b88fe5f41831401a61", 0x10) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r3) close(r2) 11:54:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) r2 = syz_open_dev$vcsa(&(0x7f0000008780)='/dev/vcsa#\x00', 0x8, 0x2) setsockopt$llc_int(r2, 0x10c, 0x5, &(0x7f00000087c0)=0xfffffffffffffe00, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r3, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) 11:54:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000120000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1162.236455] binder: 20279:20289 ioctl 40046207 0 returned -16 11:54:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f00001a7000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000b89000/0x3000)=nil) r4 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20000802, &(0x7f0000000040)={0x2, 0x404e23, @remote}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000180)=0x9) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x0) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000280), &(0x7f0000000340)=0x8) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000008c0)=0x7fe, 0x370) r5 = open(&(0x7f0000000000)='./file0\x00', 0x129100, 0x11) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000240)={0x7}, 0x1) r6 = semget(0x2, 0x5, 0x1) semctl$SETVAL(r6, 0x7, 0x10, &(0x7f0000000380)=0x9ae) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000200)=0x8) sendto$inet(r4, &(0x7f00000000c0)="8bc92096b772cb8a10c8a86a08065a52b86dd7125b4635826f3a5ec6e807f41d288e524160163d5426977e91cf152fa40de82a77b791ecdf70e979e764a576c1a64fee7b90528061cd95cd69e04232573f83caf1716d4fcc8b9fcaea923b6fd528e4f35e2e82653e1e24cff18ac339491f", 0x71, 0x4000001, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)="74756e6c3000000000000000e4a100", 0x10) write(r4, &(0x7f0000000ec0)="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", 0x595) sendto$inet(r4, &(0x7f00000003c0), 0xfffffdef, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x12, 0xffffffffffffffff, 0xfffffffffffffffc) r2 = dup2(r0, r0) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20000, 0x0) openat(r3, &(0x7f0000000080)='./file0\x00', 0x400000, 0x100) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r5) close(r4) 11:54:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)=0xa4ffffff00000000) close(r2) close(r1) [ 1162.437774] binder: BINDER_SET_CONTEXT_MGR already set [ 1162.453081] binder: 20308:20313 ioctl 40046207 0 returned -16 11:54:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@ipv4={[], [], @local}}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) write$P9_RCLUNK(r1, &(0x7f0000000080)={0x7, 0x79, 0x1}, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) 11:54:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000007a0000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:12 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = socket$inet6(0xa, 0x4, 0x80000001) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0xbf3, @empty, 0x2}}, 0x53d, 0x1, 0xdc, 0x0, 0x80}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000140)={r3, 0x4, 0x263e, 0xfffffffffffffffc, 0x1, 0x400}, &(0x7f0000000180)=0x14) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa, 0x51}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r4) close(r1) 11:54:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x8010, r1, 0xffffffffffffffff) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x7ff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@flushsa={0x50, 0x1c, 0x800, 0x70bd2d, 0x25dfdbfc, {0xff}, [@user_kmaddress={0x2c, 0x13, {@in6=@mcast2, @in6=@loopback, 0x0, 0xa}}, @output_mark={0x8, 0x1d, 0x400}, @output_mark={0x8, 0x1d, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r3) close(r2) [ 1162.665098] binder: BINDER_SET_CONTEXT_MGR already set 11:54:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)=0xff0f0000) close(r2) close(r1) 11:54:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') ioctl(r0, 0xc2, &(0x7f0000000180)="0c61150a0ce07cc9be4427147d1f63b3000ecbdfc115f61bc5861e08d8f043a08a46b22a64a3abe38159315361ae693c1f409a26965944409210dab15229b455cbdac7673d5440ca781ecd4c59bc040000000000000062ad55faead662b101b1ca9238207521931f000000000000007dc58e42e6a541cb004282f022a879") preadv(r1, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) [ 1162.702862] binder: 20331:20338 ioctl 40046207 0 returned -16 11:54:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000004c000000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:12 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r2) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000180)=0x0) getpgid(0x0) fcntl$getown(r1, 0x9) r4 = getpgid(r3) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000140)=r4) r5 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x10001, 0x2) write$P9_RLOPEN(r5, &(0x7f0000000200)={0x18, 0xd, 0x1, {{0x13, 0x4, 0x3}, 0x7}}, 0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000000c0)={r2}) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000000)=0x3) close(r1) write$FUSE_POLL(r6, &(0x7f0000000100)={0x18, 0x0, 0x1, {0x1}}, 0x18) 11:54:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1fffffffffffffff, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1162.945981] binder_transaction: 23 callbacks suppressed [ 1162.945999] binder: 20357:20363 transaction failed 29201/-28, size 0-26388279066624 line 2973 11:54:12 executing program 5: 11:54:12 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x101, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000140)={0x18, 0x0, {0x3, @dev={[], 0xe}, 'bridge_slave_0\x00'}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000100)={@ipv4={[], [], @loopback}, 0x1000007f, 0x2, 0x0, 0x0, 0x0, 0x7f}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x400, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x76}, 0x8) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') 11:54:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)=0x8800) close(r2) close(r1) [ 1163.000192] binder_alloc_mmap_handler: 7 callbacks suppressed [ 1163.000211] binder_alloc: binder_alloc_mmap_handler: 20357 20001000-20004000 already mapped failed -16 [ 1163.016700] binder: BINDER_SET_CONTEXT_MGR already set [ 1163.022578] binder: 20357:20363 ioctl 40046207 0 returned -16 [ 1163.047204] binder: 20357:20368 transaction failed 29189/-3, size 0-26388279066624 line 2973 11:54:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:13 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) close(r2) close(r1) [ 1163.084731] binder_release_work: 23 callbacks suppressed [ 1163.084738] binder: undelivered TRANSACTION_ERROR: 29201 [ 1163.107693] binder: undelivered TRANSACTION_ERROR: 29189 11:54:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000068000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000180)={0x5, 0x10, 0xfa00, {&(0x7f0000000300), 0xffffffffffffffff, 0x1}}, 0x18) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000240)={r3, 0x52a4e7d6, 0x1f}, &(0x7f0000000280)=0x8) preadv(r2, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) 11:54:13 executing program 5: 11:54:13 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)=0x1100) close(r2) close(r1) 11:54:13 executing program 0: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x0, 0x22100) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x800}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={r3, 0x7}, 0x8) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000080)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x400003, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95)=0x6, 0xfffffffffffffffb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x54, 0x0, &(0x7f00000000c0)=0xfffffffffffffe49) close(r5) close(r1) [ 1163.326913] binder: 20389:20395 transaction failed 29201/-28, size 0-26388279066624 line 2973 11:54:13 executing program 5: [ 1163.373771] binder_alloc: binder_alloc_mmap_handler: 20389 20001000-20004000 already mapped failed -16 11:54:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f00000003c0)='net/anycast6\x00', 0x2) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000400)={0x8, 0xeab, 0x21}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r2, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) rt_sigaction(0x8, &(0x7f00000001c0)={&(0x7f0000000100)="c4a240f35b8443acc421f813475b26640d0600000066430fee98000000006666450f3a417806003666430f73f240c4815dde47eec4a1b5dc2ef6b700000020", {0x7}, 0x8000001, &(0x7f0000000140)="c441356dab83c3b662c4632540a200000000f16726f345e0f9c4e249984e00c462c9bfacfbf5590000dfbf00000000c441b9d943001c000f01800008804143f739"}, &(0x7f0000000300)={&(0x7f0000000200)="66440f1a9c480c00000066440f6a434c0fb522262e430f1bb800000100f33681b5d5a2327e1f28000064f32e2e44dd18c4e1b4c641089af08381000000009bc4c27d3213f00fb34c4bdf", {}, 0x0, &(0x7f0000000280)="3e3e0fa9c4c2d0f3490047da3d0b000000b300410fba2900f3460f5c4ca2006565450f1a2d0e000000f041fe0d0f000000f30f9f0066400f287670"}, 0x8, &(0x7f0000000340)) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) creat(&(0x7f0000000380)='./file0\x00', 0x20) 11:54:13 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1163.460337] binder: BINDER_SET_CONTEXT_MGR already set [ 1163.480451] binder: 20389:20395 ioctl 40046207 0 returned -16 [ 1163.501168] binder: 20389:20410 transaction failed 29189/-3, size 0-26388279066624 line 2973 11:54:13 executing program 5: [ 1163.536504] binder: undelivered TRANSACTION_ERROR: 29201 [ 1163.545918] binder: undelivered TRANSACTION_ERROR: 29189 11:54:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000004c000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:13 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8401, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="060000009d211f0001000800bfaf0b1f"], &(0x7f00000000c0)=0x10) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x41}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x20080, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r3) close(r1) 11:54:13 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)=0x100000000000000) close(r2) close(r1) 11:54:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000540)={0x1, {{0xa, 0x4e24, 0xf19e, @empty, 0xff}}, 0x1, 0x4, [{{0xa, 0x4e22, 0xfffffffffffffff7, @mcast2}}, {{0xa, 0x4e21, 0x40, @remote, 0x755}}, {{0xa, 0x4e22, 0x0, @loopback}}, {{0xa, 0x4e21, 0x5, @mcast2, 0x100}}]}, 0x290) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f0000000100)=""/83, &(0x7f0000000080)=0x53) 11:54:13 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:13 executing program 5: [ 1163.777056] binder: 20428:20432 transaction failed 29201/-28, size 0-26388279066624 line 2973 11:54:13 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x20000004) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x2000, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000140)={0x0, {0xef0, 0x20}}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000180)={0x21, @remote, 0x4e24, 0x0, 'wlc\x00', 0x30, 0x8, 0x6d}, 0x2c) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f00000000c0), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r3) close(r1) [ 1163.821761] binder_alloc: binder_alloc_mmap_handler: 20428 20001000-20004000 already mapped failed -16 [ 1163.860259] binder: BINDER_SET_CONTEXT_MGR already set 11:54:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) r1 = dup3(r0, r0, 0x80000) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000100)=0x2000008, 0xffffffffffffff51) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r2, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) [ 1163.870203] binder_alloc_new_buf_locked: 4 callbacks suppressed [ 1163.870210] binder_alloc: 20428: binder_alloc_buf, no vma [ 1163.907406] binder: undelivered TRANSACTION_ERROR: 29201 [ 1163.915498] binder: 20428:20439 ioctl 40046207 0 returned -16 11:54:13 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)=0xff0f000000000000) close(r2) close(r1) 11:54:13 executing program 5: [ 1163.935763] binder: 20428:20444 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1163.975043] binder: undelivered TRANSACTION_ERROR: 29189 11:54:13 executing program 3: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x21, 0x0, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000080)=0x30) close(r3) close(r2) 11:54:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000002000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:13 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r2) close(r1) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x200}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000000c0)=r3, 0x4) 11:54:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') fstat(r0, &(0x7f0000000100)) preadv(r1, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) 11:54:14 executing program 5: 11:54:14 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)=0x11000000) close(r2) close(r1) 11:54:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) [ 1164.226116] binder: 20470:20477 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1164.264116] binder_alloc: binder_alloc_mmap_handler: 20470 20001000-20004000 already mapped failed -16 11:54:14 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80000, 0x0) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1164.299743] binder: BINDER_SET_CONTEXT_MGR already set [ 1164.319452] binder: 20470:20477 ioctl 40046207 0 returned -16 [ 1164.346399] binder: undelivered TRANSACTION_ERROR: 29201 11:54:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000001c0)={@mcast2, @remote, @mcast1, 0x5, 0x4, 0xd4ed, 0x400, 0x40, 0x3, r3}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r4) close(r2) 11:54:14 executing program 5: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x2, 0x8) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0x7e, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x3c1) sendmsg$nl_route(r4, &(0x7f0000000440)={&(0x7f0000000040), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@mpls_getnetconf={0x34, 0x52, 0xb27, 0x70bd2c, 0x25dfdbfd, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7fffffff}, @NETCONFA_IFINDEX={0x8, 0x1, r5}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000380)={@rand_addr, @dev={0xac, 0x14, 0x14, 0x1e}}, 0xc) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r7, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000000)={0x80000000000000, 0x2000000000000000, 0x1, 0x10000}) bind$bt_sco(r1, &(0x7f0000000240)={0x1f, {0x80000001, 0x6, 0x7ff, 0x101, 0x8, 0x100000000}}, 0x8) getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000540)=""/204, &(0x7f0000000200)=0xcc) 11:54:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000074000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@mcast2, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000140)=""/28, 0x1c}], 0x1, 0x0) [ 1164.539495] binder: 20503:20505 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1164.562655] binder_alloc: binder_alloc_mmap_handler: 20503 20001000-20004000 already mapped failed -16 [ 1164.582823] binder_alloc: 20503: binder_alloc_buf, no vma 11:54:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000070000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1164.588917] binder: BINDER_SET_CONTEXT_MGR already set [ 1164.594767] binder: 20503:20508 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1164.599491] binder: 20503:20505 ioctl 40046207 0 returned -16 [ 1164.608011] binder: undelivered TRANSACTION_ERROR: 29201 [ 1164.615714] binder: undelivered TRANSACTION_ERROR: 29189 11:54:14 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x600000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x9) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, r0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r3) close(r2) 11:54:14 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x4000, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000080)=""/168) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r3) close(r2) 11:54:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) r2 = shmget$private(0x0, 0x2000, 0x802, &(0x7f0000ffc000/0x2000)=nil) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) r5 = getegid() r6 = geteuid() tgkill(r3, r3, 0x2f) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x20000, 0x0) r7 = getgid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)=0x0) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000200)={{0x4, r4, r5, r6, r7, 0x4, 0x5}, 0x9, 0x9, 0x6, 0xb110, r8, r9, 0x8}) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000080)=0x9, 0x1) [ 1164.716768] binder: 20518:20520 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1164.756006] binder_alloc: binder_alloc_mmap_handler: 20518 20001000-20004000 already mapped failed -16 [ 1164.808763] binder: BINDER_SET_CONTEXT_MGR already set [ 1164.825076] binder: 20518:20520 ioctl 40046207 0 returned -16 [ 1164.849168] binder_alloc: 20518: binder_alloc_buf, no vma [ 1164.860823] binder: undelivered TRANSACTION_ERROR: 29201 11:54:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000002000000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$RTC_AIE_OFF(r1, 0x7002) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$NBD_SET_SOCK(r1, 0xab00, r1) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000080)=0xfffffffffffffff7, 0x4) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x3f, 0x40) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000140)=r3) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000280), &(0x7f0000000300)=0x18) preadv(r2, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x400000, 0x40) 11:54:14 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x121000) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000080)=0xd035) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x21, 0x0, &(0x7f0000000040)) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) close(r3) close(r1) 11:54:14 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)={0x0, @aes256, 0x2, "1b34295f94bc6dca"}) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) fallocate(r0, 0x10, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r3) close(r2) [ 1165.007610] binder_alloc: binder_alloc_mmap_handler: 20537 20001000-20004000 already mapped failed -16 [ 1165.017872] binder: BINDER_SET_CONTEXT_MGR already set [ 1165.023514] binder: 20537:20542 ioctl 40046207 0 returned -16 [ 1165.030200] binder_alloc: 20537: binder_alloc_buf, no vma 11:54:15 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r1) close(r0) 11:54:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000100)={0x800100b, 0x7fff, 0x3}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r2, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) 11:54:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000068000000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:15 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x21, 0x0, &(0x7f0000000040)) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40000, 0x0) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000080)={0x1, 0x8, 0x173}) close(r2) close(r1) 11:54:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4ad6a7b3) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r1) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x8000) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000080)=""/49, 0x1000, 0x1000, 0x2}, 0x18) close(0xffffffffffffffff) 11:54:15 executing program 5: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x2, 0x8) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0x7e, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x3c1) sendmsg$nl_route(r4, &(0x7f0000000440)={&(0x7f0000000040), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@mpls_getnetconf={0x34, 0x52, 0xb27, 0x70bd2c, 0x25dfdbfd, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7fffffff}, @NETCONFA_IFINDEX={0x8, 0x1, r5}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000380)={@rand_addr, @dev={0xac, 0x14, 0x14, 0x1e}}, 0xc) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r7, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000000)={0x80000000000000, 0x2000000000000000, 0x1, 0x10000}) bind$bt_sco(r1, &(0x7f0000000240)={0x1f, {0x80000001, 0x6, 0x7ff, 0x101, 0x8, 0x100000000}}, 0x8) getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000540)=""/204, &(0x7f0000000200)=0xcc) 11:54:15 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x80000001}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000100)={r4, 0x83, "885221048ce9240b3bd91c1b95a08dd55f62b40c8551a5e0a11f88d05def4b0b1cd6a4df10b15bb94d7bc270b153fa717bf242d39c56448f89dc097ddedbac66329fabb57d5126917ea99c2c32c70df2eb940abd8051eefc23f616e5d2aca3ec718c402da49e90a5d09f950e3f246ac1f04b26000f718b985f51f1b9d6e7945971f6e4"}, &(0x7f00000001c0)=0x8b) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$alg(r2, &(0x7f00000037c0)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)="3c837994fe644edd7e9aeff8287fc822e09e73e00fdf96f4031604425c229fb6b7ed45a4fa", 0x25}, {&(0x7f0000000280)="bf9dc66399a698eef271ed4ef18b0fdcf08a87622f0beb236121c507299d7ff28e4a100ecd3cc763a24ee87fbfc9077ce81e02bf3e5544d702092abdd55743a5ae0cf2ef62f5934cd24d971a936d60e87e7fe4381ac13da6493fe2a493ba680d687a580ebaff05b2f448446240682f87e970eb04150e162f398c80c89935b492a0777e62eaa1573348a7561b142d5e043a9ec146292268e5b159f37e06f0bb1d6497f8772cf437c0fc520c70d711ad8f41bdf0bde18d757c8ff0e8c5fc51d8251d4aa0d199455601f954701a5ad3ea32e1115434618ae1ae5d9673ad68", 0xdd}, {&(0x7f0000000380)="726c6870a39c990b730325e3d337461ec5015ae96494ac0537c738cbc0efda3ea767c30043d98443decfe4eeb17106de06ea60d941ab070651489ab0d8d87c57560e6e5193405d7b4a777f7537f933e93a2903653f5f8b7f573c4433661e92ff1767658f4f738bdc2296ef09087c68161fc049c0a38faee2e428dca0d0ca68f562a646862069a95bfee742606aad517f003d18b5906325407e5357170e2ba58cf16df83e25199aff5444c859e4b4cb541f75d6", 0xb3}, {&(0x7f0000000440)="27a8d8294875a3e58b4d4f45ba98eb08321a416ba76f4177a20e18d512ebb900908e058cdce87955ef893ca7f08f68970bc7a2216f916228839f330f3534dc57c6a7f0f57866313fa696d5cd83e1758e2e7f3f0266134377dc411d345db497a3ac0b960b6376d58c0e2eb21f7250cea168a05320f8382fb1790fa0add040318b7fc4ca32defd4bb5fb60ce03d1809317f63513687f92672acee097c09c78e8306599ffc40b7eda85d6b2832a222be407816c1dcb1d5412fc1395161ca9c2b1ef2a42ca673ae9a6db5a27b3e524e2673b7ea153d276ce2bdfa75980ea0876910b8d0b7cc4ee6bfde99fe0ca104be5f157c7c78f66d216e1", 0xf7}, {&(0x7f0000000540)="aaf42c36936af19c087e029db127597a61126438d6ab43f9f57043dce204cd09cd337ed55928ae7c5a230f3a29a9840a8870e3cdeabeb284d64aef1c50a9dcd8f928ab069e7ec7445323e909c716ba2317b27220d5338a0e4e46118d939044e0349714ac03dd73dfd932816d03fe9440d816ab89a8ce64a85da27b3b87831b50eca3dd54de431ef8913be5f58908", 0x8e}, {&(0x7f0000000600)="407e6a85878d78183a4d39d135e7dd722237320a75c553cc8716e72e85dd404dff304015813cd89d24a7deb621a39cb3de1386bf910cb9335597dd43ed3bbafdda1dec9b36320812af56ec5badb9601114bf668e6e42cfe9ed", 0x59}, {&(0x7f0000000680)="a836fe67ee3b9cb6ef86d882fc3a256531d3d909cd758a447dd61f04d39a38357315bff510837caa1f471333f8880a19193e793aabd208c8858d2821d21014a74bfa30af14ba9e3f0383ad649c847ae87a288548a026743110ff31d82d61fd48f635ce46f266d120397d1b891b7ccebd936bda98ed938917fddb633897bbb4721fde9326ef30ffb536f8b54b81a1c2e4a60cac16eb016489395c69343a8af490770c58f8dc33", 0xa6}, {&(0x7f0000000740)="0bc11a00cd471d0da80aa78f755ac14b2e7d6e90a17e7977ccbdabf604acc139f50456339a595e0bc6fb75aab4c8e3c18dd2e3019b7d6ac44f56bb262fe128283160d92b8ec68fbdfcdb67cd1a4e781afafc3af0aca1a1570e8763e394527d84a455386880ea7a7489cebe046623cd1b89859c8d7b14ab3be357032cf85a92c6e9f4eb2127ac3548082cdc9ed3356bd462117b6de12ee57441f25f5f8d39434726e0fb98a13cf44fa47a1bb88a4baacd0e007252088263875af295938617ccf9d78e98ab444213f085e0c27228fa3b11d6869a8cb92ef6170dccedfd266a345bf6d1d37c739eb84028", 0xe9}], 0x8, &(0x7f00000008c0)=[@assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0xc8, 0x117, 0x2, 0xb1, "951dfab9ec233cbd33b32356db9e6d500680a4e3d2c4b32e5ee40309955ed831bfbc19b04b8d4b5a7dc37f1d350ebd580055bfa2078a3519ce36d7a09e58f34c9f1120345c964769ea745f3c230086153bfa997b0e254620c29bbf2018ce6654561ce538a0d60593133788297ed7893480aa9b169fc742d870dd4e50ae7058b5d7ceef447ba509f426aa446b31354fd7963517b2b8ec9f7f1c4982ff6b9a70030506f98b6e6b9edc74c0d1593ddc9ed453"}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x28, 0x117, 0x2, 0xf, "ce7ee848e42b4d0c685654413b30a5"}, @iv={0xc0, 0x117, 0x2, 0xac, "786db3376064c00b1ecb95a318dc6232e47ab629af7af145eed2198225097e2297d34835914877c005efefc18318a4e4901ae9b371d8bf8143038dab1117ee5dd5a44594eef936436eeafc236d966115209fd1d33b96f8e675030b42cfb87a61d2c728c9b2caad50a3c74869af92147f339054ed507ef085be583d83ea6450d8998544659f628b1385be95f3b19e25ff54cc9a0dde0d182ddf67f730073ac369063e257770fbe59140f9ec05"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x48, 0x117, 0x2, 0x32, "86d9f0dda3217a50e8258a4fe1e2f208d082033917c3a67b226dd84cd9f53ac596fcac7dacae8003d6954150b2fe7503000b"}], 0x1270, 0x800}, {0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001b40)="60f9192b75b70f5cd10e6f0bdae7f3e82054d2ca6fddfc961f79c5cc16dac6a72ab0b221e4a99672d84ff2cc72abd0d38b29e5384871a0c57fb880d688b022ddeb4ce8efa7dc0dbb025b3bfd4fbd2431311a690b729a05fb51f821943b2a4e258312b5de860c7c4ad1084eaa1e8b2f4fc09d78ae64dd899f2cd756cf8e8bbdd9022be5315446f2117bfe1f1085d9bae0091cb3076aaa3e001f5478d30a4c8eed7a663dba340f38fc5bafffd61b1cc33293b567", 0xb3}, {&(0x7f0000001c00)="13715b4641c5c5b207e360f5ab0d8540a0d0252c1634dde72acba437a489032e06d9453ad6a370ceb572db5b120beb9bc74fb9b9314f3f08df250cde133cb5e48ae14e55d5be12986ed7b0900ad8aaf5ec6b21a7f4089c992c0795b8ab7b9a87b7edc4d13b6d509fa9c272211e23aa49af1e4286b9574580fe85b958c821c702fa48937da2cb3a9f6f66ced83804e267d79d4d44007f22983b3a91eac3c23538aeb15ee739e9b3ad5773d1e9fba3ad4e0e079053ffdfdeacdd9f2ee8a338abdbed52f29741", 0xc5}, {&(0x7f0000001d00)="0a7bf497536c2774aecf3bed603f231ba71e8325e50194dceea7a503a7b8cd102d3106ae90db4123ff7dc0f3", 0x2c}, {&(0x7f0000001d40)="9f4f5ec63a8eff553816a574158fdbf0a32605846dc52a61936706fe01dcfd2f170a3c4bfe00d0c3b102d27a286ea549f54d11939c79afdabc02e11401c88384572f7940e8f80e98345a2410a26a061ff47c9514e64a19734f054ee84f69b683ba8e53dacff2260cc302401c5f1336bcf9ed1f376ca78bad2160a7ca67f3b5bd38c434115303112b7accb3585a495fd368edd6d1924e03e75dffa7", 0x9b}], 0x4, &(0x7f0000001e40)=[@assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x60, 0x880}, {0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001ec0)="cdf314d1a79577c7a4b46a81aae52e81561f16baa4540850e00a88e1424dc6a2e463b46646ff96a4d9cf9bddc8392e87bbc4e8ef45f8936b6c158ddea298f102e100f675f2425f4c6fb90375461e5075e187f19aeac4d3707c18140bd282e8adc3c0ae6720f2e7a3fc1c2907ea3294dd54d06b89ecf00d6731305417b5c27dd19938f37f04d6572d46a4e45a19bc21368cd4d3cf1344a9e07ea22d1dd030b6d30f798523e327104a7b1c1ede87c1619429142f688b9def4885dc7866ad93286d", 0xc0}, {&(0x7f0000002040)="1ee6c49157dcf6aab9b4fba6e1a00a648473ab9f8f245eefadf3ca856c89a98867b28dfab4e4ce04e8723f4efc9cfe3eba3de7e541c25981a3f44e949e712c8fdaac79e054df27b0bf30325851fb3a43b47b690899e6c75eb431c928b43aae6496b92a0d611802d18bdc8be04344af9e53d6adce6edcdeb203b5658773883ae6802a808a7d2e2e4ac58c54f6d83ccbb4a4cd65144847136751844dafa375c1669e788af3bb14b4c4f0f925747fee7e36da729be77ef668449eb6b96d813e93f486310b74324c32c431065c688178520604ad35dd05be22e50759967c15ecfc70731f710be46e7df8653476a5cc63eb69", 0xf0}, {&(0x7f0000002140)="ac7d0fa57db2468ebf627127444773c7e9ee4856a02a69800e50dbd8dce66bf8572ed08bd067bc960fa7a9238fbbb3edec888833f7230818da28d78fc97de448a1e1fffe4253eec0279d665381f84990c2b534e96644a5356bf3b1a8e988c7ccb14dfb6ad4d220d8fcc045b0f87c78af7b5b9df8f3d880e52182fd9a81cc848ffb9faf1be92f8a8351206f677eae8887654f448ae69576ade3ab65c8ba59ccc6b4359367a88f590c14c4cc509c5c3a442db8fdb2951237b2cf05c38b7c0bf280dad4c69d96073ec0c758e3a3e47dda0840c04e92460cd7e44129452683397fc477e047d91167caf7", 0xe8}, {&(0x7f0000002240)="6fc7f9460c814dbfc1982c26a90b5e9dde975b38f2e188fd8389cae81c23688d1252891b308ba99939ad68e4da6b1333dcb13138802e1a1e9d6e55ede751a889cf58e1bcc3259ed2b5e6ea24ddcd9c7c7df3a2005dce6a2ab551c854beeceaa15cb2aca5f4921dfd1eddca154f5550b295bb0c9638d94892ac5013d8cea29e87a2", 0x81}], 0x4, &(0x7f0000002300)=[@iv={0xa8, 0x117, 0x2, 0x8e, "43a62489cdc6b99dcaa9356c28183fa0ba8ca5e7a30651aa2c8602345a7e43e06eb3035c6fd87fee1ead21bb966dc827a9c52edae30b4c54d7f5a367d3ac1a935c4427d9c1b25e0fff0f0517c642de147f5b66c6db5f6609b42722353500e2f3d6982872921f040c0881f7bb2aa8761d9e0096fc725f58ca642ca7aeba0a42a50f929f9dbbc0d09a143614945e5a"}, @op={0x18}, @iv={0x90, 0x117, 0x2, 0x7a, "d54d8020037c0fe52baef63dc27383f05d9c12e6c3ecc42503af8212ddd76422525caaa72762e23cacb37b4de3ce74b15568cafa90d405169ac8e4c1b8bd3f80a0f2ba98edf012130c413de8231b863ef98b50d50b85fc955171a2c37bd02358d4b1c678f7dc2fd48027219e32d6b994e71f7e77648832c7a588"}, @iv={0x28, 0x117, 0x2, 0x14, "0de020dd6e63c15a65e85a14a0c7d4b2afadff7d"}, @op={0x18}], 0x190, 0x80}, {0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f00000024c0)="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", 0x1000}, {&(0x7f00000034c0)="c72a63a20f5f4387b876a4ba65538411753437512743febbdf596e4e22178e4bb2610d6a0e2b757b45252305e3ede51d69b5ce015dc42304f05d1876515cb0d3dfeaab45afb8839b1f61ec07a910a9de768a8f264e032f8ccfea9da5e4f6b91a7e027e0f81ca03b4e5889a2dfe20d3e86738bf35aeebe1b24e7bb5587004a534c861f765f461c613afc8f90412ac17169dabee18703a765b24b118f0d07566622270afe041e4d99b3e0c3ea6ed3613cd1a984a8c981ad0ab630ea05e37848b3e05cba17d469e43c15c590b7523f3c9cc9ebc637d5a", 0xd5}], 0x2, 0x0, 0x0, 0x40001}, {0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000003600)="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", 0xfa}, {&(0x7f0000003700)}], 0x2, &(0x7f0000003780)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40000}], 0x5, 0x20004085) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000003700), &(0x7f0000003900)=0x4) close(r5) close(r1) 11:54:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'security.', 'posix_acl_access]trustedtrusted\x00'}) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1165.634887] binder_alloc: binder_alloc_mmap_handler: 20568 20001000-20004000 already mapped failed -16 [ 1165.665839] binder: BINDER_SET_CONTEXT_MGR already set [ 1165.674173] binder: 20568:20575 ioctl 40046207 0 returned -16 11:54:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x20) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='cgroup\x00') preadv(r2, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) [ 1165.682034] binder_alloc: 20568: binder_alloc_buf, no vma 11:54:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000012000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1165.830559] binder_alloc: binder_alloc_mmap_handler: 20590 20001000-20004000 already mapped failed -16 [ 1165.857595] binder_alloc: 20590: binder_alloc_buf, no vma [ 1165.868975] binder: BINDER_SET_CONTEXT_MGR already set [ 1165.879012] binder: 20590:20593 ioctl 40046207 0 returned -16 11:54:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000007a000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:15 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x80000002, 0x102) accept4$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14, 0x80800) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x8802, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x21, 0x0, &(0x7f0000000040)) write$FUSE_OPEN(r3, &(0x7f00000000c0)={0x20, 0x0, 0x5, {0x0, 0x2}}, 0x20) close(r4) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000180)={0x6, 0x2, 0x2, 0x0, 0x1e}) close(r2) 11:54:15 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000100)='\x00', 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xffffffff80000001) listen(r0, 0x4cd) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@get={0x1, &(0x7f0000000080)=""/97, 0x3f7}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r3) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140), &(0x7f0000000180)=0x4) close(r2) 11:54:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = getpgid(0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400, 0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, {0x2, 0x4e21, @local}, {0x2, 0x4e20, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1ab94e07, 0x200}) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000100)=0x1, 0x4) r3 = syz_open_procfs(r1, &(0x7f00000001c0)='net/fib_triestat\x00') ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x16) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) preadv(r3, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0xffffffffffffff0a}], 0x10000000000003e2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000300)={0x7, 0x8, 0x4, {0xe, @sdr={0x30314142, 0x80}}}) 11:54:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x800, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000180)={0x1, 0x2, r4, 0x0, r5, 0x0, 0x7fff, 0x3}) [ 1166.090018] binder_alloc: binder_alloc_mmap_handler: 20601 20001000-20004000 already mapped failed -16 [ 1166.131990] binder: BINDER_SET_CONTEXT_MGR already set [ 1166.143263] binder: 20601:20604 ioctl 40046207 0 returned -16 [ 1166.162584] binder_alloc: 20601: binder_alloc_buf, no vma 11:54:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000001000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:16 executing program 1: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000240)={0x0, 0x3, @value=0x7}) sendmsg(r0, &(0x7f00000005c0)={&(0x7f0000000700)=@in6={0xa, 0x4e22, 0x7, @remote, 0x10001}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)="bb7f805099f0af0fda5966de70da4902d58fe1f37c5e335cb4346a", 0x1b}, {&(0x7f0000000300)="aa6b4a9c8834fa747ec1eb737dbdb9049c04edad05a37def3aac00deaed412b3ce51c56a1981aed055a35a84f2ed3b7631c2b2c9845a15568a68540c1dad04d8f31b0a278f6d7def191c3ccb62b5046b938968244afa345493fa8246305c1d197f0fd556e844256f4ca82a762fcd432544601b85f8fc600476019a801b6e6e", 0x7f}, {&(0x7f0000000380)="a06ed551927831607af11a0ce3614865479c731351c4cc", 0x17}, {&(0x7f0000000600)="c33455e1ab8870bc590c365fb76b47ae9fef6f25683610c8d2b72831d55108d89065cadc34c3d3035339758cdc283ecd1422cccdcb20bb16375fd1cad1bb9ef90acb252ff7c70c5b2bb26416b0cb", 0x4e}, {&(0x7f00000007c0)="169a9b4f9e30da17568b6a2608155b9e01e8d5b3b499db3c5157a81619feb7b8f96f8aaa1adb36f984348d2492114ee22d8c23c3282cc3f35ed790fc93a45078f32f", 0x42}, {&(0x7f0000000780)="ac97ff2a4391d702d8479452ec6d092a0884f60eaabe74bfc17cc3d8743658798701722c8f31d08870347e1a4f2ee754f8c659083da2ccd80d7515fcb4", 0x3d}], 0x6}, 0x40800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000140)=""/158) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x7f}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r4, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) connect$bt_sco(r4, &(0x7f0000000080)={0x1f, {0x800, 0x8, 0x6, 0x7, 0x1, 0x5}}, 0x8) [ 1166.324709] binder: BINDER_SET_CONTEXT_MGR already set [ 1166.339634] binder_alloc: 20612: binder_alloc_buf, no vma [ 1166.357742] binder: 20612:20619 ioctl 40046207 0 returned -16 11:54:16 executing program 5: sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x4000) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'nodev', 0x20, 0x39}, 0x2c, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000080)="ae", 0x1) 11:54:16 executing program 3: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0x5, 0xfff, 0x1, 0x400, 0x1, 0x7fff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000001c0)={0x9, [0x2, 0x2, 0x4, 0x4, 0x10000, 0x7, 0xf03, 0xfffffffffffffffd, 0x3]}, 0x16) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='security.capability\x00', &(0x7f00000002c0)=@v2={0x2000000, [{0xfffffffffffffffd, 0x10001}, {0x8}]}, 0x14, 0x2) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB='+'], &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={r4, 0xb1}, 0x8) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000300)={0x7f}, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r5) close(0xffffffffffffffff) dup3(r1, r5, 0x80000) 11:54:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000012000000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:16 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x800000000002}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = gettid() sched_getattr(r3, &(0x7f0000000000), 0x30, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @remote}}}, &(0x7f0000000080)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0)={0xfffffffffffffffb, 0x4, 0x100000001, 0x5, r4}, 0x10) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet_smc(0x2b, 0x1, 0x0) close(r3) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r2) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x840) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080), 0x8e, 0x0, &(0x7f00000000c0)="a02b4b9952bee0c7001243a91dc31c80aa6f84f16e1162d79a297609b42e5e5e57dd89276a1f0c3ecaa5a7e09001c7a0f90768c7afa2e9123cb9ff7a70da553ba635d533c017e9d0a9b872fcf7c8682612ab686c9dcc62030c4d54cb0ba098ecf62a857d8a7d31454f3582c1b2e8606b6d7f47fdddff056359343b28bda9f9e3dce6b47be27c42371707d510d135"}) close(r1) 11:54:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x803, 0x0) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000100)) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@newae={0xf0, 0x1e, 0x4, 0x70bd2c, 0x25dfdbfb, {{@in=@remote, 0x4d2, 0x2, 0x3c}, @in6, 0x0, 0x3500}, [@sec_ctx={0x10, 0x8, {0xc, 0x8, 0x1, 0x9, 0x4, "2d3670de"}}, @offload={0xc, 0x1c, {0x0, 0x1}}, @algo_aead={0x6c, 0x12, {{'ccm(seed)\x00'}, 0xf8, 0xc0, "a2a3150f366ca10e9274e4b13cd454caec42a6ccfd852cdc78d9ec23ea0f67"}}, @address_filter={0x28, 0x1a, {@in6=@mcast1, @in=@local, 0x2, 0xffffffffffffffff, 0x9229}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8040}, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r2, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) 11:54:16 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r3) close(r2) 11:54:16 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfff, 0x40000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="02000400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000140)=0x1c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={r1, 0x7f}, &(0x7f00000001c0)=0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000040)={@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0xff62) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, r0, 0x0, 0x20, &(0x7f0000000240)='#posix_acl_access:GPLwlan0em1{^\x00'}, 0x30) r5 = getpgrp(r4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={r2, 0x1}, &(0x7f0000000340)=0x8) r6 = syz_open_procfs(r5, &(0x7f0000000100)='net/netfilter\x00') preadv(r6, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) 11:54:16 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f0000000540), 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 1166.657669] binder: BINDER_SET_CONTEXT_MGR already set [ 1166.669325] binder: 20641:20647 ioctl 40046207 0 returned -16 [ 1166.685439] binder_alloc: 20641: binder_alloc_buf, no vma [ 1166.687622] encrypted_key: insufficient parameters specified 11:54:16 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000006c000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:16 executing program 0: socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r2) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000300)={&(0x7f0000000100)=@newtaction={0x1f0, 0x30, 0x200, 0x70bd28, 0x25dfdbfc, {}, [{0xc4, 0x1, @m_simple={0xc0, 0x1f, {{0xc, 0x1, 'simple\x00'}, {0x94, 0x2, [@TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x101, 0x10000000, 0xfffffffffffff800, 0xfffffffffffffff9}}, @TCA_DEF_DATA={0x10, 0x3, 'wlan0-%\'\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x1, 0x0, 0x8283, 0x5}}, @TCA_DEF_DATA={0x8, 0x3, '\x00'}, @TCA_DEF_DATA={0x8, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffffffffff81, 0x7, 0x3000000e, 0x7, 0x7fffffff}}, @TCA_DEF_DATA={0x8, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x5, 0x8, 0x80, 0x5}}, @TCA_DEF_DATA={0x8, 0x3, "7bf32400"}]}, {0x18, 0x6, "d2f75a7f5ad09127da8a0bc6c9c86b65c3cf"}}}}, {0xa8, 0x1, @m_gact={0xa4, 0x18, {{0xc, 0x1, 'gact\x00'}, {0x40, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1069, 0x10000007}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x8, 0x20000000, 0x4, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x3, 0x1937, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1073, 0x9}}]}, {0x50, 0x6, "97bd11fabeda38134e2dd0009316c756981ab3129a117deea761b736fc9736a6d15e0adbb9b49d2328e9cfcc849e01e37a46b01287607e0c2b0702cb302e36f236d15c07f90a3aecd0fdae"}}}}, {0x70, 0x1, @m_nat={0x6c, 0x20, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{0x800, 0x1, 0x20000006, 0x800, 0x5}, @rand_addr=0x100, @empty, 0xffffffff, 0x1}}}, {0x30, 0x6, "7e15666dc8a7426f5e15972f4085e4e0adbac2718ea21b8725b8deb2ae1a4e44aa1804946e134653d0"}}}}]}, 0x1f0}}, 0x8000) close(r1) 11:54:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) [ 1166.898274] binder: BINDER_SET_CONTEXT_MGR already set [ 1166.903638] binder: 20666:20674 ioctl 40046207 0 returned -16 [ 1166.910525] binder_alloc: 20666: binder_alloc_buf, no vma 11:54:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000048000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:16 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="73797a315019b12c3ead6364c18a5e18d4e936a692647402c12457fdba4fe7670fc351359750eb04ddce82437359332f2b68fb5b0a9f061807b73d9ac036dd2b64abd25621ceb47f30da2a595bb77ab27113bfb1a027ff55982ed63bfb5e8fd62ede452aed06000000000000002930af3e72fe67ed95f896f67ffe4d04a52c89c344ee528c89ff69078b14daca49d7"], 0x8f) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000), 0xfffffc56) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x8, 0x100000001, 0x2, 0x0, 0x4, r3, 0xe}, 0x2c) close(r1) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f0000000200)={0xa, 0x4, 0xfa00, {r5}}, 0xc) 11:54:16 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:54:16 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000000)='syz1\x00') getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x0, 0x0, 0xfffffffffffffffd}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') write$P9_RRENAMEAT(r1, &(0x7f0000000080)={0x7, 0x4b, 0x2}, 0x7) preadv(r1, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) [ 1167.102329] binder: BINDER_SET_CONTEXT_MGR already set [ 1167.132108] binder: 20693:20699 ioctl 40046207 0 returned -16 11:54:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000740000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x22) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x660}, &(0x7f00000000c0)=0x8) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000180)={0x7b, 0x0, [0x200, 0x400, 0x9, 0x8000]}) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYBLOB="0100010009fc08e6a1b7a6ef29172ba72100"], 0xa) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r4) 11:54:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x12}}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') getresuid(&(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000140)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@multicast2, 0x4e24, 0x0, 0x4e22, 0x20000000000, 0xa, 0xcdd39acb60d86156, 0x20, 0xb7, 0x0, r2}, {0x4, 0x3, 0x861, 0x69, 0x4, 0x1635, 0x1, 0x7fff}, {0x8, 0xad0, 0x800, 0xfffffffffffffffd}, 0xa269, 0x6e6bb7, 0x2, 0x0, 0x2, 0x3}, {{@in6=@local, 0x4d6, 0x2b}, 0x0, @in=@multicast2, 0x3502, 0x3, 0x1, 0x6, 0x6, 0x2ba, 0xffff}}, 0xe8) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x401) preadv(r1, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000280)={0x2, "a9c4"}, 0x3) 11:54:17 executing program 2: socketpair$unix(0x1, 0x800000002, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000080)={0x7fffffff, 0x355540c7, 0x80000000}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0xb92f, 0x0, 0x7fff, 0x2}) 11:54:17 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000006c0000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@empty, 0x14464b4d, 0x1, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000100)=0x101) 11:54:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000060000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r2) mkdir(0x0, 0x0) clone(0x8889cd00, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) syz_open_dev$midi(0x0, 0x0, 0x200000) syz_open_dev$usbmon(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='vmnet1security@systemem1:\x00'}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f00000004c0)={0x7ff, 0x9}) fsetxattr$security_selinux(r2, &(0x7f0000000180)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:policy_src_t:s0\x00', 0x22, 0x2) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000480)=0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ppoll(&(0x7f00000001c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) [ 1167.465547] binder: BINDER_SET_CONTEXT_MGR already set [ 1167.471461] binder: 20736:20743 ioctl 40046207 0 returned -16 [ 1167.626207] binder: BINDER_SET_CONTEXT_MGR already set [ 1167.631950] binder: 20753:20755 ioctl 40046207 0 returned -16 11:54:17 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:54:17 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000000)={0x67, 0xef37, 0x1, 0x9, 0x20000, 0x5, 0x1, 0x9f2, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000000c0)={r3, 0x1f4}, 0x8) inotify_init() close(r1) 11:54:17 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101402, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000080)=[@in={0x2, 0x4e22, @rand_addr=0x10000}, @in6={0xa, 0x4e20, 0xffff, @empty, 0xdb1}, @in={0x2, 0x4e20, @empty}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r1, 0x2}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_netfilter(r0, &(0x7f0000001580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x11c4, 0x4, 0xf, 0x328, 0x70bd2c, 0x25dfdbfd, {0x1, 0x0, 0x7}, [@nested={0x1018, 0x67, [@typed={0x14, 0x51, @ipv6=@remote}, @generic="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"]}, @nested={0x110, 0x16, [@generic="65e2ddfb51856ca11d8ab2be2b7f7666d0bf10c0d44027fda199b215011cc741e71c74aeaa35c3db1f69f8039a91c293b6b2709f524fdfc7e60d86b3d431b117306112992983441aa6d0ded55f46b3f208491aea16f9deebb87a698438a05a3c57a60aa2bb0834ddcb87daf33b1c1702bf11192901e9bc444af214d4d7982bb8cf610200d716050b3e52837d59666c07ff1279444dab50400da84aab8e82b7143e60e2e3ac82055aa3391c0b0224f6aa2789370f4760b3dfb67bfaef156e0d38c6f6425a14187e9c7572714d70541d0e336ffbd6f09e0cd3c122c099aff17ef702a748607875ef1f63d5d3a3", @typed={0x8, 0x3, @fd=r3}, @typed={0x14, 0x77, @str='/dev/sequencer\x00'}, @generic="15"]}, @generic="7ec7d4be50abd6abf3600a6e7731ff2bd687be21de2465d70b33d5146859605c5805524de3e94b0ed5c860cc55050f094e63e9d97eef6b9bda71e7348253869fbde5d1514a31f5672a0366141528a15c43ed70b40f7e053f2d1e2edc0ef731dffa2c12166c095d6b7a9342de552f4583ea1b9fc74a364f7d72d82c53ac", @typed={0x8, 0x84, @uid=r4}]}, 0x11c4}, 0x1, 0x0, 0x0, 0x20000800}, 0x24000000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r5) close(r3) 11:54:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000007a000000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1168.021696] binder_transaction: 23 callbacks suppressed [ 1168.021713] binder: 20766:20769 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1168.038511] binder_alloc_mmap_handler: 7 callbacks suppressed [ 1168.038530] binder_alloc: binder_alloc_mmap_handler: 20766 20001000-20004000 already mapped failed -16 [ 1168.054764] binder: BINDER_SET_CONTEXT_MGR already set [ 1168.062826] binder: 20766:20769 ioctl 40046207 0 returned -16 11:54:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x20000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) r5 = geteuid() r6 = getegid() lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x4}, [{0x2, 0x2, r4}, {0x2, 0x3, r5}], {}, [{0x8, 0x3, r6}, {0x8, 0x2, r7}, {0x8, 0x4, r8}], {0x10, 0x2}, {0x20, 0x2}}, 0x4c, 0x1) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r2) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000180)=0x22000, 0x4) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='\x00', 0x1, 0x3) close(r1) 11:54:17 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) 11:54:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000003000000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1168.064455] binder: 20766:20772 transaction failed 29189/-3, size 0-26388279066624 line 2973 11:54:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bridge_slave_0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='&']}) 11:54:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000080)={'bond_slave_0\x00', 0x1}) close(r2) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) close(r1) 11:54:18 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x80800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x9, 0x0, &(0x7f0000000040)=0xffffffffffffff34) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x450200) connect$nfc_llcp(r4, &(0x7f0000000100)={0x27, 0x1, 0x1, 0x6, 0x6, 0x6, "8fce087f6790d72525ff50307ab1b1d8a3e984d011eb52a4bc21ea165494035109628e9973da2ac978ecd1d6dcbacc94f7bb0795b8c26709b76d19b9908282", 0xf1d}, 0x60) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000080)=0x509144a9, &(0x7f00000000c0)=0x1) close(r3) close(r2) [ 1168.180962] binder: 20782:20787 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1168.202583] binder_alloc: binder_alloc_mmap_handler: 20782 20001000-20004000 already mapped failed -16 [ 1168.215472] binder: BINDER_SET_CONTEXT_MGR already set [ 1168.241307] binder: 20782:20787 ioctl 40046207 0 returned -16 [ 1168.288308] binder_release_work: 25 callbacks suppressed [ 1168.288315] binder: undelivered TRANSACTION_ERROR: 29201 [ 1168.300812] binder: 20782:20788 transaction failed 29189/-3, size 0-26388279066624 line 2973 11:54:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000004000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:18 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) syz_execute_func(&(0x7f0000000180)="c4c2f9901c1466440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2c43e2f4d101042019dccd3196f") [ 1168.332136] binder: undelivered TRANSACTION_ERROR: 29189 [ 1168.497003] binder: 20808:20814 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1168.532229] binder_alloc: binder_alloc_mmap_handler: 20808 20001000-20004000 already mapped failed -16 [ 1168.542303] binder: BINDER_SET_CONTEXT_MGR already set [ 1168.549427] binder: 20808:20814 ioctl 40046207 0 returned -16 [ 1168.555649] binder: 20808:20818 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1168.565283] binder: undelivered TRANSACTION_ERROR: 29201 [ 1168.572192] binder: undelivered TRANSACTION_ERROR: 29189 11:54:18 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:54:18 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x40) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r3) close(r2) 11:54:18 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x2000000000000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa, 0x40}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x8000}}, 0x18) close(r1) 11:54:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000080)={0x1, 0x1, [0x6, 0xa9, 0x3, 0x40, 0x2, 0xfffffffffffffc01, 0x4, 0x1000]}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:18 executing program 1: bind$alg(0xffffffffffffffff, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0x3, 0x4, 0x4, 0x163, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x2c) 11:54:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000003f000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:18 executing program 1: truncate(0x0, 0x0) truncate(0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x0, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) dup3(r1, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) readv(r0, 0x0, 0x0) [ 1168.927392] binder: 20825:20832 transaction failed 29201/-28, size 0-26388279066624 line 2973 11:54:18 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x65, 0x101000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000080)={0x3}, 0x4) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000180)={0xa, &(0x7f0000000100)=[{}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r5, 0x1}) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r3) close(r1) [ 1168.968149] binder_alloc: binder_alloc_mmap_handler: 20825 20001000-20004000 already mapped failed -16 [ 1168.988863] binder: BINDER_SET_CONTEXT_MGR already set [ 1168.995257] binder: 20825:20832 ioctl 40046207 0 returned -16 [ 1169.010242] binder_alloc_new_buf_locked: 7 callbacks suppressed [ 1169.010250] binder_alloc: 20825: binder_alloc_buf, no vma [ 1169.021352] binder: 20825:20837 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1169.037121] binder: undelivered TRANSACTION_ERROR: 29201 11:54:18 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x208200, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0x0, &(0x7f0000000080)="c2e6381583f5b4614ad4822d13757312bb76de227514399e240c831a8d16d40fe4da87ca14c967b44cc3729a6c9d02a9625dfb875e20c26ca5324df2f133e60fb258d6ae03a42b8854a1088b20f28e69e92ee13d32b425fee8da42f132add8c27978857659fe64a26e990ac74a7cc98eb4782784c3cb68f245043287820101532914d841eac5863e327ba525ec3369b451a53e", 0x93) close(r2) close(r1) 11:54:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:19 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) [ 1169.077976] binder: undelivered TRANSACTION_ERROR: 29189 11:54:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000480000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1169.271347] binder: 20862:20866 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1169.281680] binder_alloc: binder_alloc_mmap_handler: 20862 20001000-20004000 already mapped failed -16 [ 1169.291714] binder: BINDER_SET_CONTEXT_MGR already set [ 1169.297890] binder: 20862:20866 ioctl 40046207 0 returned -16 [ 1169.298710] binder_alloc: 20862: binder_alloc_buf, no vma [ 1169.310623] binder: 20862:20868 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1169.321742] binder: undelivered TRANSACTION_ERROR: 29189 [ 1169.328208] binder: undelivered TRANSACTION_ERROR: 29201 11:54:19 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:54:19 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x10000, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x490f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r5}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ff}]}, 0x68}}, 0x4000) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000030000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:19 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x400005, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:19 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001600)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1e, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 11:54:19 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = geteuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000280)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="02000000010002000000000002000100", @ANYRES32=r1, @ANYBLOB="02000500", @ANYRES32=r2, @ANYBLOB="04004000", @ANYRES32=r3, @ANYBLOB="08000400", @ANYRES32=r4, @ANYBLOB="10000500000000002000040000000000"], 0x44, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$RNDGETENTCNT(r6, 0x80045200, &(0x7f0000000080)) syz_open_dev$vbi(&(0x7f0000000480)='/dev/vbi#\x00', 0x2, 0x2) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$DRM_IOCTL_CONTROL(r6, 0x40086414, &(0x7f00000000c0)={0x3, 0x80000001}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r7) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r8, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x2, @bearer=@l2={'eth', 0x3a, 'gretap0\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) close(r5) [ 1169.865820] binder_alloc: binder_alloc_mmap_handler: 20884 20001000-20004000 already mapped failed -16 11:54:19 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(0xffffffffffffffff) close(r1) 11:54:19 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000140)={0x34, 0x0, &(0x7f0000000100)}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r3) close(r2) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x10000}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000000c0)={r4}, 0x8) 11:54:19 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3f, 0x400000) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000200)={0x3, 0x3f, 0x3, 0x0, 0x1, 0x4, 0x5, 0x9, 0x3, 0x7fff}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x20, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80c1) close(r2) close(r1) [ 1169.911308] binder: BINDER_SET_CONTEXT_MGR already set [ 1169.929283] binder: 20884:20889 ioctl 40046207 0 returned -16 [ 1169.935292] binder_alloc: 20884: binder_alloc_buf, no vma [ 1169.984250] binder: undelivered TRANSACTION_ERROR: 29201 [ 1169.991855] binder: undelivered TRANSACTION_ERROR: 29189 11:54:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000048000000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:19 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x9, 0x0, &(0x7f0000000300)) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x80, 0x0) ioctl$KVM_S390_UCAS_MAP(r4, 0x4018ae50, &(0x7f00000002c0)={0x8, 0x1f, 0x100000001}) close(r3) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f0000000400)={0x770, 0x6, 0x7}) fsetxattr$security_selinux(r0, &(0x7f0000000440)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:su_exec_t:s0\x00', 0x1f, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x0, @loopback, 0x1}}, 0x716d, 0x4}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e22, 0x53, @loopback}}}, 0x84) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e24, 0x40000000000000, @remote, 0x4}}}, 0x84) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x80045300, &(0x7f0000000500)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000004c0)=[@mss={0x2, 0x80000001}, @window={0x3, 0x3, 0x4}], 0x2) close(r2) [ 1170.193919] binder_alloc: binder_alloc_mmap_handler: 20918 20001000-20004000 already mapped failed -16 [ 1170.216108] binder: BINDER_SET_CONTEXT_MGR already set 11:54:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_tcp_int(r0, 0x6, 0x3f, &(0x7f0000000000)=0x3, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1170.222355] audit: type=1400 audit(1544874860.092:2444): avc: denied { relabelto } for pid=20913 comm="syz-executor2" name="UNIX" dev="sockfs" ino=180783 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:su_exec_t:s0 tclass=unix_dgram_socket permissive=1 [ 1170.233526] binder_alloc: 20918: binder_alloc_buf, no vma [ 1170.302503] binder: 20918:20923 ioctl 40046207 0 returned -16 11:54:20 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x2, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400204) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r3 = memfd_create(&(0x7f0000000200)='cpuset\x00', 0x4) r4 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x6, 0x1) renameat(r3, &(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000100)='./file0\x00') ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) write$selinux_access(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="73797374656d5f756a6563745f723a6c6f73745f666f756e645f743a73309d98e9a591d3279f491d96f3361826b6e68a1d966e049a3322d4884782a0c4bc49da0300000020756e616f6e66696e65642030303030303030303030e530303030303030303035"], 0x65) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) accept(r2, &(0x7f0000000280)=@generic, &(0x7f0000000300)=0x80) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r5) close(r1) 11:54:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) close(r0) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) getdents64(r1, 0x0, 0x0) socketpair$unix(0x1, 0x400000002, 0x0, &(0x7f0000000380)) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x8fa1867fbd06237b) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffaf) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) getpeername$unix(r0, 0x0, &(0x7f00000003c0)) 11:54:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000007000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r3) close(r1) 11:54:20 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) [ 1170.764000] binder_alloc: binder_alloc_mmap_handler: 20941 20001000-20004000 already mapped failed -16 [ 1170.780904] binder: BINDER_SET_CONTEXT_MGR already set 11:54:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2000000000400205) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000a000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xae, 0x2) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000080)={0x7, "8b3141245c181f731375b9b3adf7be06051a6eba9c8d635ea88ae67c26081ed7", 0x3, 0x12c, 0x9, 0x80, 0x10, 0x0, 0x8, 0x1}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x1, "630a9c02f83245297ed7f1293fd5db5cc3657eb62e68c7519280dbabf9d5d709d0bd912680be2ee3dacd6258156b0eea70bed1c727a5cc2dbd5a2fe06ba7dc21", "dd693012fe6e127f5996a5f00bbeb6118e750ec41f41d3fd0d755227c8bbf724", [0xffffffff, 0xcee]}) close(r2) close(r1) [ 1170.808650] binder: 20941:20944 ioctl 40046207 0 returned -16 [ 1170.818638] binder_alloc: 20941: binder_alloc_buf, no vma 11:54:20 executing program 1: 11:54:20 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000140)={r0}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000180)={0x3, [0x118f, 0x3ff, 0x2]}, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r4) close(r3) 11:54:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000080)) close(r2) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f00000000c0)={0x0, @reserved}) close(r1) 11:54:20 executing program 1: [ 1171.012194] binder_alloc: binder_alloc_mmap_handler: 20963 20001000-20004000 already mapped failed -16 [ 1171.040262] binder: BINDER_SET_CONTEXT_MGR already set [ 1171.050227] binder: 20963:20968 ioctl 40046207 0 returned -16 [ 1171.058424] binder_alloc: 20963: binder_alloc_buf, no vma 11:54:21 executing program 1: 11:54:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000003000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:21 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x10000, 0x88080) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x4, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0)={0x7, 0x0, 0x2, 0x6}, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x80000012, r2, 0x40100000000) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x21, 0x0, &(0x7f0000000100)) close(r4) close(r3) 11:54:21 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) 11:54:21 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) finit_module(r1, &(0x7f0000000000)='ppp0\x00', 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000300)={0x3, {0x6, 0x7fffffff, 0x6, 0x101}, {0x100, 0x8001, 0xffffffffffffffa4, 0x1ff}, {0x100}}) close(r2) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2, 0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8a9ee0b097dd5ab6}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x814}, 0x800) close(r1) [ 1171.695198] binder_alloc: binder_alloc_mmap_handler: 20990 20001000-20004000 already mapped failed -16 11:54:21 executing program 1: 11:54:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000050000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1171.720593] audit: type=1400 audit(1544874861.593:2445): avc: denied { map } for pid=20992 comm="syz-executor3" path="socket:[182161]" dev="sockfs" ino=182161 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=socket permissive=1 [ 1171.746137] binder_alloc: 20990: binder_alloc_buf, no vma [ 1171.759423] binder: BINDER_SET_CONTEXT_MGR already set [ 1171.767524] binder: 20990:20995 ioctl 40046207 0 returned -16 11:54:21 executing program 1: 11:54:21 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x6, 0x32, r0, 0x4) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x24000, 0x0) openat$cgroup_ro(r4, &(0x7f0000000200)='cpu.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYBLOB="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"], &(0x7f0000000140)=0x1008) r6 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x2, 0x60) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={r3, r6, 0xac93d0110bd77550, 0x2}, 0x10) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r3) setsockopt$inet_tcp_TLS_RX(r6, 0x6, 0x2, &(0x7f0000000180), 0x4) close(r2) 11:54:21 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x543400, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000080)=0x7fffffff) close(r2) close(r1) 11:54:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20000, 0x0) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x100000000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r3) close(r1) 11:54:21 executing program 1: [ 1171.972423] binder: BINDER_SET_CONTEXT_MGR already set [ 1172.004490] binder: 21015:21021 ioctl 40046207 0 returned -16 [ 1172.010748] binder_alloc: 21015: binder_alloc_buf, no vma 11:54:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000680000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:21 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080)={0xfe6, 0x5, 0x7, 0xd3}, 0x10) close(r2) close(r1) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000000c0)={0x2, 0x0, 0x10001, 0x1}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000100)={0x4, r4, 0x10001, 0x7}) [ 1172.198346] binder: BINDER_SET_CONTEXT_MGR already set [ 1172.204077] binder_alloc: 21038: binder_alloc_buf, no vma [ 1172.211351] binder: 21038:21041 ioctl 40046207 0 returned -16 11:54:22 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) 11:54:22 executing program 1: 11:54:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x200081, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r3) close(r1) 11:54:22 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) prctl$PR_GET_SECUREBITS(0x1b) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000080)={[0x105005, 0x100000, 0x102000], 0x0, 0xf0, 0x7}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') close(r1) 11:54:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000005000000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:22 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) write$UHID_CREATE(r0, &(0x7f0000000140)={0x0, 'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000080)=""/26, 0x1a, 0x5, 0x4, 0x5, 0x4, 0x9444}, 0x120) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r3) close(r2) 11:54:22 executing program 1: 11:54:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000074000000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1172.640928] binder: BINDER_SET_CONTEXT_MGR already set [ 1172.658918] binder_alloc: 21054: binder_alloc_buf, no vma [ 1172.666143] binder: 21054:21057 ioctl 40046207 0 returned -16 11:54:22 executing program 1: 11:54:22 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/81, 0x51}, {&(0x7f00000001c0)=""/111, 0x6f}], 0x3) close(r2) close(r1) 11:54:22 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000000)={0xb, {0x100, 0x2, 0x7ff, 0x100}}) close(r2) close(r1) 11:54:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4040000000400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1172.837345] binder: BINDER_SET_CONTEXT_MGR already set [ 1172.885058] binder: 21072:21075 ioctl 40046207 0 returned -16 11:54:23 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) tkill(r2, 0x1000000000013) 11:54:23 executing program 1: 11:54:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000004000000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:23 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r2) close(r1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RWALK(r3, &(0x7f0000000080)={0x4a, 0x6f, 0x2, {0x5, [{0x82, 0x0, 0x7}, {0x9, 0x4}, {0xc, 0x4}, {0x0, 0x3, 0x5}, {0xe1, 0x2}]}}, 0x4a) 11:54:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) setitimer(0x3, &(0x7f00000000c0)={{0x0, 0x7530}}, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r3) close(r2) 11:54:23 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0x7}}, 0x1, 0x0, 0x1, 0x3, 0x3}, &(0x7f0000000200)=0x98) sendmsg$inet_sctp(r2, &(0x7f00000003c0)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x1, @remote, 0x9e58}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)="9b16d9daacc1b66067e93afb4327a72e78e2da5caf81eec1200eebd1312eea71803f176fe854985da828da79558cdd302703c8f22bfe3d13115e0163824a32435aa94e8ae30f18db86a9a668f94984495ecde4bf68d656dfe833b138e6cc06df76aca6d826741b6c95630754332ea4e9763184eae99de3016c12226d9db49d9b71baeb48d8f14108e416ef31cafef21aaeb9f43a9036e80f5d715bfc17f47fdd1e5cdd0c4709813e5694550b6d77d9664857ecf3aaf503ef12a08a1cf6256c5aeb1ae891e22deac6f7ae6a629b", 0xcd}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000840000000700000f7f0000010000000018000000000095210000000005000000300000000000000020000000000000008400000002000000080001000700000007000000528ac19ad84b867209cebc5274ee0ac80ed18ffcea87461812974c1a7a65a96b851265758a917d893c4ababbd167b4210d928b3828f3f2efe9e2ff6ceef19d5051da0f19efd2efffc27b8c737de314692445476b7bbb5db7a1c2f4c563d0bf7e042733fc984362ec2a779c", @ANYRES32=r3, @ANYBLOB="1800000000000000840000000700000000000005000000001800000000000000840000000000000008000e0907000000"], 0x80, 0x20000000}, 0x20000090) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x9, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000340)={r3, 0x10001}, &(0x7f0000000380)=0x8) close(r4) close(r1) 11:54:23 executing program 1: [ 1173.553550] binder_transaction: 18 callbacks suppressed [ 1173.553567] binder: 21105:21109 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1173.577002] binder_alloc_mmap_handler: 4 callbacks suppressed [ 1173.577035] binder_alloc: binder_alloc_mmap_handler: 21105 20001000-20004000 already mapped failed -16 [ 1173.593030] binder: BINDER_SET_CONTEXT_MGR already set [ 1173.599797] binder: 21105:21109 ioctl 40046207 0 returned -16 [ 1173.606179] binder: 21105:21113 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1173.623009] binder_release_work: 16 callbacks suppressed [ 1173.623016] binder: undelivered TRANSACTION_ERROR: 29201 11:54:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000006c000000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1173.649550] binder: undelivered TRANSACTION_ERROR: 29189 11:54:23 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x2000000000000001}) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000200)={0x3, 0x0, 0xffffffffffffffff, 0xfffffdfd}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendfile(r0, r2, &(0x7f0000000080), 0x8000) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r4) close(r2) 11:54:23 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000000c0)={0x3, 0x70, 0x100000000, 0x101, 0x3fff80000, 0x0, 0x0, 0x0, 0x80004, 0x2, 0x20, 0x3, 0xdb31, 0x81, 0x3, 0x1, 0x0, 0x7ff, 0x8, 0x4, 0x7, 0x7fff, 0x240, 0x1a3f9260, 0x3f, 0x9, 0x3bc, 0xfffffffffffffffa, 0x6, 0x0, 0x0, 0x1, 0xffffffff, 0x6, 0xad4, 0x8, 0x80, 0xff, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x4000, 0x200, 0x80, 0x9, 0x6, 0x3, 0x2}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000140)=0x3, 0x4) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f000000f000/0x3000)=nil, 0x3000}}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000400), 0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r5) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x68, r6, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x7, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x11) close(r2) 11:54:23 executing program 1: [ 1173.777208] binder: 21124:21129 transaction failed 29201/-28, size 0-26388279066624 line 2973 11:54:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1173.831756] binder_alloc: binder_alloc_mmap_handler: 21124 20001000-20004000 already mapped failed -16 [ 1173.844997] binder: BINDER_SET_CONTEXT_MGR already set [ 1173.851530] binder: 21124:21129 ioctl 40046207 0 returned -16 [ 1173.859540] binder: 21124:21137 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1173.871219] binder: undelivered TRANSACTION_ERROR: 29201 [ 1173.891630] binder: undelivered TRANSACTION_ERROR: 29189 11:54:26 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) tkill(r2, 0x1000000000013) 11:54:26 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000003c0)=0x0) r5 = gettid() kcmp(r4, r5, 0x0, r2, r0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0xd8, r6, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x78e0f6e94478af2b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x783b5cea}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x26b}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x200}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xaf}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1a}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) accept4$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @reserved}, 0x10, 0x80800) 11:54:26 executing program 1: 11:54:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000003f0000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:26 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40040, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:26 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000000)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xd) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl(r1, 0x9, &(0x7f0000000280)="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") r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r3) close(r2) 11:54:26 executing program 1: [ 1176.614885] binder: 21153:21156 transaction failed 29201/-28, size 0-26388279066624 line 2973 11:54:26 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400202) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1176.659104] binder_alloc: binder_alloc_mmap_handler: 21153 20001000-20004000 already mapped failed -16 [ 1176.677533] binder: BINDER_SET_CONTEXT_MGR already set [ 1176.685382] binder_alloc_new_buf_locked: 3 callbacks suppressed [ 1176.685389] binder_alloc: 21153: binder_alloc_buf, no vma [ 1176.702265] binder: 21153:21156 ioctl 40046207 0 returned -16 11:54:26 executing program 1: 11:54:26 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) recvfrom(r2, &(0x7f0000000080)=""/91, 0x5b, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x3000)=nil, 0x3000}, 0x3}) [ 1176.709208] binder: 21153:21164 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1176.733970] binder: undelivered TRANSACTION_ERROR: 29201 [ 1176.744993] binder: undelivered TRANSACTION_ERROR: 29189 11:54:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000007000000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r2) mkdir(0x0, 0x0) clone(0x8889cd00, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) syz_open_dev$midi(0x0, 0x0, 0x200000) syz_open_dev$usbmon(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='vmnet1security@systemem1:\x00'}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f00000004c0)={0x7ff, 0x9}) fsetxattr$security_selinux(r2, &(0x7f0000000180)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:policy_src_t:s0\x00', 0x22, 0x2) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000480)=0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ppoll(&(0x7f00000001c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) [ 1176.886176] binder: 21185:21187 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1176.914623] binder_alloc: binder_alloc_mmap_handler: 21185 20001000-20004000 already mapped failed -16 [ 1176.926169] binder: BINDER_SET_CONTEXT_MGR already set [ 1176.933874] binder: 21185:21187 ioctl 40046207 0 returned -16 [ 1176.939257] binder_alloc: 21185: binder_alloc_buf, no vma [ 1176.946466] binder: 21185:21191 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1176.970712] binder: undelivered TRANSACTION_ERROR: 29201 [ 1176.977668] binder: undelivered TRANSACTION_ERROR: 29189 11:54:29 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) tkill(r2, 0x1000000000013) 11:54:29 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setxattr$trusted_overlay_redirect(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000300)=@req3={0x9, 0x3, 0x100000001, 0x1000, 0x9, 0x1, 0x668}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r2) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) close(r1) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f00000002c0)={0x7ff, 0x2, 0x2, 0x348c, 0x7ff}) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000080)) 11:54:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x88000, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r4) readahead(r0, 0x2, 0x7) close(r3) 11:54:29 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10) close(r2) close(r1) 11:54:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000a000000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x12}}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') getresuid(&(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000140)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@multicast2, 0x4e24, 0x0, 0x4e22, 0x20000000000, 0xa, 0xcdd39acb60d86156, 0x20, 0xb7, 0x0, r2}, {0x4, 0x3, 0x861, 0x69, 0x4, 0x1635, 0x1, 0x7fff}, {0x8, 0xad0, 0x800, 0xfffffffffffffffd}, 0xa269, 0x6e6bb7, 0x2, 0x0, 0x2, 0x3}, {{@in6=@local, 0x4d6, 0x2b}, 0x0, @in=@multicast2, 0x3502, 0x3, 0x1, 0x6, 0x6, 0x2ba, 0xffff}}, 0xe8) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x401) preadv(r1, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000280)={0x2, "a9c4"}, 0x3) 11:54:29 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000100)='\x00', 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xffffffff80000001) listen(r0, 0x4cd) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@get={0x1, &(0x7f0000000080)=""/97, 0x3f7}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r3) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140), &(0x7f0000000180)=0x4) close(r2) [ 1179.700803] binder: 21202:21211 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1179.711430] binder_alloc: binder_alloc_mmap_handler: 21202 20001000-20004000 already mapped failed -16 [ 1179.721373] binder: BINDER_SET_CONTEXT_MGR already set [ 1179.726836] binder: 21202:21211 ioctl 40046207 0 returned -16 [ 1179.731469] binder_alloc: 21202: binder_alloc_buf, no vma [ 1179.740070] binder: 21202:21213 transaction failed 29189/-3, size 0-26388279066624 line 2973 11:54:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7f, 0x400000) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xff, 0x400) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x8000) mmap(&(0x7f0000013000/0x4000)=nil, 0x4000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000000c0)={0x8, 0x0, 0xb5c, 'queue1\x00', 0x6}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) fcntl$getflags(r4, 0x408) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000040)=0x81) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x21, 0x0, &(0x7f0000000180)=0x353) close(r5) close(r4) dup(r0) [ 1179.749634] binder: undelivered TRANSACTION_ERROR: 29201 [ 1179.757969] binder: undelivered TRANSACTION_ERROR: 29189 11:54:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000006000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:29 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000015000/0x1000)=nil, 0x1000, 0x4, 0x32, r0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r3) close(r2) 11:54:29 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:29 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000080)=""/73) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1179.906356] binder: 21235:21236 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1179.919178] binder_alloc: binder_alloc_mmap_handler: 21235 20001000-20004000 already mapped failed -16 [ 1179.931906] binder: BINDER_SET_CONTEXT_MGR already set [ 1179.942324] binder: 21235:21240 ioctl 40046207 0 returned -16 [ 1179.950390] binder_alloc: 21235: binder_alloc_buf, no vma [ 1179.956881] binder: 21235:21242 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1179.998655] binder: undelivered TRANSACTION_ERROR: 29201 [ 1180.007521] binder: undelivered TRANSACTION_ERROR: 29189 11:54:32 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:54:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x498f62952fecad01) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0xc400, 0x0) execveat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000140)='net/anycast6\x00', &(0x7f0000000180)="5e656d31ad6c6f00"], &(0x7f00000003c0)=[&(0x7f0000000200)='\x00', &(0x7f0000000240)='net/anycast6\x00', &(0x7f0000000280)='net/anycast6\x00', &(0x7f0000000300)='net/anycast6\x00', &(0x7f0000000340)='net/anycast6\x00', &(0x7f0000000380)=']wlan1^\x00'], 0x800) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r2, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/28, 0x1c}], 0x1, 0x0) 11:54:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x101001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000001c0)={r1}) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x6, "bb8801cf5d12"}, &(0x7f0000000080)=0x2a) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x40000000003, 0x84) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000100)=0x0) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000140)=r6) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r4) close(r3) 11:54:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000004c0000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:32 executing program 0: r0 = eventfd(0x7f) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x100, 0x0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000100)={0xe91, 0x2, 0x101, 0x7fffffff, 0x8, 0xbd}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000080)) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x54, 0x0, &(0x7f0000000040)) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000140)) close(r5) close(r4) 11:54:32 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2000000000400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1182.717652] QAT: Invalid ioctl [ 1182.735673] binder: 21265:21267 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1182.748621] QAT: Invalid ioctl [ 1182.754975] binder_alloc: binder_alloc_mmap_handler: 21265 20001000-20004000 already mapped failed -16 11:54:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = getpid() r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/sockstat\x00') ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) write$P9_RCREATE(r0, &(0x7f0000000080)={0x18, 0x73, 0x1, {{0x0, 0x4, 0x2}, 0x4}}, 0x18) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x1e8, r5, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x78, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7641a537}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd166}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc47a}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c63}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8ed}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3a63}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40000}, 0x80) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r0) close(r1) 11:54:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$mice(&(0x7f00000005c0)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$LOOP_CLR_FD(r1, 0x4c01) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000580)={0x1, r2}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x8) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000180)=0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e22, 0xffffffffffffffff, @remote, 0x8d97}}, 0x9, 0xffff}, 0x90) ioctl$RTC_PIE_ON(r3, 0x7005) timer_create(0x5, &(0x7f0000000440)={0x0, 0x11, 0x0, @thr={&(0x7f00000001c0)="454b8dbe08944e2096933253acfcb5ecb28ac46176777fe02c53a075d34e99ca5fde512b946d444a9847c0e5d956349117aa63ceafd3ca0f87485bbd2cddfc354380366950ce53cdd9e1c3f472ebc8abceae8df47e5b0c73c101130cfa", &(0x7f0000000340)="caeca02b132bdc311d27f4b24cc9647a4d7be6ad6f33408127bcf165ed2f95316220df673d0d0f7e3c4ee735777e49b01037dc2360af76e28b891fcfbe838c75409a39b58b69d385128161a132b28b3e30b662e31b98326fd084b883f6958c33ef4ed34f2f869d3f88d2ab2f5ffba39ab7870d0ca24bae82c3895025c13ae4441ef81d8afcc15da19eaa58a3444c37368d2eab259d5ba9161b023c79fa2d1aa317f1e08dc4d8565144ff9b90b5297e252c61b2156b28376b5c2a1a3b17833e2d7e93fb3e6c98ffda58b362fc8ccdfda7fa72e54d6e46fc07735cd830d8824bd8a54fa1fa02e3"}}, &(0x7f0000000480)=0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) timer_settime(r5, 0x0, &(0x7f0000000500)={{r6, r7+10000000}}, &(0x7f0000000540)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x21, 0x0, &(0x7f0000000040)=0xee) close(r8) close(0xffffffffffffffff) [ 1182.780447] binder: BINDER_SET_CONTEXT_MGR already set [ 1182.786853] binder_alloc: 21265: binder_alloc_buf, no vma [ 1182.790343] binder: 21265:21267 ioctl 40046207 0 returned -16 [ 1182.794342] binder: 21265:21272 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1182.807840] binder: undelivered TRANSACTION_ERROR: 29201 [ 1182.828049] binder: undelivered TRANSACTION_ERROR: 29189 11:54:32 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)={0xaa, 0x9}) r3 = syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x4df5, 0x80) ioctl$VIDIOC_G_AUDIO(r3, 0x80345621, &(0x7f00000002c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x2, 0xbf, 0x5, 0x16e, 0x2, 0x3, 0x1ff, 0x4, 0x0}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000200)={0x8001, 0x8001, 0x7, 0xe8b5, r5}, 0x10) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x9, 0x0, &(0x7f0000000040)) r6 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x20000000000001, 0x8000) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x1f, [], &(0x7f00000000c0)={0x980929, 0x1, [], @p_u16=&(0x7f0000000080)=0x1}}) syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') close(r4) close(r2) 11:54:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000000a0000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x10}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f00000000c0)) socketpair(0xf, 0x7, 0x56, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x54, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x8456) close(r3) close(r1) 11:54:32 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)={0x4}) close(r2) close(r1) [ 1182.956117] binder: 21293:21295 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1182.995496] binder_alloc: binder_alloc_mmap_handler: 21293 20001000-20004000 already mapped failed -16 [ 1183.017395] binder_alloc: 21293: binder_alloc_buf, no vma [ 1183.024550] binder: BINDER_SET_CONTEXT_MGR already set [ 1183.024610] binder: 21293:21299 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1183.030566] binder: 21293:21295 ioctl 40046207 0 returned -16 [ 1183.097052] binder: undelivered TRANSACTION_ERROR: 29201 [ 1183.105867] binder: undelivered TRANSACTION_ERROR: 29189 11:54:35 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:54:35 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x1000000, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:35 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r3) close(r2) 11:54:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000480000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000000)=0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x10040, 0x0) io_cancel(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0xbc, r0, &(0x7f0000000080)="e3cba9a57d966d22e802f9134f45754e7f03b7d947534acd2ff36221152f96a74ab6b2ee0d28a4205de89c85046c589df3d649", 0x33, 0x7, 0x0, 0x0, r3}, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r5) close(r4) 11:54:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1185.784901] binder: 21319:21323 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1185.805381] binder_alloc: binder_alloc_mmap_handler: 21319 20001000-20004000 already mapped failed -16 [ 1185.816537] binder: BINDER_SET_CONTEXT_MGR already set [ 1185.823579] binder: 21319:21323 ioctl 40046207 0 returned -16 11:54:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000680000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:35 executing program 1 (fault-call:8 fault-nth:0): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1185.830618] binder_alloc: 21319: binder_alloc_buf, no vma [ 1185.838103] binder: 21319:21327 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1185.850528] binder: undelivered TRANSACTION_ERROR: 29189 [ 1185.864117] binder: undelivered TRANSACTION_ERROR: 29201 11:54:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$dmmidi(&(0x7f0000000300)='/dev/dmmidi#\x00', 0x90a8, 0x4a080) setsockopt$inet_dccp_int(r3, 0x21, 0x1, &(0x7f0000000280)=0x7, 0x4) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x4000, 0x0) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000340)) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020026bd7000fbdbdf25080000001c00020008000600000000000800030001000000080002004e230000080006000600000008000500030000000800050004009dd2247f4efefa439db44f1e000008000600"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40000) close(r2) close(r1) 11:54:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) socket$unix(0x1, 0x7, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000080)=""/240, &(0x7f0000000180)=0xf0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r3) accept$alg(r2, 0x0, 0x0) close(r1) 11:54:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r2) close(r1) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x303001) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) [ 1185.949484] binder: 21341:21343 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1185.962344] binder_alloc: binder_alloc_mmap_handler: 21341 20001000-20004000 already mapped failed -16 [ 1185.973336] binder: BINDER_SET_CONTEXT_MGR already set [ 1185.980484] binder: 21341:21343 ioctl 40046207 0 returned -16 [ 1185.998178] binder_alloc: 21341: binder_alloc_buf, no vma [ 1186.006760] binder: 21341:21345 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1186.017592] binder: undelivered TRANSACTION_ERROR: 29201 [ 1186.031392] binder: undelivered TRANSACTION_ERROR: 29189 11:54:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000500000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1186.143531] binder: 21361:21363 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1186.170734] binder_alloc: binder_alloc_mmap_handler: 21361 20001000-20004000 already mapped failed -16 [ 1186.204834] binder: BINDER_SET_CONTEXT_MGR already set [ 1186.210601] binder: 21361:21366 ioctl 40046207 0 returned -16 [ 1186.231809] binder_alloc: 21361: binder_alloc_buf, no vma [ 1186.250919] binder: undelivered TRANSACTION_ERROR: 29201 [ 1186.257763] binder: 21361:21370 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1186.269344] binder: undelivered TRANSACTION_ERROR: 29189 11:54:38 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:54:38 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:38 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x4000)=nil, 0x4000, 0x2, 0x53, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x9, 0x0, &(0x7f0000000040)) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000080)={0xbf, 0x9}) close(r3) close(r2) 11:54:38 executing program 0: userfaultfd(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x80000ffffffff) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r2) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f00000000c0)=0x400, 0x4) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000100)=0x1) close(r1) 11:54:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) userfaultfd(0x80000) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) syncfs(r1) r2 = socket$inet6_sctp(0xa, 0x3000005, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000000000006c0000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:38 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) 11:54:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={'bridge_slave_1\x00', {0x2, 0x4e20, @local}}) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r3) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000080)=0x30) close(r2) [ 1188.879343] binder: 21379:21386 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1188.905673] binder_alloc: binder_alloc_mmap_handler: 21379 20001000-20004000 already mapped failed -16 [ 1188.920120] binder: BINDER_SET_CONTEXT_MGR already set [ 1188.927876] binder: 21379:21386 ioctl 40046207 0 returned -16 [ 1188.929550] binder_alloc: 21379: binder_alloc_buf, no vma [ 1188.939474] binder: 21379:21390 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1188.948956] binder: undelivered TRANSACTION_ERROR: 29201 [ 1188.964084] binder: undelivered TRANSACTION_ERROR: 29189 11:54:38 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x8400000000000000, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000080)=0xffffffffffffff33) close(r2) close(r1) 11:54:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000300000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1189.092356] binder: 21411:21412 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1189.112966] binder_alloc: binder_alloc_mmap_handler: 21411 20001000-20004000 already mapped failed -16 11:54:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r2) close(r1) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_OPEN(r3, &(0x7f0000000080)={0x20, 0x0, 0x1, {0x0, 0x4}}, 0x20) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f00000000c0)={0x20, 0x7, 0x4, 0xd, 0x4, 0x41dc, 0x1, 0x101, 0xffffffffffffffff}) [ 1189.138745] binder_alloc: 21411: binder_alloc_buf, no vma [ 1189.138934] binder: BINDER_SET_CONTEXT_MGR already set [ 1189.149287] binder: 21411:21417 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1189.164472] binder: 21411:21412 ioctl 40046207 0 returned -16 [ 1189.172684] binder: undelivered TRANSACTION_ERROR: 29201 [ 1189.178226] binder: undelivered TRANSACTION_ERROR: 29189 11:54:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)={0x7fffffff, 0x800}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x2, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r3) close(r2) 11:54:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x8800000000000000, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000004800000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:41 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000013) 11:54:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast2, @local}, &(0x7f0000000180)=0xc) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f00000001c0)={r3, 0x1, 0x6, @local}, 0x10) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) socket$kcm(0x29, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r1) close(0xffffffffffffffff) 11:54:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) memfd_create(&(0x7f0000000040)="3a74727573746564232cc92d00", 0x1) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x9, 0x0, &(0x7f0000000000)=0xfffffffffffffecd) close(r2) close(r1) [ 1191.915990] binder: 21433:21437 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1191.937968] binder_alloc: binder_alloc_mmap_handler: 21433 20001000-20004000 already mapped failed -16 11:54:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) exit_group(0x3ff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1191.985924] binder: BINDER_SET_CONTEXT_MGR already set 11:54:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r3) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x8000, 0x2880) close(r0) [ 1192.020922] binder: 21433:21437 ioctl 40046207 0 returned -16 [ 1192.034273] binder_alloc: 21433: binder_alloc_buf, no vma [ 1192.082176] binder: undelivered TRANSACTION_ERROR: 29201 11:54:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x1, @empty, 0xc46}}, 0x10000, 0xf64, 0x80000000, 0x1f, 0x8}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000140)={r3, 0xfff, 0x20}, 0x8) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:42 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000100)=0x6) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x100, 0x0) setsockopt$inet6_dccp_buf(r4, 0x21, 0x2, &(0x7f0000000080)="8ef394d6a81ece2897c6d94092971878139228556e9e0b724adaeb3c923ff4aee33631227d83710ceeafd5a5962b", 0x2e) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r3) close(r1) 11:54:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x84000000, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1192.124138] binder: 21433:21457 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1192.133418] binder: undelivered TRANSACTION_ERROR: 29189 11:54:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000004c0000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x1000000, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:42 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x301200, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f00000000c0)={0x3, 0x0, 0x8, 0x0, 0x200, 0x3, 0x101, 0x4, 0x6, 0x8, 0xd63, 0x7fffffff, 0x0, 0x9, 0x0, 0x100, 0x4, 0x3, 0x4ee}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x3, 0x35, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)=0xffffffffffffff00) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000140)=0x1e) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x7, 0x40, 0xfffffffffffffffd, 0x4, 0x0, 0x7, 0x8, 0xf, 0x4, 0x3, 0x0, 0x2, 0x2, 0x3ff, 0xb40, 0x3f, 0x2, 0x5, 0x8d, 0x0, 0x3fa, 0x1, 0x8000, 0x10001, 0x7fff, 0x8000, 0x7, 0x7687, 0x1, 0x8, 0xbcbd, 0x13eb4ff5, 0xffffffffffffffff, 0x80000001, 0x100000000, 0x10001, 0x0, 0xffffffffffffffc0, 0x1, @perf_config_ext={0x1, 0x7}, 0x8010, 0x3, 0x100, 0x8, 0x6, 0x1, 0x3ff}, r4, 0xc, 0xffffffffffffffff, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r3) close(r2) accept$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, &(0x7f00000001c0)=0x10) [ 1192.271404] binder: 21479:21482 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1192.297547] binder_alloc: binder_alloc_mmap_handler: 21479 20001000-20004000 already mapped failed -16 [ 1192.332748] binder_alloc: 21479: binder_alloc_buf, no vma [ 1192.333182] binder: BINDER_SET_CONTEXT_MGR already set [ 1192.351568] binder: 21479:21488 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1192.352664] binder: 21479:21483 ioctl 40046207 0 returned -16 [ 1192.373706] binder: undelivered TRANSACTION_ERROR: 29201 11:54:42 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)='lo)&+\x00', 0xffffffffffffffff}, 0x30) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x8000, 0x0) r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x100000000000000) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1192.381271] binder: undelivered TRANSACTION_ERROR: 29189 11:54:42 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000013) 11:54:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000060000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x8400, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_smack_entry(r0, &(0x7f0000000100)='security.SMACK64IPIN\x00', &(0x7f0000000140)='\x00', 0x1, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000080)={0x2, 0x1, @stop_pts=0x8001}) close(r1) [ 1192.810580] binder: 21506:21509 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1192.847796] binder_alloc: binder_alloc_mmap_handler: 21506 20001000-20004000 already mapped failed -16 11:54:42 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x442000, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r1, 0x0, 0x7, 0x3, 0x7}) socketpair$unix(0x1, 0x1ffffffffe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1000000002}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r4) close(r3) 11:54:42 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x3, 0x80800) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, r1, 0x30, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x69}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xf3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000000000}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080c1) socketpair$unix(0x1, 0x4004, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r5) close(r2) 11:54:42 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) lsetxattr$system_posix_acl(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {}, [], {}, [], {}, {0x8}}, 0x24, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r3) close(r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000180)={0x4, 0x3, 'client0\x00', 0xffffffff80000003, "59137879739680a4", "78ee74398b3caa467720edca45434190e80c9c1543e94ee3c2efc7fbee155c95", 0x3, 0xec}) 11:54:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000070000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xf, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1192.857912] binder: BINDER_SET_CONTEXT_MGR already set [ 1192.864446] binder: 21506:21509 ioctl 40046207 0 returned -16 [ 1192.871921] binder_alloc: 21506: binder_alloc_buf, no vma [ 1192.877889] binder: 21506:21515 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1192.887555] binder: undelivered TRANSACTION_ERROR: 29201 [ 1192.894933] binder: undelivered TRANSACTION_ERROR: 29189 [ 1193.007573] binder: 21531:21532 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1193.029197] binder_alloc: binder_alloc_mmap_handler: 21531 20001000-20004000 already mapped failed -16 [ 1193.044464] binder: BINDER_SET_CONTEXT_MGR already set 11:54:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x61) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x10) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x11, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1193.052341] binder: 21531:21532 ioctl 40046207 0 returned -16 [ 1193.070910] binder_alloc: 21531: binder_alloc_buf, no vma [ 1193.086526] binder: 21531:21535 transaction failed 29189/-3, size 0-26388279066624 line 2973 11:54:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000004c00000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1193.117201] binder: undelivered TRANSACTION_ERROR: 29201 [ 1193.131251] binder: undelivered TRANSACTION_ERROR: 29189 [ 1193.231776] binder: 21551:21553 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1193.246146] binder_alloc: binder_alloc_mmap_handler: 21551 20001000-20004000 already mapped failed -16 [ 1193.257317] binder: BINDER_SET_CONTEXT_MGR already set [ 1193.267816] binder: 21551:21553 ioctl 40046207 0 returned -16 [ 1193.280846] binder_alloc: 21551: binder_alloc_buf, no vma [ 1193.296707] binder: 21551:21555 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1193.310323] overlayfs: filesystem on './file0' not supported as upperdir [ 1193.323072] binder: undelivered TRANSACTION_ERROR: 29201 [ 1193.336263] binder: undelivered TRANSACTION_ERROR: 29189 11:54:43 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000013) 11:54:43 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) write$P9_RLCREATE(r1, &(0x7f0000000000)={0x18, 0xf, 0x1, {{0x10, 0x3, 0x3}, 0x9}}, 0x18) 11:54:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xf00000000000000, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000007400000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r2) r3 = getpgid(0xffffffffffffffff) prlimit64(r3, 0xc, &(0x7f0000000180)={0x200, 0x5}, &(0x7f00000001c0)) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfe81, 0x400) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f00000000c0)={0x0, 0x1, {0x53, 0xd97f, 0xfffffffffffffbff, {0x80000001, 0x2}, {0x0, 0xa22e}, @period={0x58, 0x5, 0x3ff, 0x80, 0x290000, {0x3, 0x5a3d, 0x2, 0x1000}, 0x3, &(0x7f0000000080)=[0x80, 0x0, 0x1]}}, {0x0, 0x100000001, 0xc2ab, {0x2, 0x80000000000}, {0x6, 0x3f}, @const={0x1, {0x4, 0x9, 0x5}}}}) close(r1) setsockopt$inet_udp_int(r4, 0x11, 0x6f, &(0x7f0000000140)=0x1, 0x4) [ 1193.683054] binder_alloc: binder_alloc_mmap_handler: 21572 20001000-20004000 already mapped failed -16 [ 1193.694077] binder: BINDER_SET_CONTEXT_MGR already set [ 1193.706760] binder: 21572:21577 ioctl 40046207 0 returned -16 [ 1193.713182] binder_alloc: 21572: binder_alloc_buf, no vma 11:54:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000600000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner', 0x3d, r2}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x21, 0x0, &(0x7f0000000080)=0x2c0) close(r3) close(r1) 11:54:43 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() getgroups(0xa, &(0x7f0000000100)=[0x0, 0xee01, 0x0, 0xffffffffffffffff, 0xee00, 0x0, 0xee01, 0xee00, 0x0, 0x0]) getgroups(0x5, &(0x7f0000000140)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee01]) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000280)=[0x0, 0xffffffffffffffff, 0xee00]) r9 = getgid() lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f0000000380)=[r3, r4, r5, r6, r7, r8, r9, r10]) close(r2) close(r1) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000003c0)={0x0, 0xfffffffffffffffa}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={r11, 0x7fff}, 0x8) 11:54:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x8800, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1193.892860] binder_alloc: binder_alloc_mmap_handler: 21594 20001000-20004000 already mapped failed -16 [ 1193.934848] binder: BINDER_SET_CONTEXT_MGR already set [ 1193.934866] binder: 21594:21598 ioctl 40046207 0 returned -16 [ 1193.946383] binder_alloc: 21594: binder_alloc_buf, no vma 11:54:43 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r0) close(r1) 11:54:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000020000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1193.976131] ntfs: (device loop3): parse_options(): Unrecognized mount option fsname. [ 1193.995731] ntfs: (device loop3): parse_options(): Unrecognized mount option ^/]. [ 1194.004867] ntfs: (device loop3): parse_options(): Unrecognized mount option measure. [ 1194.057768] ntfs: (device loop3): parse_options(): Unrecognized mount option audit. [ 1194.099131] ntfs: (device loop3): parse_options(): Unrecognized mount option fowner. [ 1194.107889] ntfs: (device loop3): parse_options(): Unrecognized mount option appraise_type. [ 1194.117037] ntfs: (device loop3): parse_options(): Unrecognized mount option obj_user. [ 1194.125978] ntfs: (device loop3): parse_options(): Unrecognized mount option . [ 1194.135518] binder_alloc: binder_alloc_mmap_handler: 21621 20001000-20004000 already mapped failed -16 [ 1194.146655] binder_alloc: 21621: binder_alloc_buf, no vma [ 1194.146809] binder: BINDER_SET_CONTEXT_MGR already set [ 1194.158129] binder: 21621:21623 ioctl 40046207 0 returned -16 11:54:44 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 11:54:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xff0f, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000006c0000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:44 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000001c0)=0x3, 0xe7) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x80) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000080)=""/202) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000180)) close(r2) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x1) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) 11:54:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000010000/0x3000)=nil, 0x3000}, 0x6d0eac5573041b3e}) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:44 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L-', 0xfc48}, 0x28, 0x2) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1194.593030] binder_alloc: binder_alloc_mmap_handler: 21638 20001000-20004000 already mapped failed -16 [ 1194.607497] binder: BINDER_SET_CONTEXT_MGR already set [ 1194.614982] binder: 21638:21643 ioctl 40046207 0 returned -16 [ 1194.621832] binder_alloc: 21638: binder_alloc_buf, no vma 11:54:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xff0f0000, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000000000007a0000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000080)={0x1fd, 0x0, &(0x7f0000012000/0x4000)=nil}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0xa6a9f4a5b1849bd6, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r3) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) 11:54:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r2) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) close(r1) [ 1194.793525] binder_alloc: binder_alloc_mmap_handler: 21662 20001000-20004000 already mapped failed -16 [ 1194.812670] binder: BINDER_SET_CONTEXT_MGR already set 11:54:44 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x926e) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r1) close(r2) [ 1194.837039] binder: 21662:21668 ioctl 40046207 0 returned -16 [ 1194.842522] binder_alloc: 21662: binder_alloc_buf, no vma 11:54:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000740000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:45 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x1100, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x100) ioctl$VIDIOC_SUBDEV_G_CROP(r2, 0xc038563b, &(0x7f0000000080)={0x1, 0x0, {0x80000001, 0x6, 0x3, 0xbd6}}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r3) close(r1) 11:54:45 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x2}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:45 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 11:54:45 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x100, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') poll(&(0x7f0000000380)=[{r0, 0x401}, {r0, 0x1}, {r0, 0x2050}], 0x3, 0x32) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="45aef260", @ANYRES16=r1, @ANYBLOB="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"], 0xb4}}, 0x20000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x200000b, 0x40000000036, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r4) r5 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3ff, 0x20000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f00000000c0)={0x5, 0x70, 0x8, 0xffffffffffffffff, 0x6, 0x6, 0x0, 0x2fe2, 0x44868, 0x1, 0x1, 0x6, 0x9, 0x2, 0x40, 0x10001, 0x7ff, 0x9, 0x0, 0x5, 0x1f, 0x4800, 0x9, 0x401, 0xffffffffffffffcb, 0x3, 0x4, 0x2, 0x8000, 0x1f, 0x5, 0xa4c, 0x1, 0x5, 0xbaf2, 0x7, 0x4, 0x23, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x10000, 0x7ff, 0xc0, 0x8, 0x3, 0x1, 0x8}) close(r3) 11:54:45 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) 11:54:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000120000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1195.447514] binder: BINDER_SET_CONTEXT_MGR already set [ 1195.459929] binder_alloc: 21693: binder_alloc_buf, no vma [ 1195.469649] binder: 21693:21698 ioctl 40046207 0 returned -16 11:54:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000580)='/dev/dmmidi#\x00', 0x445ee62e, 0x40c2) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000600)='team\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000006c0)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000700)={@loopback, 0x0}, &(0x7f0000000740)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@mcast1}}, &(0x7f0000000940)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000009c0)={'tunl0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@ipv4={[], [], @remote}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b40)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000c40)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'bcsh0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000e80)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000f80)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001000)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001440)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001400)={&(0x7f0000001040)={0x384, r4, 0x204, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x124, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r8}, {0x1b8, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x25}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r13}, {0x7c, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}]}}]}, 0x384}, 0x1, 0x0, 0x0, 0x4800}, 0x8010) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r16 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r16, 0x84, 0x8, &(0x7f0000013e95), 0x4) r17 = socket(0x3, 0x4, 0x1) getsockopt$EBT_SO_GET_ENTRIES(r17, 0x0, 0x81, &(0x7f00000004c0)={'nat\x00', 0x0, 0x3, 0x35, [], 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000480)=""/53}, &(0x7f0000000540)=0x78) getsockopt$IP_VS_SO_GET_DAEMON(r16, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r16) r18 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r18, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x1008}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r18, &(0x7f00000002c0)={0x9, 0x108, 0xfa00, {r19, 0x23, "04d194", "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"}}, 0x110) connect$vsock_dgram(r18, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10) close(r2) r20 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x200) write$tun(r20, &(0x7f0000000080)={@val={0x0, 0xdada}, @val={0x3, 0x80, 0x7ff, 0x7ff, 0x9}, @x25={0x3, 0x4, 0xfd, "3232fde37f0e3737c67f88ddfc2260951663afb1d56d551c61ff3cdef56dea4310c42e0a15b2577443c9f3bea6c1fc4bf17c4093681609e13f2d781cf6500a9e1b1681ea4cb167178faf56286e125701a3d38a114c1f9b498793f29f70664c02bff75647cc90673ca21aba9c8caf0b11c085f07e8e9b074bca872b0eae702a3b7cb8f46be814adae7749bef8894d1869cdafc2c4a6e70463aedff743c6123412b31b2683c74475f8d687ebbd58b893e9d6256468985c4854436e74e2d2c53458bc896074a35e81984550565250244f6e5bf0c3d1"}}, 0xe5) 11:54:45 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x1100000000000000, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x1ff, 0x80000) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x21, 0x0, &(0x7f0000000040)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000080)) close(r3) close(r1) [ 1195.609183] binder: BINDER_SET_CONTEXT_MGR already set [ 1195.628450] binder: 21713:21717 ioctl 40046207 0 returned -16 11:54:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r4, r0}}, 0x18) close(r2) close(r1) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f00000001c0)=0x7fffffff) [ 1195.663089] binder_alloc: 21713: binder_alloc_buf, no vma 11:54:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000007a00000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:45 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000340)) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x200082, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x1400, 0x100000000000}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={r4, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0xffffffffffff0000, @mcast1, 0x7fffffff}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0x1b}, 0x8}, @in6={0xa, 0x4e20, 0x8, @remote}]}, &(0x7f00000002c0)=0x10) fcntl$dupfd(r0, 0x0, r1) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) fcntl$setlease(r6, 0x400, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x9, 0x0, &(0x7f0000000040)) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000680)={'vcan0\x00', 0x0}) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000006c0)={r8, @multicast2, @dev={0xac, 0x14, 0x14, 0x1c}}, 0xc) ioctl$SG_SET_DEBUG(r7, 0x227e, &(0x7f00000000c0)) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x800) close(r6) close(r5) 11:54:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x21, 0x0, &(0x7f0000000040)) fstat(r0, &(0x7f0000000080)) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400000, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @bt={0x15e4, 0x3, 0x3a7, 0x9, 0x1, 0x100000000, 0x10, 0xc}}) close(r3) close(r2) [ 1195.835464] binder: BINDER_SET_CONTEXT_MGR already set [ 1195.835486] binder_alloc: 21736: binder_alloc_buf, no vma [ 1195.883184] binder: 21736:21738 ioctl 40046207 0 returned -16 11:54:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffff9c, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=""/64, 0x40, 0x0}}, 0x10) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r2, 0x4) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) dup2(r0, r4) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r6) close(r5) 11:54:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xff0f000000000000, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:46 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 11:54:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000003f00000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = msgget$private(0x0, 0x100) msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000080)=""/151) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:46 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x119040, 0x2) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000080)={0x2, 0x2}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x2, @local, 0x3}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @multicast1}}, [0x7, 0x3, 0x2ba, 0x2, 0x10000, 0x8, 0x4, 0xba, 0x3f, 0xffffffff7fffffff, 0x8000, 0x73, 0x3f, 0x8, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1196.328689] binder: BINDER_SET_CONTEXT_MGR already set [ 1196.337672] binder_alloc: 21758: binder_alloc_buf, no vma [ 1196.340084] binder: 21758:21762 ioctl 40046207 0 returned -16 11:54:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x36123487, 0x1a5001) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000080)={0x80000001, 0x1, 0x100, 0x4, "c8a51a985112f4f8b2321ddbc7d690e3bbc32eece22d43bbab7c8baf03e6e5e9"}) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000120000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x100000000000000, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:46 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)) 11:54:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) memfd_create(&(0x7f0000000000)='\x00', 0x1) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r1) close(r0) [ 1196.473419] binder: BINDER_SET_CONTEXT_MGR already set [ 1196.487772] binder_alloc: 21779: binder_alloc_buf, no vma [ 1196.494601] binder: 21779:21781 ioctl 40046207 0 returned -16 11:54:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000000c0)=0x4, 0xfffffffffffffd27) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r2) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) rt_sigreturn() ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000280)="f980be51812a07c0b34f746c5bab752cd5e14cfd3c3f5ef17dc3fb67e8911f9dbb7da86b54f72d3efb9daeafbfd4befbe521af47029a15ff6f79112647cf9e6c59445fdd9c2ab55abfc97ecbf167f44f9fe79c0ebd7335144099a682775604a71932df61faadc64d1b1610d64f648fea62a221a559f1fcb33c0144b67cf36ba2e46071cd615a07098315b190dc75ea52439be68064e6a811736276b3f6f477b47cc610ab0dce2c6b079613fc6e0cd0205518a73778d0b0be5c9fb7bdc9ffba33b2b1705f3f68674588d8cea5f7f5f82c6fd6948fac3cf27e") close(r1) 11:54:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000040000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x5, 0x7, 0x1ff}) close(r2) [ 1196.689495] binder: BINDER_SET_CONTEXT_MGR already set [ 1196.695546] binder: 21804:21806 ioctl 40046207 0 returned -16 [ 1196.699561] binder_alloc: 21804: binder_alloc_buf, no vma 11:54:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000000000004c0000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xf000000, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:47 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 11:54:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000080)=""/111) close(r2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, 0x0, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = memfd_create(0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={0xffffffffffffffff, 0x7, 0x1, 0x0, 0x0}, 0x20) r6 = syz_open_dev$sndseq(0x0, 0x0, 0x2) ioctl$KVM_GET_CPUID2(r5, 0xc008ae91, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r8 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) getpeername$inet6(r8, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f00000002c0)=0x1c) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, 0x0, &(0x7f0000000400)) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) ioctl(r7, 0xffffffffffffffb7, &(0x7f0000000080)) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000380)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x4843cacf801ae7b1, 0x0, 0x400, 0x1, 0x80000000, 0x0, 0x9, 0x20, 0x0, 0x9, 0x8, 0x3f1ad92a, 0x9, 0x2, 0x7, 0xdcf2, 0x2, 0xffffffff, 0xff, 0x7, 0x1, 0x5, 0x2, 0x0, 0x5, 0x10000, 0x7ff000, 0xda0, 0x2, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x32, 0x0, 0x9, 0x7, 0x1000000000, 0x1ff, 0x4d5}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r6, 0xc0305616, &(0x7f00000001c0)={0x7}) connect$vsock_dgram(r4, &(0x7f0000000300)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) 11:54:47 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x12, r0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0xfffffffffffffffe, 0x84) getsockname$unix(r0, &(0x7f0000000080), &(0x7f0000000000)=0x6e) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0xff10) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x9, 0x0, &(0x7f0000000040)=0x1) close(r3) close(r2) [ 1197.248875] binder_transaction: 22 callbacks suppressed [ 1197.248892] binder: 21822:21827 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1197.288986] binder_alloc_mmap_handler: 6 callbacks suppressed [ 1197.289003] binder_alloc: binder_alloc_mmap_handler: 21822 20001000-20004000 already mapped failed -16 [ 1197.305990] binder: 21822:21834 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1197.306104] binder: BINDER_SET_CONTEXT_MGR already set 11:54:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x11000000, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1197.339279] audit: type=1400 audit(1544874887.236:2446): avc: denied { map } for pid=21836 comm="syz-executor2" path="socket:[184180]" dev="sockfs" ino=184180 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=unix_dgram_socket permissive=1 [ 1197.345202] binder: 21822:21827 ioctl 40046207 0 returned -16 [ 1197.366918] binder_release_work: 22 callbacks suppressed [ 1197.366925] binder: undelivered TRANSACTION_ERROR: 29201 [ 1197.396415] binder: undelivered TRANSACTION_ERROR: 29189 11:54:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000680000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x9) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000100)={0xa, 0x4, 0xfa00, {r2}}, 0xc) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)=0x0) syz_open_procfs(r3, &(0x7f0000000200)='net/mcfilter\x00') write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r2}}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r1) close(0xffffffffffffffff) 11:54:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x84, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1197.569369] binder: 21851:21852 transaction failed 29201/-28, size 0-26388279066624 line 2973 11:54:47 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r2) close(r1) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) 11:54:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000080)={{0x2, 0x4e23, @multicast1}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x4, {0x2, 0x4e24, @remote}, 'bridge_slave_1\x00'}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r3) close(r1) [ 1197.669474] binder_alloc: binder_alloc_mmap_handler: 21851 20001000-20004000 already mapped failed -16 11:54:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0xa002, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000000000000a0000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1197.748621] binder: 21851:21857 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1197.751746] binder: BINDER_SET_CONTEXT_MGR already set [ 1197.763000] binder: 21851:21852 ioctl 40046207 0 returned -16 [ 1197.765579] binder: undelivered TRANSACTION_ERROR: 29201 [ 1197.775648] binder: undelivered TRANSACTION_ERROR: 29189 11:54:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x88, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1197.851827] binder: 21871:21876 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1197.863363] binder_alloc: binder_alloc_mmap_handler: 21871 20001000-20004000 already mapped failed -16 [ 1197.873893] binder: BINDER_SET_CONTEXT_MGR already set [ 1197.922251] binder: undelivered TRANSACTION_ERROR: 29201 [ 1197.928106] binder: 21871:21876 ioctl 40046207 0 returned -16 11:54:47 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 11:54:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x501200, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000080)={0x0, 0x30, 0x40, {0x0, 0x989680}, 0x2}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) close(r1) 11:54:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000060000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:47 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0xc0, 0x17, &(0x7f0000000080)="e2ecf34cf914d0bcaa9b767f82def323b560feaa16402f5310b221c7b73180237382fc8e6998e257b0b30497456a75cf697cba8177d7244df548d08af5923b87c6bf51f30ef8a9bd3c4e37ba3ea98a9047771aadcc08d11f6d254a8ddb5a51eed9eeae80b2188faef6b6b690b57398c3990b7276fbb92495c8531e6ec3b847ab4143d5cf7db823674a32be4191b107e3d3b425e58b8656c8100e054402d5a741e49825dcb7c863f65280095e120bd7a3fba89cfb983e3100e7b47c6fea4e9255", &(0x7f0000000000)=""/23, 0x1}, 0x28) r3 = dup3(r0, r2, 0x80000) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000200)={0x1, {0x77359400}, 0x400, 0x3}) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x81, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000001c0)={0x2, 0x7, 0xa000}, 0x4) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f00000004c0)={0x9, 0xffffffffffff497d, 0x0, 0xc4, &(0x7f0000000280)=""/196, 0x4d, &(0x7f0000000380)=""/77, 0x86, &(0x7f0000000400)=""/134}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r1) close(r2) 11:54:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x88000000, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1198.143991] binder: 21895:21896 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1198.175642] binder_alloc: binder_alloc_mmap_handler: 21895 20001000-20004000 already mapped failed -16 [ 1198.185512] binder: BINDER_SET_CONTEXT_MGR already set 11:54:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000700000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0xf00, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1198.191049] binder: 21895:21896 ioctl 40046207 0 returned -16 [ 1198.197258] binder: 21895:21904 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1198.206423] binder: undelivered TRANSACTION_ERROR: 29201 [ 1198.212534] binder: undelivered TRANSACTION_ERROR: 29189 11:54:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000000)={0x8, [0xba, 0x4, 0x22, 0x101, 0x81, 0x1, 0x9, 0x4]}, &(0x7f0000000080)=0x14) close(r2) close(r1) 11:54:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) semget(0x2, 0x7, 0x100) close(r2) close(r1) 11:54:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x7, &(0x7f0000000280)={0x0, 0x11, 0x0, @thr={&(0x7f0000000140)="51f7231e57197cc31af06f3cfe71289880f4b073123d1e16018f129043425c99695aa03ea6be91655f6d1ea7097346e5fb443b45325076958b42b8392ae07518c0edad0fecdccb7a3382221810893c5b564f36723f938a462cf2065cf4a51d6c39b1a075d0d68c070f33fba67782bc819a2f9a0ae56fd5b63f6efce142c31ae08abaf6b124a06696d066ea2536e9ed62de3fc878", &(0x7f0000000200)="bca6bab7b8f46631d34d48370d15b35f379257"}}, &(0x7f00000002c0)) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x329081, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x5, 0x8900) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000100)={0x2, 0x3f}) r2 = syz_open_dev$admmidi(&(0x7f0000000300)='/dev/admmidi#\x00', 0xffffffff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x104) fallocate(r0, 0x6a, 0x127179f2, 0x1) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r4) close(r3) [ 1198.304913] binder: 21919:21923 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1198.377053] binder_alloc: binder_alloc_mmap_handler: 21919 20001000-20004000 already mapped failed -16 11:54:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1198.432670] binder: BINDER_SET_CONTEXT_MGR already set [ 1198.439316] binder: 21919:21923 ioctl 40046207 0 returned -16 [ 1198.445865] binder: 21919:21937 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1198.457439] binder: undelivered TRANSACTION_ERROR: 29201 [ 1198.465908] binder: undelivered TRANSACTION_ERROR: 29189 11:54:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x404200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000000)=0x4) 11:54:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000007a0000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:48 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 11:54:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0xfffffffffffffff9, &(0x7f0000000000)=0x0) r3 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x7fff, 0x40000) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x10000, r0, &(0x7f0000000080)="8eb9b7a2d7b5c73f94d9fe75c111770ff4b68d1788e295655407c4d0b5cb4808a767cce456aa3dcbc3a8f93d0889fab4d8ca7e08a7d8092cf0056eb831d4108df80cfcf11247b1f4e5bf2e42695981dddf7ca5f5d778139e95c8daab7ce7cdfa7fa69d788db3e4d899c2bcc429871efd76fcb40f8c7dbdb688419d4834bbdaf2604ef6bdb7e0fe4245b190059cabc753f3e3193558467b51ac1f804ae7fa1c0130cbd0781580148527efe104edccb58573ac3c08ba6bf11be6b5", 0xba, 0x72, 0x0, 0x1, r3}, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x21, 0x0, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000280)={'raw\x00', 0x2, [{}, {}]}, 0x48) close(r5) close(r4) 11:54:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x44, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x10010, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg(r3, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @remote, 0x200}, 0x80, 0x0}, 0x20000800) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) close(r1) close(r1) [ 1199.021290] binder: 21958:21962 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1199.050515] binder_alloc: binder_alloc_mmap_handler: 21958 20001000-20004000 already mapped failed -16 [ 1199.060483] binder: BINDER_SET_CONTEXT_MGR already set 11:54:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = dup2(r1, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e24, @rand_addr=0x81}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e23, 0xffffffffffffffff, @mcast1, 0x1ff}, @in6={0xa, 0x4e21, 0xf8, @mcast2, 0x2}, @in6={0xa, 0x4e20, 0xffffffff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x12}}, 0x6a7}, @in6={0xa, 0x4e24, 0x4, @mcast1, 0x7c4}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e23, 0x80000000, @remote, 0xdbd}, @in={0x2, 0x4e21, @multicast2}], 0xdc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r3) close(r1) 11:54:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000050000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1199.065924] binder: 21958:21962 ioctl 40046207 0 returned -16 [ 1199.072482] binder_alloc_new_buf_locked: 4 callbacks suppressed [ 1199.072489] binder_alloc: 21958: binder_alloc_buf, no vma [ 1199.085197] binder: undelivered TRANSACTION_ERROR: 29201 11:54:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0xa, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:49 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x200000) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x1, 0x10000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000100)={0x9, 0x5, 0x491c, 0x4c0, 0x5, 0x9}) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) r4 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x80) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000080)={{0xaf9, 0x34}, 0x18}, 0x10) r5 = msgget(0x3, 0x400) msgctl$IPC_STAT(r5, 0x2, &(0x7f0000000280)=""/4096) [ 1199.220097] binder_alloc: binder_alloc_mmap_handler: 21984 20001000-20004000 already mapped failed -16 [ 1199.254285] binder: BINDER_SET_CONTEXT_MGR already set 11:54:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r1) close(r0) 11:54:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000070000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1199.276709] binder: 21984:21985 ioctl 40046207 0 returned -16 [ 1199.297880] binder_alloc: 21984: binder_alloc_buf, no vma 11:54:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x210442, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x3f) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1199.400810] binder_alloc: binder_alloc_mmap_handler: 22003 20001000-20004000 already mapped failed -16 [ 1199.446811] binder: BINDER_SET_CONTEXT_MGR already set [ 1199.466144] binder: 22003:22007 ioctl 40046207 0 returned -16 [ 1199.500220] binder_alloc: 22003: binder_alloc_buf, no vma 11:54:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner', 0x3d, r2}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x21, 0x0, &(0x7f0000000080)=0x2c0) close(r3) close(r1) 11:54:49 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:54:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x20000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000083fff) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x54, 0x0, &(0x7f0000000040)) close(r3) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f0000000080)={{0x4000, @name="5b3e35b54711eeb32c9aaf6c6092cc97aae5d44e1521a2feeadb37b102b1cd25"}, 0x8, 0x0, 0x101}) close(r1) 11:54:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000000000003f0000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x51, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0x10000, 0x0) accept4$alg(r1, 0x0, 0x0, 0x80800) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x111000, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0xff6f) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000200)={0x3, r2}) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x9, 0x0, &(0x7f0000000040)) r4 = accept4$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c, 0x80000) close(r3) accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x80800) r6 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000300)={{{@in=@multicast2, @in6=@local, 0x4e21, 0x412, 0x0, 0x897c, 0xa, 0x20, 0x20, 0x32, r5, r6}, {0x1, 0xfff, 0x8, 0x5, 0x2, 0x100000001, 0xfffffffffffffff9, 0x18}, {0x80, 0x8, 0x100000001, 0x4}, 0x8, 0x6e6bb8, 0x3, 0x1, 0x3}, {{@in=@loopback, 0x4d6, 0x33}, 0x2, @in6=@local, 0x3500, 0x6, 0x3, 0x5, 0x1f, 0x2fac43f4, 0x1}}, 0xe8) close(0xffffffffffffffff) [ 1199.938192] binder_alloc: binder_alloc_mmap_handler: 22028 20001000-20004000 already mapped failed -16 [ 1199.955704] ntfs: (device loop3): parse_options(): Unrecognized mount option fsname. 11:54:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) socket$packet(0x11, 0x3, 0x300) close(r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000280)={{0x8, 0x6, 0x2, 0x7, '\x00', 0x5}, 0x0, [0x80, 0xffffffff, 0x1000, 0x4, 0x80000001, 0x843, 0x861, 0x7, 0xfffffffffffffffd, 0x3, 0x6, 0x3, 0x2b, 0x54b, 0x6, 0x5, 0x300, 0x3, 0x3f, 0x695d, 0x4, 0x1, 0x100000000, 0x6, 0x2, 0x2, 0x4, 0x480, 0x9, 0x4, 0xef5, 0x1, 0x100, 0x2, 0xb96, 0x0, 0x7, 0x7, 0xfff, 0xde, 0x8000, 0xc4, 0xfff, 0x4, 0x101, 0x200, 0x6, 0xfffffffffffffffa, 0x8, 0x101, 0x369, 0x5, 0x3ff, 0x5, 0x7, 0x6, 0x100000001, 0xfff, 0x8, 0xff, 0xd4, 0x7, 0x800, 0x81, 0x3, 0x1, 0x5, 0x5, 0xfff, 0x3, 0x0, 0x4, 0x3c1, 0x3db, 0x1, 0x4, 0x200, 0x80000000, 0x67f9, 0x80, 0x1, 0xffffffffffffffff, 0x8, 0x0, 0x20000000, 0x1, 0x100, 0x6, 0x4, 0xffffffffffffa2e1, 0x1311, 0x3, 0x0, 0x7, 0x100000001, 0x0, 0x3bc000, 0xbd9, 0x5b, 0x1000, 0x2, 0x2, 0x5, 0x8a, 0x8cf, 0x9, 0x200, 0x3, 0xff, 0x1, 0x7fffffff, 0x1f, 0x5, 0x0, 0x4, 0xffffffffffffffcc, 0x5, 0xf42d, 0x0, 0x0, 0x8, 0x3f, 0x1000, 0xde8, 0x8, 0x6, 0x9, 0x80000000], {0x77359400}}) 11:54:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x54, 0x0, &(0x7f0000000080)=0xca) close(r3) close(r2) r4 = dup3(r0, r2, 0x80000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000180)={0x0, @reserved}) [ 1199.985957] ntfs: (device loop3): parse_options(): Unrecognized mount option ^/]. [ 1199.996249] binder: BINDER_SET_CONTEXT_MGR already set [ 1200.005640] binder: 22028:22032 ioctl 40046207 0 returned -16 [ 1200.008893] binder_alloc: 22028: binder_alloc_buf, no vma [ 1200.014055] ntfs: (device loop3): parse_options(): Unrecognized mount option measure. [ 1200.026403] ntfs: (device loop3): parse_options(): Unrecognized mount option audit. 11:54:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000030000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x31, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1200.079677] ntfs: (device loop3): parse_options(): Unrecognized mount option fowner. [ 1200.107073] ntfs: (device loop3): parse_options(): Unrecognized mount option appraise_type. [ 1200.117046] ntfs: (device loop3): parse_options(): Unrecognized mount option obj_user. [ 1200.125502] ntfs: (device loop3): parse_options(): Unrecognized mount option . [ 1200.169196] binder_alloc: binder_alloc_mmap_handler: 22053 20001000-20004000 already mapped failed -16 11:54:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fadvise64(r1, 0x1c, 0x100000000, 0x7) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x54, 0x0, &(0x7f0000000040)) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000080)=""/59) bind$xdp(r4, &(0x7f00000001c0)={0x2c, 0x1, r5, 0x2b, r1}, 0x10) close(r3) close(r2) [ 1200.214007] binder: BINDER_SET_CONTEXT_MGR already set [ 1200.223929] binder: 22053:22058 ioctl 40046207 0 returned -16 [ 1200.233741] binder_alloc: 22053: binder_alloc_buf, no vma 11:54:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner', 0x3d, r2}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x21, 0x0, &(0x7f0000000080)=0x2c0) close(r3) close(r1) 11:54:50 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KDMKTONE(r3, 0x4b30, 0x401) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1200.413767] ntfs: (device loop3): parse_options(): Unrecognized mount option fsname. [ 1200.436478] ntfs: (device loop3): parse_options(): Unrecognized mount option ^/]. 11:54:50 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:54:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000040000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x12, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x54, 0x0, &(0x7f0000000000)) close(r2) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) close(r1) 11:54:50 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x800) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000300)=[0x0, 0xee01]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) r7 = getgid() r8 = getegid() lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f0000000480)=[r2, r3, r4, r5, r6, r7, r8, r9]) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000080)) r10 = userfaultfd(0x0) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r11, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r11, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r11) close(r10) 11:54:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner', 0x3d, r2}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x21, 0x0, &(0x7f0000000080)=0x2c0) close(r3) close(r1) 11:54:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000006800000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1200.834335] binder: BINDER_SET_CONTEXT_MGR already set [ 1200.847083] binder_alloc: 22095: binder_alloc_buf, no vma [ 1200.856989] binder: 22095:22100 ioctl 40046207 0 returned -16 11:54:50 executing program 0 (fault-call:5 fault-nth:0): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x800) 11:54:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0xf, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:50 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001600)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000000)=0x7ff, 0xfffffffffffffee0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1200.972869] binder: BINDER_SET_CONTEXT_MGR already set [ 1200.990848] binder_alloc: 22114: binder_alloc_buf, no vma 11:54:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner', 0x3d, r2}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x21, 0x0, &(0x7f0000000080)=0x2c0) close(r3) [ 1201.035549] binder: 22114:22121 ioctl 40046207 0 returned -16 11:54:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000006c00000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1201.086629] FAULT_INJECTION: forcing a failure. [ 1201.086629] name failslab, interval 1, probability 0, space 0, times 0 [ 1201.145132] CPU: 1 PID: 22135 Comm: syz-executor0 Not tainted 4.20.0-rc6+ #154 [ 1201.152517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1201.161888] Call Trace: [ 1201.164497] dump_stack+0x244/0x39d [ 1201.168157] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1201.173377] ? mark_held_locks+0x130/0x130 [ 1201.177649] should_fail.cold.4+0xa/0x17 [ 1201.181754] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1201.186875] ? print_usage_bug+0xc0/0xc0 [ 1201.190947] ? rcu_softirq_qs+0x20/0x20 [ 1201.194947] ? dput.part.25+0x241/0x860 [ 1201.198955] ? zap_class+0x640/0x640 [ 1201.202691] ? mark_held_locks+0x130/0x130 [ 1201.206970] ? find_held_lock+0x36/0x1c0 [ 1201.211075] ? __lock_is_held+0xb5/0x140 [ 1201.215167] ? perf_trace_sched_process_exec+0x860/0x860 [ 1201.220668] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 1201.226159] __should_failslab+0x124/0x180 [ 1201.226194] should_failslab+0x9/0x14 [ 1201.226212] kmem_cache_alloc_trace+0x2d7/0x750 [ 1201.226228] ? kasan_check_read+0x11/0x20 [ 1201.226242] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1201.226266] alloc_pipe_info+0x164/0x5d0 [ 1201.238964] ? pipe_read+0x940/0x940 [ 1201.238988] ? perf_trace_sched_process_exec+0x860/0x860 [ 1201.239004] ? ksys_dup3+0x680/0x680 [ 1201.239043] splice_direct_to_actor+0x786/0x9d0 [ 1201.239061] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1201.239079] ? pipe_to_sendpage+0x400/0x400 [ 1201.239095] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1201.239115] ? do_splice_to+0x190/0x190 [ 1201.239131] ? security_file_permission+0x1c2/0x220 [ 1201.239151] ? rw_verify_area+0x118/0x360 [ 1201.239168] do_splice_direct+0x2d4/0x420 [ 1201.252632] ? splice_direct_to_actor+0x9d0/0x9d0 [ 1201.261800] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1201.261817] ? __sb_start_write+0x1b2/0x370 [ 1201.261836] do_sendfile+0x62a/0xe20 [ 1201.261860] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1201.294326] binder: BINDER_SET_CONTEXT_MGR already set [ 1201.298232] ? __sb_end_write+0xd9/0x110 [ 1201.298268] ? fput+0x130/0x1a0 [ 1201.298285] ? do_syscall_64+0x9a/0x820 [ 1201.298301] ? do_syscall_64+0x9a/0x820 [ 1201.298338] __x64_sys_sendfile64+0x1fd/0x250 [ 1201.298357] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 1201.298385] do_syscall_64+0x1b9/0x820 [ 1201.298400] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1201.298419] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1201.298440] ? trace_hardirqs_on_caller+0x310/0x310 [ 1201.298457] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1201.298477] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 1201.298497] ? __switch_to_asm+0x40/0x70 [ 1201.303153] binder: 22144:22150 ioctl 40046207 0 returned -16 [ 1201.307505] ? __switch_to_asm+0x34/0x70 [ 1201.307529] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1201.307553] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1201.307566] RIP: 0033:0x457659 [ 1201.307582] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1201.307591] RSP: 002b:00007f33e00efc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1201.307607] RAX: ffffffffffffffda RBX: 00007f33e00efc90 RCX: 0000000000457659 [ 1201.307615] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1201.307624] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1201.307634] R10: 0000000000000800 R11: 0000000000000246 R12: 00007f33e00f06d4 [ 1201.307643] R13: 00000000004c3e0b R14: 00000000004d6c20 R15: 0000000000000004 [ 1201.357204] binder_alloc: 22144: binder_alloc_buf, no vma 11:54:51 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:54:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x13, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x400000)=nil, 0x400000, 0x8, 0x32, r0, 0x57) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000080)) accept4$nfc_llcp(r3, &(0x7f00000000c0), &(0x7f0000000140)=0x60, 0x80800) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000001200000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:51 executing program 0 (fault-call:5 fault-nth:1): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x800) 11:54:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x4e21, @local}}) close(r1) 11:54:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000030000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1201.739347] binder: BINDER_SET_CONTEXT_MGR already set [ 1201.750946] binder_alloc: 22161: binder_alloc_buf, no vma [ 1201.772288] binder: 22161:22170 ioctl 40046207 0 returned -16 11:54:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x60, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1201.827637] FAULT_INJECTION: forcing a failure. [ 1201.827637] name failslab, interval 1, probability 0, space 0, times 0 [ 1201.861114] CPU: 0 PID: 22165 Comm: syz-executor0 Not tainted 4.20.0-rc6+ #154 [ 1201.868527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1201.877884] Call Trace: [ 1201.880487] dump_stack+0x244/0x39d [ 1201.884130] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1201.889321] ? __kernel_text_address+0xd/0x40 [ 1201.893834] should_fail.cold.4+0xa/0x17 [ 1201.897894] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1201.902999] ? save_stack+0x43/0xd0 [ 1201.906623] ? kasan_kmalloc+0xc7/0xe0 [ 1201.910511] ? kmem_cache_alloc_trace+0x152/0x750 [ 1201.915339] ? alloc_pipe_info+0x164/0x5d0 [ 1201.919558] ? zap_class+0x640/0x640 [ 1201.923299] ? __x64_sys_sendfile64+0x1fd/0x250 [ 1201.927963] ? do_syscall_64+0x1b9/0x820 [ 1201.932053] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1201.937406] ? find_held_lock+0x36/0x1c0 [ 1201.941480] ? __lock_is_held+0xb5/0x140 [ 1201.945557] ? perf_trace_sched_process_exec+0x860/0x860 [ 1201.951004] __should_failslab+0x124/0x180 [ 1201.955254] should_failslab+0x9/0x14 [ 1201.959047] __kmalloc+0x2e0/0x760 [ 1201.962571] ? kmem_cache_alloc_trace+0x353/0x750 [ 1201.967405] ? kasan_check_read+0x11/0x20 [ 1201.971558] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 11:54:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner', 0x3d, r2}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x21, 0x0, &(0x7f0000000080)=0x2c0) [ 1201.976839] ? alloc_pipe_info+0x2ce/0x5d0 [ 1201.981089] alloc_pipe_info+0x2ce/0x5d0 [ 1201.985151] ? pipe_read+0x940/0x940 [ 1201.988862] ? perf_trace_sched_process_exec+0x860/0x860 [ 1201.994306] ? ksys_dup3+0x680/0x680 [ 1201.998038] splice_direct_to_actor+0x786/0x9d0 [ 1202.002722] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1202.008294] ? pipe_to_sendpage+0x400/0x400 [ 1202.012627] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1202.017654] ? do_splice_to+0x190/0x190 [ 1202.021632] ? security_file_permission+0x1c2/0x220 [ 1202.026647] ? rw_verify_area+0x118/0x360 [ 1202.030781] do_splice_direct+0x2d4/0x420 [ 1202.034912] ? splice_direct_to_actor+0x9d0/0x9d0 [ 1202.039755] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1202.045307] ? __sb_start_write+0x1b2/0x370 [ 1202.049622] do_sendfile+0x62a/0xe20 [ 1202.053342] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1202.057931] ? __sb_end_write+0xd9/0x110 [ 1202.062000] ? fput+0x130/0x1a0 [ 1202.065304] ? do_syscall_64+0x9a/0x820 [ 1202.069299] ? do_syscall_64+0x9a/0x820 [ 1202.073258] __x64_sys_sendfile64+0x1fd/0x250 [ 1202.077765] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 1202.082377] do_syscall_64+0x1b9/0x820 [ 1202.086299] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1202.091672] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1202.096614] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1202.101444] ? trace_hardirqs_on_caller+0x310/0x310 [ 1202.106458] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1202.111475] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1202.116522] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1202.121370] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1202.126542] RIP: 0033:0x457659 [ 1202.129732] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1202.148631] RSP: 002b:00007f33e0110c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1202.156324] RAX: ffffffffffffffda RBX: 00007f33e0110c90 RCX: 0000000000457659 [ 1202.163572] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1202.170847] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 11:54:52 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xe0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000140)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) r5 = getegid() mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x1205881, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@smackfsdef={'smackfsdef'}}]}}) [ 1202.178126] R10: 0000000000000800 R11: 0000000000000246 R12: 00007f33e01116d4 [ 1202.185383] R13: 00000000004c3e0b R14: 00000000004d6c20 R15: 0000000000000004 [ 1202.238381] binder: BINDER_SET_CONTEXT_MGR already set 11:54:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000050000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1202.266847] binder_alloc: 22183: binder_alloc_buf, no vma [ 1202.288107] binder: 22183:22187 ioctl 40046207 0 returned -16 [ 1202.297199] binder_transaction: 18 callbacks suppressed [ 1202.297218] binder: 22183:22191 transaction failed 29189/-3, size 0-26388279066624 line 2973 11:54:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x53, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1202.433278] binder: 22206:22210 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1202.454694] binder_alloc_mmap_handler: 5 callbacks suppressed [ 1202.454709] binder_alloc: binder_alloc_mmap_handler: 22206 20001000-20004000 already mapped failed -16 [ 1202.477213] binder: BINDER_SET_CONTEXT_MGR already set [ 1202.482935] binder: 22206:22210 ioctl 40046207 0 returned -16 [ 1202.486142] binder: 22206:22213 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1202.498347] binder_release_work: 19 callbacks suppressed [ 1202.498351] binder: undelivered TRANSACTION_ERROR: 29201 [ 1202.510062] binder: undelivered TRANSACTION_ERROR: 29189 11:54:52 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:54:52 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0xf2c4e07c3f2075c0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r4) write(r0, &(0x7f00000001c0)="0b5526c764dfcf674b177345cbac9c4de44a446cea43862a5c268c492d298aaa0e3bbdb48deca094927753affdfaca9723a2fbe49fd68d8d46f728156e4c5c6adf342c88f017c7fef4aca3bc104cce0cf3d4baa83fba759b8b253ce837ae4aff377c2f0f3b57dde895e700db7b6b29257c0428b95222feafe1dc45a170878ccebd0db0a658f6d366536963536b7fba14ba2a1bd84468af7dbdfcfe527c1e74eab13b19c083edee94181fae", 0xab) close(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f00000002c0), r6}}, 0x18) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)=0x0) write$P9_RGETLOCK(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32=r7, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:54:52 executing program 0 (fault-call:5 fault-nth:2): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x800) 11:54:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000020000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x480, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1202.652847] binder: 22220:22225 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1202.681490] FAULT_INJECTION: forcing a failure. [ 1202.681490] name failslab, interval 1, probability 0, space 0, times 0 [ 1202.695539] binder_alloc: binder_alloc_mmap_handler: 22220 20001000-20004000 already mapped failed -16 [ 1202.713608] CPU: 1 PID: 22230 Comm: syz-executor0 Not tainted 4.20.0-rc6+ #154 [ 1202.720980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1202.730324] Call Trace: [ 1202.732947] dump_stack+0x244/0x39d [ 1202.736632] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1202.741859] should_fail.cold.4+0xa/0x17 [ 1202.745952] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1202.751093] ? __lock_acquire+0x62f/0x4c20 [ 1202.755355] ? zap_class+0x640/0x640 [ 1202.759077] ? find_held_lock+0x36/0x1c0 [ 1202.763132] ? __lock_is_held+0xb5/0x140 [ 1202.766594] binder: 22220:22231 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1202.767229] ? __lock_acquire+0x62f/0x4c20 [ 1202.776430] binder: undelivered TRANSACTION_ERROR: 29201 [ 1202.780042] ? perf_trace_sched_process_exec+0x860/0x860 [ 1202.780060] ? mark_held_locks+0x130/0x130 [ 1202.780084] __should_failslab+0x124/0x180 [ 1202.780102] should_failslab+0x9/0x14 [ 1202.780118] kmem_cache_alloc_node_trace+0x270/0x740 [ 1202.780142] __kmalloc_node+0x3c/0x70 [ 1202.796398] binder: undelivered TRANSACTION_ERROR: 29189 [ 1202.799501] kvmalloc_node+0x65/0xf0 [ 1202.799525] iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 1202.799563] ? check_preemption_disabled+0x48/0x280 [ 1202.799582] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1202.799601] ? copyin+0x100/0x100 [ 1202.799615] ? rcu_softirq_qs+0x20/0x20 [ 1202.799629] ? unwind_dump+0x190/0x190 [ 1202.799654] ? is_bpf_text_address+0xd3/0x170 11:54:52 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:54:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000010000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1202.799673] ? kernel_text_address+0x79/0xf0 [ 1202.856582] ? __kernel_text_address+0xd/0x40 [ 1202.856600] ? unwind_get_return_address+0x61/0xa0 [ 1202.856624] ? __save_stack_trace+0x8d/0xf0 [ 1202.856662] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1202.856687] ? iov_iter_pipe+0xbb/0x2f0 [ 1202.856709] default_file_splice_read+0x1db/0xb20 [ 1202.856728] ? __kmalloc+0x15b/0x760 [ 1202.875474] ? alloc_pipe_info+0x2ce/0x5d0 [ 1202.875488] ? splice_direct_to_actor+0x786/0x9d0 [ 1202.875509] ? do_syscall_64+0x1b9/0x820 [ 1202.875525] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1202.875548] ? percpu_ref_put_many+0x11c/0x260 [ 1202.875565] ? iter_file_splice_write+0x1050/0x1050 [ 1202.875581] ? zap_class+0x640/0x640 [ 1202.875602] ? kasan_check_read+0x11/0x20 [ 1202.875618] ? zap_class+0x640/0x640 [ 1202.875637] ? rcu_softirq_qs+0x20/0x20 [ 1202.906650] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1202.906666] ? fsnotify+0x50e/0xef0 [ 1202.906693] ? __init_waitqueue_head+0x9e/0x150 [ 1202.906712] ? fsnotify_first_mark+0x350/0x350 [ 1202.906728] ? __fsnotify_parent+0xcc/0x430 [ 1202.906742] ? __might_sleep+0x95/0x190 [ 1202.906758] ? fsnotify+0xef0/0xef0 [ 1202.906788] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1202.906808] ? selinux_file_permission+0x90/0x540 [ 1202.906830] ? security_file_permission+0x1c2/0x220 [ 1202.920121] ? iter_file_splice_write+0x1050/0x1050 [ 1202.920139] do_splice_to+0x12e/0x190 [ 1202.920160] splice_direct_to_actor+0x31c/0x9d0 [ 1202.920177] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1202.920198] ? pipe_to_sendpage+0x400/0x400 [ 1202.959724] binder: 22243:22247 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1202.962358] ? do_splice_to+0x190/0x190 [ 1202.962375] ? security_file_permission+0x1c2/0x220 [ 1202.962397] ? rw_verify_area+0x118/0x360 [ 1202.962416] do_splice_direct+0x2d4/0x420 [ 1202.962436] ? splice_direct_to_actor+0x9d0/0x9d0 [ 1202.962459] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1202.982138] binder_alloc: binder_alloc_mmap_handler: 22243 20001000-20004000 already mapped failed -16 [ 1202.982335] ? __sb_start_write+0x1b2/0x370 [ 1202.982358] do_sendfile+0x62a/0xe20 [ 1202.982387] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1202.982407] ? __sb_end_write+0xd9/0x110 [ 1202.999577] binder: BINDER_SET_CONTEXT_MGR already set [ 1203.000745] ? fput+0x130/0x1a0 [ 1203.000762] ? do_syscall_64+0x9a/0x820 [ 1203.000785] ? do_syscall_64+0x9a/0x820 [ 1203.000807] __x64_sys_sendfile64+0x1fd/0x250 [ 1203.000826] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 1203.000851] do_syscall_64+0x1b9/0x820 [ 1203.022339] binder: 22243:22249 transaction failed 29189/-3, size 0-26388279066624 line 2973 11:54:52 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)={0x0, @speck128, 0x2, "4ac21a921eae7322"}) close(r1) [ 1203.022614] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1203.022635] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1203.022659] ? trace_hardirqs_on_caller+0x310/0x310 [ 1203.027619] binder: 22243:22247 ioctl 40046207 0 returned -16 [ 1203.031644] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1203.031664] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 1203.031678] ? __switch_to_asm+0x40/0x70 [ 1203.031691] ? __switch_to_asm+0x34/0x70 [ 1203.031712] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1203.031734] entry_SYSCALL_64_after_hwframe+0x49/0xbe 11:54:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner', 0x3d, r2}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) 11:54:53 executing program 0 (fault-call:5 fault-nth:3): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x800) 11:54:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000a00000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:53 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:54:53 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x17, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1203.031746] RIP: 0033:0x457659 [ 1203.031761] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1203.031769] RSP: 002b:00007f33e00efc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1203.031791] RAX: ffffffffffffffda RBX: 00007f33e00efc90 RCX: 0000000000457659 [ 1203.031800] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1203.031809] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1203.031818] R10: 0000000000000800 R11: 0000000000000246 R12: 00007f33e00f06d4 [ 1203.031831] R13: 00000000004c3e0b R14: 00000000004d6c20 R15: 0000000000000004 [ 1203.047094] binder: undelivered TRANSACTION_ERROR: 29201 [ 1203.226239] binder: undelivered TRANSACTION_ERROR: 29189 11:54:53 executing program 5: read(0xffffffffffffffff, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 1203.346407] binder: 22260:22264 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1203.385562] binder_alloc: binder_alloc_mmap_handler: 22260 20001000-20004000 already mapped failed -16 [ 1203.399869] binder: 22260:22273 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1203.435770] binder: BINDER_SET_CONTEXT_MGR already set [ 1203.453339] binder: 22260:22264 ioctl 40046207 0 returned -16 [ 1203.453625] binder: undelivered TRANSACTION_ERROR: 29201 [ 1203.466765] FAULT_INJECTION: forcing a failure. [ 1203.466765] name fail_page_alloc, interval 1, probability 0, space 0, times 0 11:54:53 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0xb, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1203.499489] CPU: 0 PID: 22267 Comm: syz-executor0 Not tainted 4.20.0-rc6+ #154 [ 1203.506877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1203.511150] binder: undelivered TRANSACTION_ERROR: 29189 [ 1203.516235] Call Trace: [ 1203.516262] dump_stack+0x244/0x39d [ 1203.516296] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1203.516330] should_fail.cold.4+0xa/0x17 [ 1203.537224] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1203.542343] ? is_bpf_text_address+0xac/0x170 11:54:53 executing program 5: read(0xffffffffffffffff, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 11:54:53 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000340)="9ee5163235c711f575e835f4b0df3957d809f8ee67a59df226a494f29c6f699ac229eaa2538f66962c0194b5932ef120a8bef44f1ece60884f21cb93413f02ed6fe6019984d61c98cb901df7e0c19ab20cdc263e8774d74e9b00ce49368f224c2a9f2eb3bc27613d39e190e85604784598", 0x71, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000200)={0x0, 0x7}) setxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=@sha1={0x1, "c2b8a7068b9c13916a6927841732f0a031790949"}, 0x15, 0x1) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000180)=""/64) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000300)={0x1, 0x1ff}) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000280), &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x9, 0x0, &(0x7f00000001c0)) close(r4) r5 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x401, 0x220082) ioctl$SG_GET_KEEP_ORPHAN(r5, 0x2288, &(0x7f0000000080)) close(r3) [ 1203.546869] ? zap_class+0x640/0x640 [ 1203.550593] ? lock_downgrade+0x900/0x900 [ 1203.554751] ? check_preemption_disabled+0x48/0x280 [ 1203.559791] ? zap_class+0x640/0x640 [ 1203.563523] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1203.568485] ? kasan_check_read+0x11/0x20 [ 1203.572648] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1203.577924] ? rcu_softirq_qs+0x20/0x20 [ 1203.581886] ? __lock_is_held+0xb5/0x140 [ 1203.585949] ? lock_release+0xa00/0xa00 [ 1203.589923] ? perf_trace_sched_process_exec+0x860/0x860 [ 1203.595366] ? __might_sleep+0x95/0x190 [ 1203.599370] __alloc_pages_nodemask+0x366/0xea0 [ 1203.604049] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 1203.609160] ? default_file_splice_read+0x1db/0xb20 [ 1203.614160] ? do_splice_to+0x12e/0x190 [ 1203.618120] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 1203.623127] ? check_preemption_disabled+0x48/0x280 [ 1203.628148] ? __lock_is_held+0xb5/0x140 [ 1203.632197] ? __kmalloc_node+0x3c/0x70 [ 1203.636155] ? __kmalloc_node+0x3c/0x70 [ 1203.640116] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1203.645119] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1203.650677] alloc_pages_current+0x173/0x350 [ 1203.655092] push_pipe+0x3ff/0x7a0 [ 1203.658636] ? __kmalloc_node+0x50/0x70 [ 1203.662600] iov_iter_get_pages_alloc+0x938/0x15a0 [ 1203.667538] ? check_preemption_disabled+0x48/0x280 [ 1203.672540] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1203.677455] ? copyin+0x100/0x100 [ 1203.680893] ? rcu_softirq_qs+0x20/0x20 [ 1203.684847] ? unwind_dump+0x190/0x190 [ 1203.688723] ? is_bpf_text_address+0xd3/0x170 [ 1203.693205] ? kernel_text_address+0x79/0xf0 [ 1203.697601] ? __kernel_text_address+0xd/0x40 [ 1203.702098] ? unwind_get_return_address+0x61/0xa0 [ 1203.707025] ? __save_stack_trace+0x8d/0xf0 [ 1203.711340] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1203.716343] ? iov_iter_pipe+0xbb/0x2f0 [ 1203.720304] default_file_splice_read+0x1db/0xb20 [ 1203.725132] ? __kmalloc+0x15b/0x760 [ 1203.728831] ? alloc_pipe_info+0x2ce/0x5d0 [ 1203.733048] ? splice_direct_to_actor+0x786/0x9d0 [ 1203.737877] ? do_syscall_64+0x1b9/0x820 [ 1203.741927] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1203.747293] ? percpu_ref_put_many+0x11c/0x260 [ 1203.751881] ? iter_file_splice_write+0x1050/0x1050 [ 1203.756881] ? zap_class+0x640/0x640 [ 1203.760608] ? kasan_check_read+0x11/0x20 [ 1203.764748] ? zap_class+0x640/0x640 [ 1203.768449] ? rcu_softirq_qs+0x20/0x20 [ 1203.772420] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1203.777944] ? fsnotify+0x50e/0xef0 [ 1203.781561] ? __init_waitqueue_head+0x9e/0x150 [ 1203.786223] ? fsnotify_first_mark+0x350/0x350 [ 1203.790800] ? __fsnotify_parent+0xcc/0x430 [ 1203.795108] ? __might_sleep+0x95/0x190 [ 1203.799070] ? fsnotify+0xef0/0xef0 [ 1203.802686] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1203.807692] ? selinux_file_permission+0x90/0x540 [ 1203.812523] ? security_file_permission+0x1c2/0x220 [ 1203.817526] ? iter_file_splice_write+0x1050/0x1050 [ 1203.822529] do_splice_to+0x12e/0x190 [ 1203.826319] splice_direct_to_actor+0x31c/0x9d0 [ 1203.830988] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1203.836511] ? pipe_to_sendpage+0x400/0x400 [ 1203.840819] ? do_splice_to+0x190/0x190 [ 1203.844796] ? security_file_permission+0x1c2/0x220 [ 1203.849813] ? rw_verify_area+0x118/0x360 [ 1203.853970] do_splice_direct+0x2d4/0x420 [ 1203.858120] ? splice_direct_to_actor+0x9d0/0x9d0 [ 1203.862951] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1203.868482] ? __sb_start_write+0x1b2/0x370 [ 1203.872806] do_sendfile+0x62a/0xe20 [ 1203.876511] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1203.881083] ? __sb_end_write+0xd9/0x110 [ 1203.885144] ? fput+0x130/0x1a0 [ 1203.888436] ? do_syscall_64+0x9a/0x820 [ 1203.892411] ? do_syscall_64+0x9a/0x820 [ 1203.896380] __x64_sys_sendfile64+0x1fd/0x250 [ 1203.900863] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 1203.905438] do_syscall_64+0x1b9/0x820 [ 1203.909313] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1203.914679] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1203.919603] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1203.924446] ? trace_hardirqs_on_caller+0x310/0x310 [ 1203.929450] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1203.934453] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1203.939457] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1203.944317] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1203.949489] RIP: 0033:0x457659 [ 1203.952663] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1203.971545] RSP: 002b:00007f33e0110c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1203.979248] RAX: ffffffffffffffda RBX: 00007f33e0110c90 RCX: 0000000000457659 [ 1203.986501] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1203.993746] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 11:54:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000000a0000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1204.001009] R10: 0000000000000800 R11: 0000000000000246 R12: 00007f33e01116d4 [ 1204.008272] R13: 00000000004c3e0b R14: 00000000004d6c20 R15: 0000000000000004 11:54:54 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x9, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={r3, 0x4}, &(0x7f0000000100)=0x8) close(r2) close(r1) [ 1204.120065] binder: 22291:22295 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1204.143677] binder_alloc: binder_alloc_mmap_handler: 22291 20001000-20004000 already mapped failed -16 11:54:54 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner', 0x3d, r2}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) socket$inet6_sctp(0xa, 0x1, 0x84) [ 1204.181915] binder: BINDER_SET_CONTEXT_MGR already set [ 1204.193041] binder: 22291:22295 ioctl 40046207 0 returned -16 [ 1204.204687] binder_alloc_new_buf_locked: 4 callbacks suppressed [ 1204.204695] binder_alloc: 22291: binder_alloc_buf, no vma 11:54:54 executing program 5: read(0xffffffffffffffff, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 11:54:54 executing program 0 (fault-call:5 fault-nth:4): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x800) [ 1204.228850] binder: undelivered TRANSACTION_ERROR: 29201 [ 1204.241053] binder: undelivered TRANSACTION_ERROR: 29189 11:54:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x22, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000480000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:54 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner', 0x3d, r2}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) 11:54:54 executing program 5: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:54:54 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r2) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x9, 0x0, &(0x7f0000000040)) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RXATTRWALK(r4, &(0x7f00000003c0)={0xf, 0x1f, 0x2}, 0xf) r5 = accept(r0, &(0x7f0000000400)=@ethernet, &(0x7f0000000480)=0x80) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r6, 0x10, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4010) getpeername$netlink(r5, &(0x7f0000000600), &(0x7f0000000640)=0xc) close(r3) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000280)={0x3, @win={{0x1, 0xffffffff, 0x9, 0x100}, 0x7, 0x6, &(0x7f0000000080)={{0x7, 0xffffffffffff4c8d, 0x6f, 0x5}, &(0x7f0000000000)={{0x5, 0xff, 0x5, 0x81}}}, 0xfac, &(0x7f00000000c0)="11102df217442f07bd21edc00ad36ad3cfc36f2bcc4e44be6d187c9f6f8c12db1b34533ab23b0e89025874112147bb9d897442793da4d8a9ef7fab6ce45316a24a074a07aadd7bceaf2fca2b8abf11cf4372e0e4912d4bf21b9ecd7ac936f51e373dea80588fa2155fe5774ef104998f966099fbcf1de855223e88fd2357117b431f017e37875995dd03579b09a4a2c1af1e107db004d0766dff87b6ae42d36a91c2eb5ed86500bcfd35763c009da7de7b7c6db3964f51fc02fa57ee28a5953780eeab53c1747df08d3f44208c41f92d958d9225471cd4f0e978ff7fb9769f909da21f3d"}}) close(r1) [ 1204.464825] binder_alloc: binder_alloc_mmap_handler: 22317 20001000-20004000 already mapped failed -16 [ 1204.481850] FAULT_INJECTION: forcing a failure. [ 1204.481850] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1204.484501] binder: BINDER_SET_CONTEXT_MGR already set [ 1204.495082] CPU: 0 PID: 22330 Comm: syz-executor0 Not tainted 4.20.0-rc6+ #154 [ 1204.506530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1204.515883] Call Trace: [ 1204.515907] dump_stack+0x244/0x39d [ 1204.515929] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1204.515959] should_fail.cold.4+0xa/0x17 [ 1204.515980] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1204.515999] ? is_bpf_text_address+0xac/0x170 [ 1204.516041] ? zap_class+0x640/0x640 [ 1204.516056] ? lock_downgrade+0x900/0x900 [ 1204.516074] ? check_preemption_disabled+0x48/0x280 [ 1204.516090] ? zap_class+0x640/0x640 [ 1204.516124] ? rcu_read_unlock_special+0x1c0/0x1c0 11:54:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000740000000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1204.528194] binder_alloc: 22317: binder_alloc_buf, no vma [ 1204.531566] ? kasan_check_read+0x11/0x20 [ 1204.531583] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1204.531598] ? rcu_softirq_qs+0x20/0x20 [ 1204.531624] ? __lock_is_held+0xb5/0x140 [ 1204.531652] ? lock_release+0xa00/0xa00 [ 1204.531687] ? perf_trace_sched_process_exec+0x860/0x860 [ 1204.556150] binder: 22317:22327 ioctl 40046207 0 returned -16 [ 1204.557847] ? __might_sleep+0x95/0x190 [ 1204.557870] __alloc_pages_nodemask+0x366/0xea0 [ 1204.557888] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 1204.557908] ? default_file_splice_read+0x1db/0xb20 [ 1204.619685] ? do_splice_to+0x12e/0x190 [ 1204.623658] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 1204.628678] ? check_preemption_disabled+0x48/0x280 [ 1204.633690] ? __lock_is_held+0xb5/0x140 [ 1204.637745] ? __kmalloc_node+0x3c/0x70 [ 1204.641708] ? __kmalloc_node+0x3c/0x70 [ 1204.645677] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1204.650708] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1204.656263] alloc_pages_current+0x173/0x350 [ 1204.660703] push_pipe+0x3ff/0x7a0 [ 1204.664242] ? __kmalloc_node+0x50/0x70 [ 1204.668220] iov_iter_get_pages_alloc+0x938/0x15a0 [ 1204.673151] ? check_preemption_disabled+0x48/0x280 [ 1204.678153] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1204.683082] ? copyin+0x100/0x100 [ 1204.686541] ? rcu_softirq_qs+0x20/0x20 [ 1204.690521] ? unwind_dump+0x190/0x190 [ 1204.694417] ? is_bpf_text_address+0xd3/0x170 [ 1204.698911] ? kernel_text_address+0x79/0xf0 [ 1204.703319] ? __kernel_text_address+0xd/0x40 [ 1204.707834] ? unwind_get_return_address+0x61/0xa0 [ 1204.712767] ? __save_stack_trace+0x8d/0xf0 [ 1204.717098] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1204.722114] ? iov_iter_pipe+0xbb/0x2f0 [ 1204.726090] default_file_splice_read+0x1db/0xb20 [ 1204.730929] ? __kmalloc+0x15b/0x760 [ 1204.734627] ? alloc_pipe_info+0x2ce/0x5d0 [ 1204.738843] ? splice_direct_to_actor+0x786/0x9d0 [ 1204.743686] ? do_syscall_64+0x1b9/0x820 [ 1204.747731] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1204.753088] ? percpu_ref_put_many+0x11c/0x260 [ 1204.757667] ? iter_file_splice_write+0x1050/0x1050 [ 1204.762704] ? zap_class+0x640/0x640 [ 1204.766413] ? kasan_check_read+0x11/0x20 [ 1204.770559] ? zap_class+0x640/0x640 [ 1204.774260] ? rcu_softirq_qs+0x20/0x20 [ 1204.778252] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1204.783779] ? fsnotify+0x50e/0xef0 [ 1204.787394] ? __init_waitqueue_head+0x9e/0x150 [ 1204.792055] ? fsnotify_first_mark+0x350/0x350 [ 1204.796621] ? __fsnotify_parent+0xcc/0x430 [ 1204.800926] ? __might_sleep+0x95/0x190 [ 1204.804884] ? fsnotify+0xef0/0xef0 [ 1204.808495] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1204.813506] ? selinux_file_permission+0x90/0x540 [ 1204.818370] ? security_file_permission+0x1c2/0x220 [ 1204.823379] ? iter_file_splice_write+0x1050/0x1050 [ 1204.828387] do_splice_to+0x12e/0x190 [ 1204.832182] splice_direct_to_actor+0x31c/0x9d0 [ 1204.836877] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1204.842421] ? pipe_to_sendpage+0x400/0x400 [ 1204.846744] ? do_splice_to+0x190/0x190 [ 1204.850701] ? security_file_permission+0x1c2/0x220 [ 1204.855709] ? rw_verify_area+0x118/0x360 [ 1204.859862] do_splice_direct+0x2d4/0x420 [ 1204.864006] ? splice_direct_to_actor+0x9d0/0x9d0 [ 1204.868852] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1204.874428] ? __sb_start_write+0x1b2/0x370 [ 1204.878754] do_sendfile+0x62a/0xe20 [ 1204.882462] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1204.887054] ? __sb_end_write+0xd9/0x110 [ 1204.891149] ? fput+0x130/0x1a0 [ 1204.894414] ? do_syscall_64+0x9a/0x820 [ 1204.898374] ? do_syscall_64+0x9a/0x820 [ 1204.902344] __x64_sys_sendfile64+0x1fd/0x250 [ 1204.906854] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 1204.911441] do_syscall_64+0x1b9/0x820 [ 1204.915314] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1204.920675] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1204.925608] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1204.930463] ? trace_hardirqs_on_caller+0x310/0x310 [ 1204.935461] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1204.940518] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1204.945567] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1204.950407] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1204.955604] RIP: 0033:0x457659 [ 1204.958800] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1204.977694] RSP: 002b:00007f33e00cec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1204.985394] RAX: ffffffffffffffda RBX: 00007f33e00cec90 RCX: 0000000000457659 [ 1204.992662] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1204.999914] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 1205.007173] R10: 0000000000000800 R11: 0000000000000246 R12: 00007f33e00cf6d4 [ 1205.014435] R13: 00000000004c3e0b R14: 00000000004d6c20 R15: 0000000000000004 11:54:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x3, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1205.126820] binder_alloc: binder_alloc_mmap_handler: 22342 20001000-20004000 already mapped failed -16 [ 1205.142875] binder: BINDER_SET_CONTEXT_MGR already set [ 1205.149947] binder: 22342:22343 ioctl 40046207 0 returned -16 [ 1205.156512] binder_alloc: 22342: binder_alloc_buf, no vma [ 1205.165167] __ntfs_error: 46 callbacks suppressed 11:54:55 executing program 5: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) [ 1205.165178] ntfs: (device loop3): parse_options(): Unrecognized mount option fsname. 11:54:55 executing program 0 (fault-call:5 fault-nth:5): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x800) 11:54:55 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x141000, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000180)={0x0, 0x100000000}) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x7f, 0x1, 0x5a4, "7dda9118790f4b1fdfc6e793f2c3979f", "6b6a34a7cba47b472f6a7801953acc9fa46d4ae06cc2530c33a146d894fe7e13b75b4436b54aacfc2e6874726eb224b9da52c41c87c4c1bf8f3e105d0d0894df00b12de99956c6a64fc216ebd0cfeef4274d2b58499f50a4fd9d3d28510c8eb7d13a2b3cd1cb684cf422"}, 0x7f, 0x2) 11:54:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000200000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1205.204202] ntfs: (device loop3): parse_options(): Unrecognized mount option ^/]. [ 1205.242637] ntfs: (device loop3): parse_options(): Unrecognized mount option measure. [ 1205.273694] ntfs: (device loop3): parse_options(): Unrecognized mount option audit. [ 1205.282392] ntfs: (device loop3): parse_options(): Unrecognized mount option fowner. [ 1205.291203] ntfs: (device loop3): parse_options(): Unrecognized mount option appraise_type. [ 1205.302188] ntfs: (device loop3): parse_options(): Unrecognized mount option obj_user. [ 1205.310831] ntfs: (device loop3): parse_options(): Unrecognized mount option . 11:54:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x32, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:55 executing program 5: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:54:55 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) [ 1205.383367] binder_alloc: binder_alloc_mmap_handler: 22360 20001000-20004000 already mapped failed -16 [ 1205.405970] binder: BINDER_SET_CONTEXT_MGR already set [ 1205.422359] binder_alloc: 22360: binder_alloc_buf, no vma [ 1205.473592] binder: 22360:22362 ioctl 40046207 0 returned -16 11:54:55 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000)=0x2000000, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 11:54:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000006800000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:55 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) [ 1205.613954] ntfs: (device loop3): parse_options(): Unrecognized mount option fsname. [ 1205.641233] binder_alloc: binder_alloc_mmap_handler: 22389 20001000-20004000 already mapped failed -16 [ 1205.643315] ntfs: (device loop3): parse_options(): Unrecognized mount option ^/]. 11:54:55 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) 11:54:55 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00', 0x5) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000100)={r4, r0, 0x7}) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r6) close(r5) 11:54:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x2, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1205.701240] binder: BINDER_SET_CONTEXT_MGR already set [ 1205.709406] binder: 22389:22395 ioctl 40046207 0 returned -16 [ 1205.730231] binder_alloc: 22389: binder_alloc_buf, no vma 11:54:56 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x800) 11:54:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:54:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000700000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) 11:54:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x7, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:56 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0xdc8baef632594278, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000280)={0x0, @reserved}) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x8000) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x1, 0x9, 0xfffffffffffffffa, 0x5, 0x0, 0x4, 0x200, 0x5, 0x200, 0x6, 0x1, 0x4, 0x3f, 0x10001, 0x73, 0x3ff, 0x2e06, 0x3, 0x8, 0xfff, 0xff, 0xfffffffffffffffd, 0x2e, 0x7, 0x5, 0x2, 0x7, 0x9, 0x5, 0x3c, 0x1000, 0x3, 0x25, 0x8, 0x401, 0x0, 0x0, 0x3, 0x3, @perf_bp={&(0x7f0000000080), 0x4}, 0x4000, 0xffffffff, 0x8, 0x9, 0x0, 0x3, 0xffff}, 0x0, 0xf, 0xffffffffffffff9c, 0x2) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x800, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x800, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r4) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000340)={0x9, 0x6, 0x4c, 0x7, 0x3, 0x6, 0x40, 0x8, 0x4, 0xfffffffffffffffe}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000380)={0x5, 0x0, 0x4, 0x49, {}, {0x1, 0x8, 0xfffffffffffffffe, 0x5, 0x1, 0x1, "fe0512a8"}, 0x1000, 0x3, @userptr=0x3, 0x4}) close(r3) 11:54:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000001200112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) [ 1206.269236] binder_alloc: binder_alloc_mmap_handler: 22423 20001000-20004000 already mapped failed -16 [ 1206.281693] binder: BINDER_SET_CONTEXT_MGR already set [ 1206.287521] binder_alloc: 22423: binder_alloc_buf, no vma [ 1206.293165] binder: 22423:22428 ioctl 40046207 0 returned -16 11:54:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) 11:54:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x15, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:56 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) futex(&(0x7f0000000000)=0x2, 0x8c, 0x2, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)=0x2, 0x2) syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x145400) pipe2(&(0x7f0000000140), 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x2102, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1206.499658] binder: BINDER_SET_CONTEXT_MGR already set [ 1206.517683] binder_alloc: 22449: binder_alloc_buf, no vma 11:54:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) [ 1206.541040] binder: 22449:22457 ioctl 40046207 0 returned -16 11:54:57 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 11:54:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000007a00112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) 11:54:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x30, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:57 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:54:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r1, &(0x7f0000000080)="b318dc3508145a5618878cace359a45a905a29a3607e8638b1ffe6a9fd92619dfb8bfff305c134c558d4781e2ef578a2e6ca767f8cb5222861442628d598a978913411d04309617da7e1af09d82f031395e55278f492163dd72baca7e66083c8e903e7f9a54b280adcfc1815ebd683516b844b3e1e863012ace354c672", 0x7d) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)={0x0, 0x8d, "a0b67c32971d08e5783c287c453719586514150717badaf28529d7f6f968e8171456a379521acca134f51b6df0d6bea9f6b6af84d5250b3f8cf6c8f2731b296ad104c3018391c1a49c956da3859d3a47e9ea0bb7db7922a71e31816abbeca418f5e7c142939d59dfc05b6a1eee21d9cc65db0ace4b8147c08abb0d6a0cae25fbd3239bb543ed8d949986b9fcab"}, &(0x7f0000000280)=0x95) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000002c0)={r3, 0x2}, 0x8) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x3, 0x2, 0x0, 0x2, 0x0, 0x10000, 0x40004, 0x4, 0x7fffffff, 0x9, 0x4, 0x7, 0x8001, 0x4, 0x81, 0xd638, 0x30000, 0x8, 0x1, 0x3, 0x101, 0x80000000, 0x47ee23a3, 0x3, 0x7f, 0xfff, 0x7, 0x7, 0x100000001, 0x7, 0x3, 0x4, 0x9, 0x8, 0x0, 0xcc, 0x0, 0xffffffffffffff81, 0x7, @perf_config_ext={0x6, 0x5}, 0x8000, 0x1, 0x0, 0xf, 0x9, 0x8, 0x3ff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/mls\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000440)={0x2, 0x50000000000000}, 0x2) r6 = dup(r0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000340)=0x1c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x9, 0x0, &(0x7f0000000040)) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xc0082, 0x0) syz_open_pts(r7, 0xc8a00) close(r4) close(r2) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000100)=""/124) write$FUSE_NOTIFY_INVAL_ENTRY(r7, &(0x7f0000000300)={0x31, 0x3, 0x0, {0x3, 0x10, 0x0, '/dev/sequencer2\x00'}}, 0x31) ioctl$DRM_IOCTL_INFO_BUFS(r7, 0xc0106418, &(0x7f0000000480)={0x7ff, 0xd70, 0x7, 0x7, 0x8, 0x4000000000000}) [ 1207.242231] binder: BINDER_SET_CONTEXT_MGR already set 11:54:57 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) [ 1207.280609] binder_alloc: 22480: binder_alloc_buf, no vma [ 1207.319474] binder: 22480:22488 ioctl 40046207 0 returned -16 [ 1207.367682] binder_transaction: 14 callbacks suppressed [ 1207.367700] binder: 22480:22492 transaction failed 29189/-3, size 0-26388279066624 line 2973 11:54:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) 11:54:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) io_setup(0xffffffff, &(0x7f0000000000)=0x0) io_getevents(r2, 0x53b, 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x989680}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r3) close(r1) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x10) 11:54:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x4, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:57 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:54:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000068000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1207.680402] binder: 22523:22527 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1207.747300] binder_alloc_mmap_handler: 2 callbacks suppressed [ 1207.747317] binder_alloc: binder_alloc_mmap_handler: 22523 20001000-20004000 already mapped failed -16 [ 1207.778928] binder: BINDER_SET_CONTEXT_MGR already set [ 1207.803821] binder: 22523:22534 ioctl 40046207 0 returned -16 [ 1207.803872] binder_alloc: 22523: binder_alloc_buf, no vma [ 1207.842366] binder_release_work: 14 callbacks suppressed [ 1207.842372] binder: undelivered TRANSACTION_ERROR: 29201 [ 1207.854356] binder: 22523:22535 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1207.863560] binder: undelivered TRANSACTION_ERROR: 29189 11:54:57 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0xffff88819aa1c800) 11:54:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) 11:54:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x16, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_execute_func(&(0x7f0000000000)="c4e2193da887c30000f041811f08000000f38caefb000000c44379057b6b0066440f3a154a1901479bdb1ec4836d061d000000007f26d9c1c401ae11d3") setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_stats={0x1d, 0x2, [0x6, 0x9c5]}}) 11:54:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000007a000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1208.135303] binder: 22545:22548 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1208.179396] binder_alloc: binder_alloc_mmap_handler: 22545 20001000-20004000 already mapped failed -16 11:54:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) prctl$PR_MCE_KILL_GET(0x22) close(r1) [ 1208.228200] binder: BINDER_SET_CONTEXT_MGR already set 11:54:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) [ 1208.260800] binder: 22545:22548 ioctl 40046207 0 returned -16 [ 1208.291590] binder_alloc: 22545: binder_alloc_buf, no vma 11:54:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x8, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1208.325543] binder: 22545:22565 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1208.336336] binder: undelivered TRANSACTION_ERROR: 29201 [ 1208.342906] binder: undelivered TRANSACTION_ERROR: 29189 11:54:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000200112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:58 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) [ 1208.479555] binder: 22582:22584 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1208.509958] binder_alloc: binder_alloc_mmap_handler: 22582 20001000-20004000 already mapped failed -16 11:54:58 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:54:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x101002, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r3) close(r2) 11:54:58 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x10) [ 1208.540643] binder: BINDER_SET_CONTEXT_MGR already set 11:54:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x6, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1208.574502] binder: 22582:22584 ioctl 40046207 0 returned -16 [ 1208.640180] binder: undelivered TRANSACTION_ERROR: 29201 11:54:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000004800112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:58 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) 11:54:58 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x810) 11:54:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x9, 0x0, &(0x7f0000000040)) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000080)=""/133, &(0x7f0000000000)=0x85) close(r3) close(r2) [ 1208.786769] binder: 22615:22625 transaction failed 29201/-28, size 0-26388279066624 line 2973 11:54:58 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) 11:54:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x19, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1208.888585] binder_alloc: binder_alloc_mmap_handler: 22615 20001000-20004000 already mapped failed -16 [ 1208.910762] binder: BINDER_SET_CONTEXT_MGR already set [ 1208.930302] binder: 22615:22625 ioctl 40046207 0 returned -16 11:54:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000a000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1208.936799] binder: 22615:22638 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1208.948157] binder: undelivered TRANSACTION_ERROR: 29201 [ 1208.955032] binder: undelivered TRANSACTION_ERROR: 29189 11:54:58 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000080)={0x0, 0x0, {0xffffffffffffffff, 0x3, 0x7, 0x3, 0x5}}) [ 1209.070604] binder: 22652:22654 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1209.107203] binder_alloc: binder_alloc_mmap_handler: 22652 20001000-20004000 already mapped failed -16 [ 1209.119192] binder: BINDER_SET_CONTEXT_MGR already set [ 1209.126206] binder: 22652:22654 ioctl 40046207 0 returned -16 [ 1209.142893] binder: 22652:22658 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1209.151986] binder: undelivered TRANSACTION_ERROR: 29201 [ 1209.162766] binder: undelivered TRANSACTION_ERROR: 29189 11:54:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x2, 0x110, r0, 0x80) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x40101, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x400102, 0x0) getdents64(r3, &(0x7f0000000280)=""/158, 0x4e4b0a300223420d) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x1}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={r4, 0xd3}, 0x8) close(r2) close(r1) 11:54:59 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) 11:54:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000500112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:59 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:54:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x21, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000300000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000)=0x4, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1209.501928] binder_alloc: binder_alloc_mmap_handler: 22669 20001000-20004000 already mapped failed -16 [ 1209.515416] binder_alloc_new_buf_locked: 2 callbacks suppressed [ 1209.515423] binder_alloc: 22669: binder_alloc_buf, no vma [ 1209.523352] binder: undelivered TRANSACTION_ERROR: 29201 11:54:59 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) 11:54:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x14, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1209.668475] binder_alloc: binder_alloc_mmap_handler: 22691 20001000-20004000 already mapped failed -16 [ 1209.697303] binder: BINDER_SET_CONTEXT_MGR already set [ 1209.705056] binder: 22691:22692 ioctl 40046207 0 returned -16 [ 1209.714846] binder_alloc: 22691: binder_alloc_buf, no vma 11:54:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000007400000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:54:59 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) [ 1209.831967] binder_alloc: binder_alloc_mmap_handler: 22706 20001000-20004000 already mapped failed -16 [ 1209.889497] binder: BINDER_SET_CONTEXT_MGR already set [ 1209.936855] binder: 22706:22708 ioctl 40046207 0 returned -16 [ 1209.941041] binder_alloc: 22706: binder_alloc_buf, no vma 11:54:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0xd, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:54:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000100)=@rc={0x1f, {0x5, 0x4, 0x944, 0x7fff, 0x1000, 0x368}, 0x10001}, 0x80) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/mnt\x00') ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x9, 0x0, &(0x7f0000000040)) getrlimit(0xb, &(0x7f00000000c0)) close(r3) close(r1) 11:54:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) 11:54:59 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x800) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x85, 0x0, 0x100e, 0x8, 0x3, 0x4635, 0x6, 0x1}) 11:55:00 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:55:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000a00000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:00 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) 11:55:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0xe, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:55:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9cf, 0x20080) ioctl$KDSETLED(r3, 0x4b32, 0x80) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x4, 0x835, 0x8, 0x73bf, 0x20, 0xffffffff, 0x40, 0xf1, 0xcbae, 0x0, 0x63b, 0x3, 0x4}, {0x457, 0xc, 0x1, 0xf7, 0x2, 0x1, 0x9, 0xfffffffffffffffa, 0x0, 0xffffffffffffffff, 0x0, 0x586, 0x200}, {0x4, 0x2, 0x4, 0x4, 0x2, 0x2, 0x5, 0x20, 0x2, 0x3, 0xfffffffffffffffe, 0x3, 0x4}], 0x18aa}) [ 1210.383421] binder_alloc: binder_alloc_mmap_handler: 22751 20001000-20004000 already mapped failed -16 [ 1210.396532] __ntfs_error: 118 callbacks suppressed [ 1210.396544] ntfs: (device loop3): parse_options(): Unrecognized mount option fsname. [ 1210.411236] ntfs: (device loop3): parse_options(): Unrecognized mount option ^/]. [ 1210.420104] binder: BINDER_SET_CONTEXT_MGR already set [ 1210.420306] ntfs: (device loop3): parse_options(): Unrecognized mount option measure. [ 1210.435222] ntfs: (device loop3): parse_options(): Unrecognized mount option audit. [ 1210.440300] binder: 22751:22754 ioctl 40046207 0 returned -16 [ 1210.443436] ntfs: (device loop3): parse_options(): Unrecognized mount option fowner. [ 1210.459107] ntfs: (device loop3): parse_options(): Unrecognized mount option appraise_type. [ 1210.464076] binder_alloc: 22751: binder_alloc_buf, no vma [ 1210.468923] ntfs: (device loop3): parse_options(): Unrecognized mount option obj_user. 11:55:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r3) close(r0) 11:55:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000001200000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1210.494235] ntfs: (device loop3): parse_options(): Unrecognized mount option . 11:55:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0xc, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:55:00 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) [ 1210.610057] binder_alloc: binder_alloc_mmap_handler: 22774 20001000-20004000 already mapped failed -16 [ 1210.642500] binder_alloc: 22774: binder_alloc_buf, no vma [ 1210.647201] binder: BINDER_SET_CONTEXT_MGR already set 11:55:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000a00112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1210.677002] binder: 22774:22775 ioctl 40046207 0 returned -16 [ 1210.704567] ntfs: (device loop3): parse_options(): Unrecognized mount option fsname. [ 1210.714203] ntfs: (device loop3): parse_options(): Unrecognized mount option ^/]. 11:55:00 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) [ 1210.756851] binder: BINDER_SET_CONTEXT_MGR already set [ 1210.756866] binder_alloc: 22789: binder_alloc_buf, no vma [ 1210.768997] binder: 22789:22790 ioctl 40046207 0 returned -16 11:55:00 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x20000, 0x0) exit(0x0) getsockopt$inet_dccp_buf(r0, 0x21, 0xcc, &(0x7f0000000080)=""/196, &(0x7f0000000180)=0xc4) sendfile(r1, r1, 0x0, 0x800) 11:55:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:55:01 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x18, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:55:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000600112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:01 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) 11:55:01 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x4000000000, 0x12000) sendfile(r0, r0, 0x0, 0x800) [ 1211.246382] binder: BINDER_SET_CONTEXT_MGR already set [ 1211.261809] binder_alloc: 22817: binder_alloc_buf, no vma [ 1211.273343] binder: 22817:22825 ioctl 40046207 0 returned -16 11:55:01 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x3}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000180)={0x3, 0x0, {0x53, 0x1, 0x6, {0x3, 0x9}, {0x1, 0x101}, @period={0x5d, 0x8, 0xd613ba5, 0x7, 0xffffffffffffffb3, {0x9, 0x200, 0x20, 0xfff}, 0x3, &(0x7f0000000140)=[0x100000000, 0xd5b, 0x6]}}, {0x51, 0x0, 0x9, {0x634a, 0x4}, {0x8000}, @const={0x5, {0x4, 0x9, 0x0, 0x2}}}}) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x1, 0x4) accept$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000000)) close(r2) close(r1) recvmsg$kcm(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/127, 0x7f}, {&(0x7f0000000300)=""/223, 0xdf}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f0000000200)=""/4, 0x4}, {&(0x7f00000004c0)=""/37, 0x25}, {&(0x7f0000000500)=""/89, 0x59}, {&(0x7f0000000580)=""/225, 0xe1}], 0x7, &(0x7f0000000700)=""/4096, 0x1000}, 0x10020) 11:55:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000006800112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:01 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) 11:55:01 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x29, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:55:01 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) 11:55:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000004c00112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1211.444753] binder: BINDER_SET_CONTEXT_MGR already set [ 1211.471792] binder: 22842:22845 ioctl 40046207 0 returned -16 [ 1211.481918] binder_alloc: 22842: binder_alloc_buf, no vma 11:55:01 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x200, 0x0) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000080)=0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r3) close(r1) [ 1211.615160] binder: BINDER_SET_CONTEXT_MGR already set [ 1211.624891] binder_alloc: 22861: binder_alloc_buf, no vma [ 1211.643506] binder: 22861:22863 ioctl 40046207 0 returned -16 11:55:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:55:01 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x8400) close(r2) close(r1) 11:55:01 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) 11:55:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000400000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:02 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x0, 0x200000c6000) r1 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x0, r1) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2103001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file0', [{0x20, 'trusted&]/lo'}, {0x20, 'oom_score_adj\x00'}], 0xa, "e84f93fad3a2486e6c261afce241e1d697a5d79867ae82f4d8b73fc10ba3effc85131252385a349122a6d1818f952264213b18ee1eac6a8d37461eb1a0272d041d6a2d103bcb87a41e2a68c446e0e1439b712bc1dcf798b2ad4b1dae5bc9242122ad0ce989f7"}, 0x8d) sendfile(r3, r3, 0x0, 0x800) 11:55:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000000c0)={0x0, @speck128, 0x1, "f348ad9a724e9ed2"}) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x1000, 0xc000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f00000001c0)='/dev/vhci\x00', 0xffffffffffffffff}, 0x30) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x290001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4001fe) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2080, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000140)="99e255b5d996e30aea46953f0646eda1", 0x10) ioctl$SCSI_IOCTL_DOORUNLOCK(r6, 0x5381) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95)=0x2, 0xffffffffffffff66) getsockname(r1, &(0x7f0000000300)=@tipc=@id, &(0x7f0000000380)=0x80) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x9, 0x0, &(0x7f0000000040)) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x100, 0x0) ioctl$FICLONE(r7, 0x40049409, r2) r8 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0xc0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r8, 0x80045300, &(0x7f0000000080)) close(r5) close(r0) [ 1212.118465] binder: BINDER_SET_CONTEXT_MGR already set [ 1212.133131] binder: 22879:22883 ioctl 40046207 0 returned -16 [ 1212.143444] binder_alloc: 22879: binder_alloc_buf, no vma 11:55:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000500000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) 11:55:02 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x8800) close(r2) close(r1) 11:55:02 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f0000000080)=""/223, &(0x7f0000000000)=0xdf) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000380)={0x0, 0x18, 0x10, 0x3, 0x20}, &(0x7f00000003c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000400)={r2, 0x0, 0x30}, &(0x7f0000000440)=0xc) r3 = semget$private(0x0, 0x3, 0x281) semctl$SEM_INFO(r3, 0x7, 0x13, &(0x7f0000000300)=""/87) semctl$GETNCNT(r3, 0x3, 0xe, &(0x7f0000000200)=""/233) sendfile(r1, r1, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000) 11:55:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = shmat(0xffffffffffffffff, &(0x7f0000012000/0x2000)=nil, 0x2000) shmdt(r3) r4 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x100, 0x800) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000480)={0x5, 0x0, [{0x10000, 0xd5, &(0x7f0000000080)=""/213}, {0x4002, 0xef, &(0x7f0000000280)=""/239}, {0x10000, 0x16, &(0x7f0000000180)=""/22}, {0x1, 0x72, &(0x7f00000001c0)=""/114}, {0xf000, 0xcd, &(0x7f0000000380)=""/205}]}) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1212.359035] binder: BINDER_SET_CONTEXT_MGR already set [ 1212.410064] binder: 22910:22916 ioctl 40046207 0 returned -16 11:55:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ntfs(0x0, &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) 11:55:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x2000000004, 0x10, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:55:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000007000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:02 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x11) close(r2) close(r1) 11:55:02 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r2 = syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x10a8f83d, 0x400000) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400100}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xcc, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x80000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x30000000000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) socket$inet6(0xa, 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x4400) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x8) sendfile(r4, r4, 0x0, 0x800) 11:55:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ntfs(0x0, &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) 11:55:02 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x0, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:55:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$KVM_SMI(r1, 0xaeb7) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20080004) close(r2) close(r1) [ 1212.999783] binder_transaction: 21 callbacks suppressed [ 1212.999800] binder: 22955:22964 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1213.030229] binder_alloc_mmap_handler: 6 callbacks suppressed [ 1213.030246] binder_alloc: binder_alloc_mmap_handler: 22955 20001000-20004000 already mapped failed -16 [ 1213.064072] binder: BINDER_SET_CONTEXT_MGR already set [ 1213.088782] binder: 22955:22974 transaction failed 29189/-3, size 0-26388279066624 line 2973 11:55:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)=0xf000000) close(r2) close(r1) 11:55:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000003f000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:03 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xec3, 0x100) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000140)={'bcsf0\x00', 0x5}) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) sendfile(r1, r1, 0x0, 0x800) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000080)) sendto$inet(r0, &(0x7f0000000180)="e6f1c654695ef576b6452d59a6a546af41627de743d17761ceabf56dace972a4ad93d5109d571be273adbc585870762882fe8a5e1a9e1f15f368bff65af71febaf1e8dbd8a987fed31484a5fea654b0305026806f08dd337b6ae53c7cfe39925dee069ad1f5186a6984eeb687f0149c103aed08e8f4e766cc6fbd659a7069418fd9235acef9aeb4cfe2fc7a8f2f67902f42b653af3471f02b347fc1dea17aeb2bfe6a10a699a04c5b0b292ee444f3a12ec6618059bb68654be922551747f7debcc81d020a87423bcd4a935ba9d5275fcce7c56b5f2ce6c324e7993d4efcc56cec47df56c", 0xe4, 0x8000, 0x0, 0x0) 11:55:03 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ntfs(0x0, &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) [ 1213.130741] binder_release_work: 20 callbacks suppressed [ 1213.130748] binder: undelivered TRANSACTION_ERROR: 29201 [ 1213.142766] binder: 22955:22968 ioctl 40046207 0 returned -16 [ 1213.157233] binder: undelivered TRANSACTION_ERROR: 29189 11:55:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7ff, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xc0a) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r2) close(r1) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000080)=0x4, 0x4) [ 1213.281154] binder: 22995:22999 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1213.329978] binder_alloc: binder_alloc_mmap_handler: 22995 20001000-20004000 already mapped failed -16 [ 1213.368381] binder: BINDER_SET_CONTEXT_MGR already set [ 1213.382161] binder: 22995:22999 ioctl 40046207 0 returned -16 [ 1213.393679] binder: 22995:23009 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1213.402789] binder: undelivered TRANSACTION_ERROR: 29201 [ 1213.410173] binder: undelivered TRANSACTION_ERROR: 29189 11:55:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000007a00000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x11000000) close(r2) close(r1) 11:55:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fc) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) r3 = getpgid(0x0) r4 = getpgid(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f00000000c0)={r1, r1, 0x5}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x0, 0x6) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000080)={0xfffffffffffffffe, 0xf000, 0x1000008, 0xc, 0x7}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r5) openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x400000, 0x0) socket$packet(0x11, 0x2, 0x300) 11:55:03 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', 0x0, 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) [ 1213.564429] binder: 23029:23032 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1213.608705] binder_alloc: binder_alloc_mmap_handler: 23029 20001000-20004000 already mapped failed -16 [ 1213.623086] binder: BINDER_SET_CONTEXT_MGR already set [ 1213.628928] binder: 23029:23032 ioctl 40046207 0 returned -16 [ 1213.646255] binder: 23029:23037 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1213.672584] binder: undelivered TRANSACTION_ERROR: 29201 [ 1213.683452] binder: undelivered TRANSACTION_ERROR: 29189 11:55:03 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x0, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:55:03 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x20000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getgid() r1 = socket$inet6(0xa, 0x0, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={[], [], @multicast2}, 0x200000000}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e23, 0x4, @local, 0x10001}}}, 0x84) exit(0x0) sendfile(r2, r2, 0x0, 0x800) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000200)=0x110000, 0x4) 11:55:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000300112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)=0xf00) close(r2) close(r1) 11:55:03 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', 0x0, 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) [ 1213.917747] binder: 23053:23057 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1213.931900] binder_alloc: binder_alloc_mmap_handler: 23053 20001000-20004000 already mapped failed -16 [ 1213.951642] binder: BINDER_SET_CONTEXT_MGR already set [ 1213.962072] binder: 23053:23062 ioctl 40046207 0 returned -16 11:55:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x1100) close(r2) close(r1) 11:55:03 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', 0x0, 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) [ 1213.982859] binder: 23053:23064 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1214.011382] binder: undelivered TRANSACTION_ERROR: 29201 [ 1214.020674] binder: undelivered TRANSACTION_ERROR: 29189 11:55:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000007400112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f1659a300afec43a145f05d87d2d6430f8f8ed4dbcfc006e1903752b721549e22cedaf7796f1ee2ca0cdc0225a024d0e85fa6876fe733040b587b9482611886414126cf91b6515c6964dc947156f6a0531626f7b6235563993ed313227828a803d287824e4fe6bb3ecc479e3baa4a84458dd78bbdd821646892cce0b041f9f85ccd9f03b30bd389140c6ef27", 0x8c, 0x200}, {&(0x7f0000000180)="33adfacd4150482be99ef284affe0c883d25cd95e1e0467a670941ef39d861e47a9fba21b1dcdd140280ff84987b03bceef2b7c083", 0x35, 0xffffffffffffff43}], 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) [ 1214.158215] binder: 23083:23084 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1214.173045] binder_alloc: binder_alloc_mmap_handler: 23083 20001000-20004000 already mapped failed -16 11:55:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x88) close(r2) close(r1) [ 1214.201049] binder: BINDER_SET_CONTEXT_MGR already set [ 1214.208168] binder: 23083:23084 ioctl 40046207 0 returned -16 [ 1214.216868] binder: 23083:23087 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1214.228767] binder: undelivered TRANSACTION_ERROR: 29201 [ 1214.237742] binder: undelivered TRANSACTION_ERROR: 29189 11:55:04 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f0000000080)=""/223, &(0x7f0000000000)=0xdf) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000380)={0x0, 0x18, 0x10, 0x3, 0x20}, &(0x7f00000003c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000400)={r2, 0x0, 0x30}, &(0x7f0000000440)=0xc) r3 = semget$private(0x0, 0x3, 0x281) semctl$SEM_INFO(r3, 0x7, 0x13, &(0x7f0000000300)=""/87) semctl$GETNCNT(r3, 0x3, 0xe, &(0x7f0000000200)=""/233) sendfile(r1, r1, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000) 11:55:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000400112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2000008, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) [ 1214.480470] binder_alloc: binder_alloc_mmap_handler: 23103 20001000-20004000 already mapped failed -16 [ 1214.519856] binder: BINDER_SET_CONTEXT_MGR already set [ 1214.531740] binder: 23103:23106 ioctl 40046207 0 returned -16 [ 1214.538657] binder_alloc_new_buf_locked: 5 callbacks suppressed [ 1214.538665] binder_alloc: 23103: binder_alloc_buf, no vma 11:55:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000100112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) 11:55:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x88000000) close(r2) close(r1) 11:55:04 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f0000000080)=""/223, &(0x7f0000000000)=0xdf) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000380)={0x0, 0x18, 0x10, 0x3, 0x20}, &(0x7f00000003c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000400)={r2, 0x0, 0x30}, &(0x7f0000000440)=0xc) r3 = semget$private(0x0, 0x3, 0x281) semctl$SEM_INFO(r3, 0x7, 0x13, &(0x7f0000000300)=""/87) semctl$GETNCNT(r3, 0x3, 0xe, &(0x7f0000000200)=""/233) sendfile(r1, r1, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000) 11:55:04 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x0, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:55:04 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') exit(0x81) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080)=0x1000, 0x4) sendfile(r1, r1, 0x0, 0x800) [ 1214.873136] binder_alloc: binder_alloc_mmap_handler: 23138 20001000-20004000 already mapped failed -16 [ 1214.893628] binder: BINDER_SET_CONTEXT_MGR already set [ 1214.913120] binder_alloc: 23138: binder_alloc_buf, no vma 11:55:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)=0xff0f0000) close(r2) close(r1) 11:55:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) 11:55:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000048000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1214.944543] binder: 23138:23146 ioctl 40046207 0 returned -16 11:55:04 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f0000000080)=""/223, &(0x7f0000000000)=0xdf) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000380)={0x0, 0x18, 0x10, 0x3, 0x20}, &(0x7f00000003c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000400)={r2, 0x0, 0x30}, &(0x7f0000000440)=0xc) r3 = semget$private(0x0, 0x3, 0x281) semctl$SEM_INFO(r3, 0x7, 0x13, &(0x7f0000000300)=""/87) semctl$GETNCNT(r3, 0x3, 0xe, &(0x7f0000000200)=""/233) sendfile(r1, r1, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000) 11:55:05 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)=0xff0f) close(r2) close(r1) [ 1215.100787] binder_alloc: binder_alloc_mmap_handler: 23166 20001000-20004000 already mapped failed -16 [ 1215.129908] binder: BINDER_SET_CONTEXT_MGR already set [ 1215.139137] binder_alloc: 23166: binder_alloc_buf, no vma [ 1215.145157] binder: 23166:23171 ioctl 40046207 0 returned -16 11:55:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000012000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1215.291318] binder_alloc: binder_alloc_mmap_handler: 23185 20001000-20004000 already mapped failed -16 [ 1215.302005] binder: BINDER_SET_CONTEXT_MGR already set [ 1215.307489] binder: 23185:23187 ioctl 40046207 0 returned -16 [ 1215.310241] binder_alloc: 23185: binder_alloc_buf, no vma 11:55:05 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f0000000080)=""/223, &(0x7f0000000000)=0xdf) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000380)={0x0, 0x18, 0x10, 0x3, 0x20}, &(0x7f00000003c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000400)={r2, 0x0, 0x30}, &(0x7f0000000440)=0xc) r3 = semget$private(0x0, 0x3, 0x281) semctl$SEM_INFO(r3, 0x7, 0x13, &(0x7f0000000300)=""/87) semctl$GETNCNT(r3, 0x3, 0xe, &(0x7f0000000200)=""/233) sendfile(r1, r1, 0x0, 0x800) 11:55:05 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:55:05 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000000)={0x5, [0x5, 0x2614, 0x49, 0x4, 0x7]}) 11:55:05 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@show_sys_files_no='show_sys_files=no'}, {@case_sensitive_yes='case_sensitive=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask', 0x3d, 0x3}}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_continue='errors=continue'}], [{@fsname={'fsname', 0x3d, "8a6367726f7570402c5e2f5d"}}, {@measure='measure'}, {@audit='audit'}, {@fowner_eq={'fowner'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}]}) 11:55:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000006c00112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:05 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x84) close(r2) close(r1) [ 1215.779446] binder_alloc: binder_alloc_mmap_handler: 23203 20001000-20004000 already mapped failed -16 [ 1215.794231] __ntfs_error: 86 callbacks suppressed [ 1215.794242] ntfs: (device loop3): parse_options(): Unrecognized mount option fsname. [ 1215.814687] binder: BINDER_SET_CONTEXT_MGR already set [ 1215.818698] ntfs: (device loop3): parse_options(): Unrecognized mount option ^/]. 11:55:05 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f0000000080)=""/223, &(0x7f0000000000)=0xdf) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000380)={0x0, 0x18, 0x10, 0x3, 0x20}, &(0x7f00000003c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000400)={r2, 0x0, 0x30}, &(0x7f0000000440)=0xc) r3 = semget$private(0x0, 0x3, 0x281) semctl$SEM_INFO(r3, 0x7, 0x13, &(0x7f0000000300)=""/87) semctl$GETNCNT(r3, 0x3, 0xe, &(0x7f0000000200)=""/233) sendfile(r1, r1, 0x0, 0x800) [ 1215.829244] binder: 23203:23212 ioctl 40046207 0 returned -16 [ 1215.831823] ntfs: (device loop3): parse_options(): Unrecognized mount option measure. [ 1215.836574] binder_alloc: 23203: binder_alloc_buf, no vma [ 1215.845931] ntfs: (device loop3): parse_options(): Unrecognized mount option audit. [ 1215.859629] ntfs: (device loop3): parse_options(): Unrecognized mount option fowner. [ 1215.868293] ntfs: (device loop3): parse_options(): Unrecognized mount option appraise_type. 11:55:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000700112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:05 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x1100000000000000) close(r2) close(r1) [ 1215.878968] ntfs: (device loop3): parse_options(): Unrecognized mount option obj_user. [ 1215.901005] ntfs: (device loop3): parse_options(): Unrecognized mount option . 11:55:05 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000340), &(0x7f0000000380)=0x14) getresuid(&(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x4, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap='nodevmap'}, {@cachetag={'cachetag', 0x3d, 'ppp0'}}, {@cachetag={'cachetag', 0x3d, '.wlan1]'}}, {@cache_loose='cache=loose'}, {@posixacl='posixacl'}, {@cache_none='cache=none'}, {@cache_none='cache=none'}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@euid_lt={'euid<', r3}}]}}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write(r1, &(0x7f0000000280)="87f8192068a7fe401eb547e7b6f7a1792235b26c42efdf80cbdf3d84a2f944cf", 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x1, {0xffffffffffff712f, 0x8001, "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", 0xa0, 0x7f, 0x6, 0x259, 0x8, 0x7}, r4}}, 0x128) exit(0x0) syz_open_dev$video(&(0x7f0000000240)='/dev/video#\x00', 0x1, 0x250800) sendfile(r2, r2, 0x0, 0x800) r5 = fcntl$getown(r0, 0x9) rt_sigqueueinfo(r5, 0xe, &(0x7f00000002c0)={0x4, 0xa34}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x6000, 0x0) 11:55:05 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:55:06 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f0000000080)=""/223, &(0x7f0000000000)=0xdf) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000380)={0x0, 0x18, 0x10, 0x3, 0x20}, &(0x7f00000003c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000400)={r2, 0x0, 0x30}, &(0x7f0000000440)=0xc) r3 = semget$private(0x0, 0x3, 0x281) semctl$SEM_INFO(r3, 0x7, 0x13, &(0x7f0000000300)=""/87) semctl$GETNCNT(r3, 0x3, 0xe, &(0x7f0000000200)=""/233) sendfile(r1, r1, 0x0, 0x800) [ 1216.024821] binder: BINDER_SET_CONTEXT_MGR already set [ 1216.054501] binder: 23232:23237 ioctl 40046207 0 returned -16 11:55:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000004c000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1216.212727] binder: BINDER_SET_CONTEXT_MGR already set [ 1216.229722] binder_alloc: 23255: binder_alloc_buf, no vma [ 1216.236703] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 1216.245809] binder: 23255:23261 ioctl 40046207 0 returned -16 11:55:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000006000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x8800000000000000) close(r2) close(r1) 11:55:06 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:55:06 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:55:06 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f0000000080)=""/223, &(0x7f0000000000)=0xdf) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000380)={0x0, 0x18, 0x10, 0x3, 0x20}, &(0x7f00000003c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000400)={r2, 0x0, 0x30}, &(0x7f0000000440)=0xc) r3 = semget$private(0x0, 0x3, 0x281) semctl$SEM_INFO(r3, 0x7, 0x13, &(0x7f0000000300)=""/87) sendfile(r1, r1, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000) 11:55:06 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0xbfc, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0xfffffffffffffffc, 0x9) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) r2 = msgget(0x2, 0x100) msgsnd(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000000000000e4c293f20220c2c50a1d5ec229add9ad6aa5237621f60fc40f574bf74a88d01ea51d11d29eb6c6da004aab49c77647c001e943271130ba4683d7982869f6b6a77f72022d7ef0185349726582fd336f1b5eec33da91cb453880"], 0x52, 0x800) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64EXEC\x00', &(0x7f0000000080)='\x00', 0x1, 0x2) sendfile(r1, r1, 0x0, 0x800) [ 1216.579343] binder: BINDER_SET_CONTEXT_MGR already set [ 1216.592744] binder_alloc: 23276: binder_alloc_buf, no vma [ 1216.607820] binder: 23276:23281 ioctl 40046207 0 returned -16 11:55:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000006c000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:06 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) sendfile(r0, r0, 0x0, 0x800) 11:55:06 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f0000000080)=""/223, &(0x7f0000000000)=0xdf) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000380)={0x0, 0x18, 0x10, 0x3, 0x20}, &(0x7f00000003c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000400)={r2, 0x0, 0x30}, &(0x7f0000000440)=0xc) r3 = semget$private(0x0, 0x3, 0x281) semctl$SEM_INFO(r3, 0x7, 0x13, &(0x7f0000000300)=""/87) sendfile(r1, r1, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000) [ 1216.628631] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 1216.654646] updating oom_score_adj for 23279 (syz-executor0) from 1000 to 1000 because it shares mm with 23288 (syz-executor0). Report if this is unexpected. 11:55:06 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:55:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x1000000) close(r2) close(r1) [ 1216.832137] binder: BINDER_SET_CONTEXT_MGR already set 11:55:06 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f0000000080)=""/223, &(0x7f0000000000)=0xdf) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000380)={0x0, 0x18, 0x10, 0x3, 0x20}, &(0x7f00000003c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000400)={r2, 0x0, 0x30}, &(0x7f0000000440)=0xc) r3 = semget$private(0x0, 0x3, 0x281) semctl$SEM_INFO(r3, 0x7, 0x13, &(0x7f0000000300)=""/87) sendfile(r1, r1, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000) [ 1216.861555] binder_alloc: 23311: binder_alloc_buf, no vma [ 1216.889112] binder: 23311:23313 ioctl 40046207 0 returned -16 11:55:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000004800000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:06 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000002c0)={'vlan0\x00', {0x2, 0x4e22, @broadcast}}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000040)='oom_score_adj\x00') sendmsg$nl_netfilter(0xffffffffffffff9c, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4012}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1c8, 0xb, 0xd, 0x412, 0x70bd27, 0x25dfdbfc, {0x3, 0x0, 0x2}, [@typed={0x8, 0x6d, @u32=0x1}, @generic="3e9971f14a316b0109e52940da0bd0a42d3d3cc1d9ed1cc8ba1e2d5f80898b6df0b8edffab7847af8f24b0f8e19579d4971a8e537c2a65adba50dda16443830ff1e0fb8aa490bec53f9e301fd8ed771f02a2d14abccae11333d8c647d7bece1024380da303007918844e3669f6a7032719126c1ee72790b985bb", @nested={0xc4, 0x2e, [@typed={0xc, 0x6c, @u64=0x6}, @typed={0xb4, 0x88, @binary="e4e653337bfa4ee2ef522e9681b8612d3208deecf7e5c540c357ae1f2af2809f17d8880c1e2729be86dffc22915b3027bfc053919e2ec77c9a466689e01bac1deecf118c154f2b3bb41311ffb27bb95efcf562cf4c496cc0e8ff87b54c7019ffa604463bdb591aca65274a94910692234078d8e276fd840be0b9de3f8528b05c1933aa9677bbce6aec4f96accb2405fe00336f7682094e262d857c8a0b87e477e2840ec8377a203feac88d6f21"}]}, @generic="fb9a980345ef6141ae72c69cc1afc67b345e1af0be71ca14c9c8e5b090152492f2b5d902ad7eeea2501fc2112299ab5e890f7c029cee485a51b9d4e03a91de8e279dfa008c7bb7851d505296b8111c532f27d0dfe734bcad782ab73470c98995a8bee1df9e09769cc3231a51"]}, 0x1c8}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000140)={0x9, @pix={0x51b, 0x10000, 0x55595659, 0x0, 0x2, 0x147, 0xf, 0x80, 0x9bb94bfbb7f6652a, 0x0, 0x0, 0x1}}) exit(0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000005c0)={0x1, "51d754680ffc027397231b28c42176f6ee2624cd06e2e095ec4daa2a15cb332f", 0x3, 0x8, 0x3, 0x320010, 0x20, 0x4}) sendfile(r3, r3, 0x0, 0x800) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000000100)={0x4, 0x3, 0x3, {0x8000, 0xfffffffffffffffd, 0x5, 0x3f}}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'bcsf0\x00', {0x2, 0x4e22, @multicast2}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240), &(0x7f0000000640)=0xfffffffffffffd37) 11:55:07 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) [ 1217.120202] binder: BINDER_SET_CONTEXT_MGR already set [ 1217.144894] binder: 23338:23341 ioctl 40046207 0 returned -16 11:55:07 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:55:07 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0xf2c4e07c3f2075c0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r4) write(r0, &(0x7f00000001c0)="0b5526c764dfcf674b177345cbac9c4de44a446cea43862a5c268c492d298aaa0e3bbdb48deca094927753affdfaca9723a2fbe49fd68d8d46f728156e4c5c6adf342c88f017c7fef4aca3bc104cce0cf3d4baa83fba759b8b253ce837ae4aff377c2f0f3b57dde895e700db7b6b29257c0428b95222feafe1dc45a170878ccebd0db0a658f6d366536963536b7fba14ba2a1bd84468af7dbdfcfe527c1e74eab13b19c083edee94181fae", 0xab) close(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f00000002c0), r6}}, 0x18) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)=0x0) write$P9_RGETLOCK(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32=r7, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000006c00000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:07 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$RTC_UIE_ON(r0, 0x7003) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) sendfile(r1, r1, 0x0, 0x800) 11:55:07 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x84000000) close(r2) close(r1) 11:55:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000003f00112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1217.498402] binder: BINDER_SET_CONTEXT_MGR already set [ 1217.518009] binder_alloc: 23362: binder_alloc_buf, no vma [ 1217.524210] binder: 23362:23369 ioctl 40046207 0 returned -16 11:55:07 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)=0xf) close(r2) close(r1) 11:55:07 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0xf2c4e07c3f2075c0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r4) write(r0, &(0x7f00000001c0)="0b5526c764dfcf674b177345cbac9c4de44a446cea43862a5c268c492d298aaa0e3bbdb48deca094927753affdfaca9723a2fbe49fd68d8d46f728156e4c5c6adf342c88f017c7fef4aca3bc104cce0cf3d4baa83fba759b8b253ce837ae4aff377c2f0f3b57dde895e700db7b6b29257c0428b95222feafe1dc45a170878ccebd0db0a658f6d366536963536b7fba14ba2a1bd84468af7dbdfcfe527c1e74eab13b19c083edee94181fae", 0xab) close(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f00000002c0), r6}}, 0x18) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)=0x0) write$P9_RGETLOCK(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32=r7, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) [ 1217.642960] binder: BINDER_SET_CONTEXT_MGR already set [ 1217.666359] binder: 23380:23382 ioctl 40046207 0 returned -16 11:55:07 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0xf2c4e07c3f2075c0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r4) write(r0, &(0x7f00000001c0)="0b5526c764dfcf674b177345cbac9c4de44a446cea43862a5c268c492d298aaa0e3bbdb48deca094927753affdfaca9723a2fbe49fd68d8d46f728156e4c5c6adf342c88f017c7fef4aca3bc104cce0cf3d4baa83fba759b8b253ce837ae4aff377c2f0f3b57dde895e700db7b6b29257c0428b95222feafe1dc45a170878ccebd0db0a658f6d366536963536b7fba14ba2a1bd84468af7dbdfcfe527c1e74eab13b19c083edee94181fae", 0xab) close(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f00000002c0), r6}}, 0x18) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)=0x0) write$P9_RGETLOCK(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32=r7, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000003000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:07 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x8400000000000000) close(r2) close(r1) 11:55:07 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f0000000080)=""/223, &(0x7f0000000000)=0xdf) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000380)={0x0, 0x18, 0x10, 0x3, 0x20}, &(0x7f00000003c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000400)={r2, 0x0, 0x30}, &(0x7f0000000440)=0xc) r3 = semget$private(0x0, 0x3, 0x281) semctl$GETNCNT(r3, 0x3, 0xe, &(0x7f0000000200)=""/233) sendfile(r1, r1, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000) [ 1217.903802] binder: BINDER_SET_CONTEXT_MGR already set [ 1217.916788] binder: 23397:23399 ioctl 40046207 0 returned -16 [ 1217.923360] binder_alloc: 23397: binder_alloc_buf, no vma [ 1218.086028] IPVS: ftp: loaded support on port[0] = 21 11:55:08 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 11:55:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000600000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:08 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)=0xff0f000000000000) close(r2) close(r1) 11:55:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0xf2c4e07c3f2075c0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r4) write(r0, &(0x7f00000001c0)="0b5526c764dfcf674b177345cbac9c4de44a446cea43862a5c268c492d298aaa0e3bbdb48deca094927753affdfaca9723a2fbe49fd68d8d46f728156e4c5c6adf342c88f017c7fef4aca3bc104cce0cf3d4baa83fba759b8b253ce837ae4aff377c2f0f3b57dde895e700db7b6b29257c0428b95222feafe1dc45a170878ccebd0db0a658f6d366536963536b7fba14ba2a1bd84468af7dbdfcfe527c1e74eab13b19c083edee94181fae", 0xab) close(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f00000002c0), r6}}, 0x18) write$P9_RGETLOCK(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:08 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') fanotify_init(0x0, 0x1) exit(0x0) sendfile(r0, r0, 0x0, 0x800) [ 1218.381463] binder_transaction: 26 callbacks suppressed [ 1218.381480] binder: 23429:23435 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1218.430606] binder_alloc_mmap_handler: 8 callbacks suppressed [ 1218.430626] binder_alloc: binder_alloc_mmap_handler: 23429 20001000-20004000 already mapped failed -16 [ 1218.454946] binder: BINDER_SET_CONTEXT_MGR already set [ 1218.473905] device bridge_slave_1 left promiscuous mode 11:55:08 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80005, 0x0) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/dev\x00') exit(0x0) sendfile(r2, r2, 0x0, 0x800) [ 1218.482664] binder: 23429:23435 ioctl 40046207 0 returned -16 [ 1218.490138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.497225] binder: 23429:23446 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1218.518986] binder_release_work: 26 callbacks suppressed [ 1218.518992] binder: undelivered TRANSACTION_ERROR: 29201 11:55:08 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x100000000000000) close(r2) close(r1) 11:55:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0xf2c4e07c3f2075c0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r4) write(r0, &(0x7f00000001c0)="0b5526c764dfcf674b177345cbac9c4de44a446cea43862a5c268c492d298aaa0e3bbdb48deca094927753affdfaca9723a2fbe49fd68d8d46f728156e4c5c6adf342c88f017c7fef4aca3bc104cce0cf3d4baa83fba759b8b253ce837ae4aff377c2f0f3b57dde895e700db7b6b29257c0428b95222feafe1dc45a170878ccebd0db0a658f6d366536963536b7fba14ba2a1bd84468af7dbdfcfe527c1e74eab13b19c083edee94181fae", 0xab) close(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x2}}, 0x20) write$P9_RGETLOCK(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000004c00000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1218.519150] device bridge_slave_0 left promiscuous mode [ 1218.539125] binder: undelivered TRANSACTION_ERROR: 29189 [ 1218.544446] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.692050] binder: 23468:23471 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1218.703459] binder_alloc: binder_alloc_mmap_handler: 23468 20001000-20004000 already mapped failed -16 [ 1218.715431] binder: BINDER_SET_CONTEXT_MGR already set [ 1218.721265] binder: 23468:23471 ioctl 40046207 0 returned -16 [ 1218.727399] binder: 23468:23473 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1218.736391] binder: undelivered TRANSACTION_ERROR: 29201 11:55:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000005000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1218.742568] binder: undelivered TRANSACTION_ERROR: 29189 [ 1218.764891] team0 (unregistering): Port device team_slave_1 removed [ 1218.779440] team0 (unregistering): Port device team_slave_0 removed [ 1218.796942] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1218.822885] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1218.832177] binder: 23479:23480 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1218.843936] binder_alloc: binder_alloc_mmap_handler: 23479 20001000-20004000 already mapped failed -16 [ 1218.853827] binder: BINDER_SET_CONTEXT_MGR already set [ 1218.860163] binder: 23479:23480 ioctl 40046207 0 returned -16 [ 1218.868603] binder: 23479:23481 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1218.878009] binder: undelivered TRANSACTION_ERROR: 29201 [ 1218.884972] binder: undelivered TRANSACTION_ERROR: 29189 11:55:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000074000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1218.924047] bond0 (unregistering): Released all slaves [ 1218.978359] binder: 23483:23484 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1218.992979] binder_alloc: binder_alloc_mmap_handler: 23483 20001000-20004000 already mapped failed -16 [ 1219.030182] binder: BINDER_SET_CONTEXT_MGR already set [ 1219.035570] binder: 23483:23484 ioctl 40046207 0 returned -16 [ 1219.062239] binder: 23483:23485 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1219.076872] binder: undelivered TRANSACTION_ERROR: 29201 [ 1219.084238] binder: undelivered TRANSACTION_ERROR: 29189 [ 1219.826913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.835422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.843597] device bridge_slave_0 entered promiscuous mode [ 1219.900379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.907099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.915229] device bridge_slave_1 entered promiscuous mode [ 1219.974059] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1220.039439] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1220.220511] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1220.288899] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1220.504571] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1220.512770] team0: Port device team_slave_0 added [ 1220.556769] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1220.564392] team0: Port device team_slave_1 added [ 1220.598797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1220.625868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1220.673184] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1220.680516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1220.691945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1220.730855] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1220.738113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1220.749732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1221.052928] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.059316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1221.065875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.072287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1221.079616] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1222.003452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1222.066419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1222.102447] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1222.193868] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1222.200097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1222.208336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1222.295754] 8021q: adding VLAN 0 to HW filter on device team0 11:55:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)=0xf00000000000000) close(r2) close(r1) 11:55:12 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0xf2c4e07c3f2075c0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r4) write(r0, &(0x7f00000001c0)="0b5526c764dfcf674b177345cbac9c4de44a446cea43862a5c268c492d298aaa0e3bbdb48deca094927753affdfaca9723a2fbe49fd68d8d46f728156e4c5c6adf342c88f017c7fef4aca3bc104cce0cf3d4baa83fba759b8b253ce837ae4aff377c2f0f3b57dde895e700db7b6b29257c0428b95222feafe1dc45a170878ccebd0db0a658f6d366536963536b7fba14ba2a1bd84468af7dbdfcfe527c1e74eab13b19c083edee94181fae", 0xab) close(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x2}}, 0x20) write$P9_RGETLOCK(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000012000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:12 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 11:55:12 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f0000000080)=""/223, &(0x7f0000000000)=0xdf) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000380)={0x0, 0x18, 0x10, 0x3, 0x20}, &(0x7f00000003c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000400)={r2, 0x0, 0x30}, &(0x7f0000000440)=0xc) semctl$GETNCNT(0x0, 0x3, 0xe, &(0x7f0000000200)=""/233) sendfile(r1, r1, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000) 11:55:12 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x1105}, 0xc) exit(0x0) sendfile(r0, r0, 0x0, 0x800) [ 1222.938007] binder: 23744:23754 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1222.950177] binder_alloc: binder_alloc_mmap_handler: 23744 20001000-20004000 already mapped failed -16 [ 1222.962683] binder: BINDER_SET_CONTEXT_MGR already set [ 1222.984997] binder: 23744:23754 ioctl 40046207 0 returned -16 [ 1222.993137] binder_alloc_new_buf_locked: 4 callbacks suppressed [ 1222.993145] binder_alloc: 23744: binder_alloc_buf, no vma [ 1223.011558] binder: 23744:23755 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1223.021196] binder: undelivered TRANSACTION_ERROR: 29201 11:55:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000000006c112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1223.037845] binder: undelivered TRANSACTION_ERROR: 29189 11:55:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:55:12 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0xf2c4e07c3f2075c0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r4) write(r0, &(0x7f00000001c0)="0b5526c764dfcf674b177345cbac9c4de44a446cea43862a5c268c492d298aaa0e3bbdb48deca094927753affdfaca9723a2fbe49fd68d8d46f728156e4c5c6adf342c88f017c7fef4aca3bc104cce0cf3d4baa83fba759b8b253ce837ae4aff377c2f0f3b57dde895e700db7b6b29257c0428b95222feafe1dc45a170878ccebd0db0a658f6d366536963536b7fba14ba2a1bd84468af7dbdfcfe527c1e74eab13b19c083edee94181fae", 0xab) close(r2) write$P9_RGETLOCK(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:13 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f0000000080)=""/223, &(0x7f0000000000)=0xdf) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000380)={0x0, 0x18, 0x10, 0x3, 0x20}, &(0x7f00000003c0)=0x18) semctl$GETNCNT(0x0, 0x3, 0xe, &(0x7f0000000200)=""/233) sendfile(r1, r1, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000) [ 1223.195522] binder_alloc: binder_alloc_mmap_handler: 23776 20001000-20004000 already mapped failed -16 [ 1223.220385] binder: BINDER_SET_CONTEXT_MGR already set [ 1223.232255] binder: 23776:23781 ioctl 40046207 0 returned -16 [ 1223.238494] binder_alloc: 23776: binder_alloc_buf, no vma 11:55:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000012112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:13 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f0000000080)=""/223, &(0x7f0000000000)=0xdf) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) semctl$GETNCNT(0x0, 0x3, 0xe, &(0x7f0000000200)=""/233) sendfile(r1, r1, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000) 11:55:13 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bond_slave_1\x00') getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r3) close(r2) 11:55:13 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0xf2c4e07c3f2075c0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r4) write(r0, &(0x7f00000001c0)="0b5526c764dfcf674b177345cbac9c4de44a446cea43862a5c268c492d298aaa0e3bbdb48deca094927753affdfaca9723a2fbe49fd68d8d46f728156e4c5c6adf342c88f017c7fef4aca3bc104cce0cf3d4baa83fba759b8b253ce837ae4aff377c2f0f3b57dde895e700db7b6b29257c0428b95222feafe1dc45a170878ccebd0db0a658f6d366536963536b7fba14ba2a1bd84468af7dbdfcfe527c1e74eab13b19c083edee94181fae", 0xab) write$P9_RGETLOCK(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) [ 1223.390321] binder_alloc: binder_alloc_mmap_handler: 23795 20001000-20004000 already mapped failed -16 [ 1223.402141] binder: BINDER_SET_CONTEXT_MGR already set [ 1223.415061] binder: 23795:23799 ioctl 40046207 0 returned -16 [ 1223.434516] binder_alloc: 23795: binder_alloc_buf, no vma 11:55:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000068112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1223.440422] binder_transaction: 3 callbacks suppressed [ 1223.440439] binder: 23795:23800 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1223.569764] binder: 23815:23816 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1223.581478] binder_alloc: binder_alloc_mmap_handler: 23815 20001000-20004000 already mapped failed -16 [ 1223.591779] binder: BINDER_SET_CONTEXT_MGR already set [ 1223.597694] binder: 23815:23816 ioctl 40046207 0 returned -16 [ 1223.604057] binder_alloc: 23815: binder_alloc_buf, no vma [ 1223.610057] binder: 23815:23818 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1223.619171] binder_release_work: 4 callbacks suppressed [ 1223.619178] binder: undelivered TRANSACTION_ERROR: 29201 [ 1223.634972] binder: undelivered TRANSACTION_ERROR: 29189 11:55:13 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 11:55:13 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f0000000080)=""/223, &(0x7f0000000000)=0xdf) semctl$GETNCNT(0x0, 0x3, 0xe, &(0x7f0000000200)=""/233) sendfile(r1, r1, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000) 11:55:13 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80402, 0x0) sendfile(r0, r0, 0x0, 0x800) 11:55:13 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000100)={0x4, 0x0, [{0x1, 0x3, 0x9, 0x7ff, 0x81}, {0x0, 0x7fffffff, 0xf8ed, 0x800, 0x7}, {0xc0000000, 0x0, 0xfffffffffffffff8, 0x2, 0x7}, {0x80000007, 0x7fffffff, 0x5, 0x3d5f, 0x101}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x50, 0x0, &(0x7f0000000040)) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x8) close(r3) close(r2) 11:55:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000004c000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1223.811218] binder: 23827:23834 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1223.840104] binder_alloc: binder_alloc_mmap_handler: 23827 20001000-20004000 already mapped failed -16 [ 1223.863927] binder: BINDER_SET_CONTEXT_MGR already set [ 1223.869825] binder: 23827:23834 ioctl 40046207 0 returned -16 [ 1223.876349] binder_alloc: 23827: binder_alloc_buf, no vma [ 1223.887823] binder: 23827:23838 transaction failed 29189/-3, size 0-26388279066624 line 2973 11:55:13 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x3, 0xe, &(0x7f0000000200)=""/233) sendfile(r0, r0, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000) 11:55:13 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d5f11f3d79ba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd558f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828000000000000", 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000100)={0x7}, 0x7) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r0, 0x10, &(0x7f0000000400)={&(0x7f0000000340)=""/159, 0x9f, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r0, 0x10, &(0x7f0000000480)={&(0x7f0000000280)=""/159, 0x9f, r1}}, 0x10) sendfile(r0, r0, &(0x7f00000000c0), 0x7f8) fcntl$setstatus(r0, 0x4, 0x7fe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r2, 0x9}, {r4, 0xa400}], 0x2, &(0x7f00000001c0)={r5, r6+30000000}, &(0x7f0000000200)={0x5d26}, 0x8) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000013e95), 0x4) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x606c00, 0x0) mlockall(0x1) sendmsg$key(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x18, 0x1, 0xa, 0x4, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_sa={0x2, 0x1, 0x4d5, 0x401, 0x3, 0xd9, 0x3, 0x20000001}]}, 0x20}}, 0x10) getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r7) close(r4) 11:55:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000000000a112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1223.920913] binder: undelivered TRANSACTION_ERROR: 29201 [ 1223.929192] binder: undelivered TRANSACTION_ERROR: 29189 [ 1224.054154] binder: 23858:23860 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1224.068286] binder_alloc: binder_alloc_mmap_handler: 23858 20001000-20004000 already mapped failed -16 [ 1224.078448] binder: BINDER_SET_CONTEXT_MGR already set [ 1224.084332] binder: 23858:23860 ioctl 40046207 0 returned -16 [ 1224.090839] binder_alloc: 23858: binder_alloc_buf, no vma [ 1224.099722] binder: 23858:23863 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1224.108949] binder: undelivered TRANSACTION_ERROR: 29201 [ 1224.120491] binder: undelivered TRANSACTION_ERROR: 29189 11:55:14 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) semctl$GETNCNT(0x0, 0x3, 0xe, &(0x7f0000000200)=""/233) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000) 11:55:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000006112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:14 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0xf2c4e07c3f2075c0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x9, 0x0, &(0x7f0000000040)) close(r3) write$P9_RGETLOCK(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) [ 1224.302716] binder: 23870:23875 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1224.324290] binder_alloc: binder_alloc_mmap_handler: 23870 20001000-20004000 already mapped failed -16 [ 1224.350293] binder: BINDER_SET_CONTEXT_MGR already set 11:55:14 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x3, 0xe, &(0x7f0000000200)=""/233) sendfile(r0, r0, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000) [ 1224.403871] binder: undelivered TRANSACTION_ERROR: 29201 [ 1224.410730] binder: 23870:23875 ioctl 40046207 0 returned -16 11:55:14 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:55:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000000000006c0000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1224.674426] binder: 23895:23896 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1224.709915] binder_alloc: binder_alloc_mmap_handler: 23895 20001000-20004000 already mapped failed -16 11:55:14 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$inet6_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) exit(0x0) sendfile(r0, r0, 0x0, 0x800) 11:55:14 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x3, 0xe, &(0x7f0000000200)=""/233) sendfile(r0, r0, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000) [ 1224.742073] binder: BINDER_SET_CONTEXT_MGR already set [ 1224.757880] binder: 23895:23896 ioctl 40046207 0 returned -16 [ 1224.757967] binder_alloc: 23895: binder_alloc_buf, no vma 11:55:14 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x200200, 0x0) r1 = dup3(r0, r0, 0x80000) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x402280, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x200000, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400001) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x5, 0x30, 0x200, 0x8}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r4, 0x10001}, &(0x7f00000002c0)=0x8) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x50, 0x0, &(0x7f0000000040)) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) close(r5) close(r3) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x2, 0x2) 11:55:14 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x3, 0xe, &(0x7f0000000200)=""/233) sendfile(r0, r0, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000) [ 1224.785558] binder: 23895:23900 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1224.796124] binder: undelivered TRANSACTION_ERROR: 29201 [ 1224.817883] binder: undelivered TRANSACTION_ERROR: 29189 11:55:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000005000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:14 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x80000, 0xffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000000)) sendfile(r0, r0, 0x0, 0x800) 11:55:14 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) semctl$GETNCNT(0x0, 0x3, 0xe, &(0x7f0000000200)=""/233) sendfile(r0, r0, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000) [ 1224.960828] binder_alloc: binder_alloc_mmap_handler: 23917 20001000-20004000 already mapped failed -16 [ 1224.989765] binder: BINDER_SET_CONTEXT_MGR already set [ 1224.996935] binder: 23917:23922 ioctl 40046207 0 returned -16 [ 1225.003347] binder_alloc: 23917: binder_alloc_buf, no vma [ 1225.009713] binder: undelivered TRANSACTION_ERROR: 29201 11:55:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000006c000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:15 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0xf2c4e07c3f2075c0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x9, 0x0, &(0x7f0000000040)) write$P9_RGETLOCK(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:15 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="137a175f5f872a348b4ad1ab77906bb87ca1c4876d8a12d236be677347602071d6ce42a42c8ac8c5258a1af434a597222a5b8485312dbdd976ba17c27d96", 0x3e, 0x1d3}, {&(0x7f0000000100)="b1a7c2b362e902cb5a9f52a2033f7d4a23f3ba11b813a6f1e7983fb600ffc6504c0ef57ddb5fa3ac9e6e33a47f047c12e8ab3e7626b21775f55ff4a094919aa783f79f78610be78afad13369e3bc8502ea6cbf7623e2d3906db74bd2342ee02f8023cb44c25903e963e4c634e160222031b691a24a784754fa80c266578b0db24b557281662b3648c4df831ee0f793331d3eaf581972abe7", 0x98, 0xe5e2}, {&(0x7f0000000280)="df791da35bfe57e14b9152e3032e9b3e90355a89af9e0665b3592a5ffad4d031ef24259e793f5280327ce11587d330d2b16436a46669168ecf666085c127fb3712e89806d42edfdf8f4b344b2c381c34338dcb1bcdbe81cae13f2e0b442e7d5f5252fe56284bcb27c7685b8590d64db2048601b1665a2cfd10050e14551efd935a8c73747c49289e234e211dcabc1feff5fc800a1546c6", 0x97, 0x6}], 0x0, &(0x7f0000000400)={[{@gid={'gid', 0x3d, r3}}, {@force='force'}], [{@smackfsdef={'smackfsdef', 0x3d, '&@'}}, {@subj_role={'subj_role'}}, {@appraise_type='appraise_type=imasig'}, {@fsname={'fsname', 0x3d, "73656c662d6e6f646576212a766d6e657431e873656c666d643573756d6c6f5d292d5c"}}, {@obj_user={'obj_user', 0x3d, 'eth1'}}, {@appraise='appraise'}]}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1225.159347] binder_alloc: binder_alloc_mmap_handler: 23938 20001000-20004000 already mapped failed -16 [ 1225.176969] binder: BINDER_SET_CONTEXT_MGR already set [ 1225.182810] binder: 23938:23940 ioctl 40046207 0 returned -16 [ 1225.190692] binder_alloc: 23938: binder_alloc_buf, no vma [ 1225.266117] hfsplus: unable to parse mount options [ 1225.396829] hfsplus: unable to find HFS+ superblock 11:55:15 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000200)=""/233) sendfile(r0, r0, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000) 11:55:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000048112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:15 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:55:15 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x0, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8001) 11:55:15 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000) 11:55:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000005112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1225.604557] binder_alloc: binder_alloc_mmap_handler: 23963 20001000-20004000 already mapped failed -16 [ 1225.614869] binder: BINDER_SET_CONTEXT_MGR already set [ 1225.620876] binder: 23963:23968 ioctl 40046207 0 returned -16 [ 1225.627708] binder_alloc: 23963: binder_alloc_buf, no vma 11:55:15 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xff, 0x80000) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000140)={0x0}) r6 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x60050, 0xffffffffffffff9c, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0xdc, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0x3, 0x2, 0x26}, @flat={0x776a2a85, 0xa, r4, 0x4}], &(0x7f0000000100)=[0x18, 0x30, 0x78, 0x40, 0x38]}}, @transaction={0x40406300, {0x3, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x60, 0x30, &(0x7f00000001c0)=[@flat={0x73622a85, 0xa, r5, 0x2}, @fda={0x66646185, 0x4, 0x1, 0x2a}, @ptr={0x70742a85, 0x1, &(0x7f0000000180), 0x1, 0x2, 0x18}], &(0x7f0000000280)=[0x0, 0x38, 0x20, 0x38, 0x18, 0x18]}}, @increfs={0x40046304, 0x4}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x38, 0x30, &(0x7f00000002c0)=[@fda={0x66646185, 0x0, 0x2, 0x7}, @flat={0x77622a85, 0xa, r6, 0x3}], &(0x7f0000000300)=[0x48, 0x20, 0x78, 0x20, 0x0, 0x38]}, 0xffffffffffff7fff}}], 0xad, 0x0, &(0x7f0000000440)="5e33264d5e76179fbb6f1a611db6d56278402bd9244d5d45ddebae67b46e0b82577fc7425f2eaba6fffcfe00d4ce008e2b5fdbdfd5aeae463a1801e1820083f3d19ccc5277c479a4495056e7f1ba7d2dd453a592e894830416b4a551af1912541af15f55adaf18879fe634e444458e64e5aea8d68ccd9c3acdd42dcd0e77aff1399464ec0b48661c8b5a59185578db8383ee2e9feeeb56e843942b44157bdb0096833a62088dff782506932c9f"}) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1225.751729] binder_alloc: binder_alloc_mmap_handler: 23979 20001000-20004000 already mapped failed -16 [ 1225.770565] binder: BINDER_SET_CONTEXT_MGR already set [ 1225.797094] binder: 23979:23980 ioctl 40046207 0 returned -16 11:55:15 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000) 11:55:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000050000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:15 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x117, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000), r1, 0x0, 0x2, 0x4}}, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x2) sendfile(r2, r2, 0x0, 0x800) [ 1225.987908] binder_alloc: binder_alloc_mmap_handler: 23993 20001000-20004000 already mapped failed -16 11:55:16 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0xf2c4e07c3f2075c0, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r4, 0x820, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x17}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ifb0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:55:16 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000) [ 1226.030583] binder: BINDER_SET_CONTEXT_MGR already set [ 1226.036251] binder: 23993:23994 ioctl 40046207 0 returned -16 11:55:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000480000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1226.192316] binder: BINDER_SET_CONTEXT_MGR already set [ 1226.197979] binder: 24017:24019 ioctl 40046207 0 returned -16 11:55:16 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000) 11:55:16 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000000)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x80401) sendfile(r1, r1, 0x0, 0x800) 11:55:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000080)={0x5, 0x0, [{0xf, 0x5, 0x7, 0x4, 0x8}, {0xf, 0x7fff, 0x8, 0x7, 0x7f}, {0x0, 0x0, 0x7, 0x1, 0x58}, {0xc0000007, 0xfffffffffffff363, 0x3, 0xe27c}, {0xc0000007, 0x2, 0x7, 0x6, 0x81}]}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:55:16 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:55:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000000000000a0000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:16 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x800) 11:55:16 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000) [ 1226.508103] binder: BINDER_SET_CONTEXT_MGR already set [ 1226.523001] binder: 24030:24037 ioctl 40046207 0 returned -16 11:55:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000002000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1226.679354] binder: BINDER_SET_CONTEXT_MGR already set [ 1226.694206] binder: 24058:24063 ioctl 40046207 0 returned -16 11:55:16 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) write$P9_RGETLOCK(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x2c2101) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x118, r4, 0x20, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1800000000000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffff8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER={0x8c, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bpq0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000050}, 0x20008011) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:55:16 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x81]}, &(0x7f0000000080)=0x6) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) sendfile(r1, r1, 0x0, 0x800) 11:55:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000003000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:16 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x400000) 11:55:17 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) [ 1227.074398] binder: BINDER_SET_CONTEXT_MGR already set [ 1227.091933] binder: 24072:24082 ioctl 40046207 0 returned -16 11:55:17 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x2}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:55:17 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:55:17 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x10, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4010) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200044}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x3f}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3c}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x7f}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x1) exit(0x0) sendfile(r2, r2, 0x0, 0x800) 11:55:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000068000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:17 executing program 2: r0 = socket$inet6(0xa, 0x202000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x0, 0x0, 0xff, 0x8001}, 0x20) 11:55:17 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x80400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95)=0xd1, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r0) close(r2) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000013000/0x1000)=nil, &(0x7f0000011000/0x4000)=nil, 0x1000, 0x1}) [ 1227.391001] binder: BINDER_SET_CONTEXT_MGR already set [ 1227.415776] binder: 24105:24111 ioctl 40046207 0 returned -16 11:55:17 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) write$P9_RGETLOCK(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:17 executing program 2: 11:55:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000000004c112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:17 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000080)=0x5, 0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0xc, 0x70bd25, 0x25dfdbfd, {{}, 0x0, 0x4101, 0x0, {0x20, 0x17, {0x9, 0xfffffffffffff5bf, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}}}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8041) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) sendfile(r2, r2, 0x0, 0x800) 11:55:17 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='projid_map\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000080)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xffffffffffffffb7) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000001c0)={@mcast1, r3}, 0x14) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r4) close(r1) 11:55:17 executing program 2: [ 1227.969624] binder: BINDER_SET_CONTEXT_MGR already set [ 1227.984973] binder: 24131:24134 ioctl 40046207 0 returned -16 11:55:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000000000003f0000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1228.117523] binder: BINDER_SET_CONTEXT_MGR already set [ 1228.136503] binder_alloc_new_buf_locked: 8 callbacks suppressed [ 1228.136511] binder_alloc: 24150: binder_alloc_buf, no vma [ 1228.149668] binder: 24150:24154 ioctl 40046207 0 returned -16 11:55:18 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x4) sendfile(r0, r0, 0x0, 0x800) 11:55:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$P9_RGETLOCK(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:18 executing program 2: 11:55:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) futex(&(0x7f0000000200)=0x1, 0x89, 0x2, &(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f0000000280)=0x1, 0x2) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3000008, 0x110, r0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x9d0000, 0x7fffffff, 0x20, [], &(0x7f00000000c0)={0xa10905, 0x7ff, [], @p_u32=&(0x7f0000000080)=0x2}}) close(r2) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x9, 0x2) 11:55:18 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:55:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000680000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000080)) write$P9_RGETLOCK(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:18 executing program 2: [ 1228.342437] binder: BINDER_SET_CONTEXT_MGR already set [ 1228.352393] binder: 24165:24174 ioctl 40046207 0 returned -16 [ 1228.357948] binder_alloc: 24165: binder_alloc_buf, no vma 11:55:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000380)=""/216) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4180, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x8, 0x6, 0x7fffffff, 0xd7f}]}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20008}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0xa03, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f00000001c0), 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r1) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000340)=0x34f, 0xfffffd85) close(r1) 11:55:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000007000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1228.429249] cgroup: fork rejected by pids controller in /syz0 11:55:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:18 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x2, 0x70bd2a, 0x25dfdbff, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8040) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) sendfile(r2, r2, 0x0, 0x800) 11:55:18 executing program 2: [ 1228.542248] binder_transaction: 26 callbacks suppressed [ 1228.542267] binder: 24193:24195 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1228.560528] binder: BINDER_SET_CONTEXT_MGR already set [ 1228.566862] binder: 24193:24195 ioctl 40046207 0 returned -16 [ 1228.574691] binder_alloc: 24193: binder_alloc_buf, no vma [ 1228.581170] binder: 24193:24196 transaction failed 29189/-3, size 0-26388279066624 line 2973 11:55:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000a000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80, 0x0) setns(r2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r3) close(r1) 11:55:18 executing program 2: [ 1228.830850] binder: 24215:24219 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1228.842533] binder_alloc_mmap_handler: 9 callbacks suppressed [ 1228.842550] binder_alloc: binder_alloc_mmap_handler: 24215 20001000-20004000 already mapped failed -16 [ 1228.859532] binder: BINDER_SET_CONTEXT_MGR already set [ 1228.865430] binder: 24215:24219 ioctl 40046207 0 returned -16 [ 1228.865570] binder_alloc: 24215: binder_alloc_buf, no vma [ 1228.877292] binder: 24215:24220 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1228.886286] binder_release_work: 27 callbacks suppressed [ 1228.886294] binder: undelivered TRANSACTION_ERROR: 29201 [ 1228.893060] binder: undelivered TRANSACTION_ERROR: 29189 11:55:19 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) 11:55:19 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000006000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:19 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:55:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x4, 0x807, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000100)=0x401, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x501080, 0x0) epoll_pwait(r2, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x5, &(0x7f00000000c0)={0x7}, 0x8) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x25}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r4) close(r3) 11:55:19 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) [ 1229.205513] binder: 24227:24232 transaction failed 29201/-28, size 0-26388279066624 line 2973 11:55:19 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1229.258296] binder_alloc: binder_alloc_mmap_handler: 24227 20001000-20004000 already mapped failed -16 [ 1229.269525] binder: BINDER_SET_CONTEXT_MGR already set [ 1229.286056] binder: 24227:24232 ioctl 40046207 0 returned -16 [ 1229.304188] binder_alloc: 24227: binder_alloc_buf, no vma [ 1229.316975] binder: 24227:24240 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1229.320056] binder: undelivered TRANSACTION_ERROR: 29201 [ 1229.335141] binder: undelivered TRANSACTION_ERROR: 29189 11:55:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) ptrace$getregset(0x4204, r2, 0x3, &(0x7f0000000100)={&(0x7f00000000c0)=""/2, 0x2}) r3 = socket$nl_crypto(0x10, 0x3, 0x15) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x50, 0x0, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000140)={{0x3, 0x3, 0x1000, 0x3, 0x14}}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x80000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000180)) ioctl$TUNSETLINK(r5, 0x400454cd, 0x33b) close(r4) close(r1) 11:55:19 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000074112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:19 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) sendfile(r1, r1, 0x0, 0x800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x3, r0, 0x1}) 11:55:19 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$LOOP_SET_STATUS64(r0, 0x4c03, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4d770228cfc514cf9bd1015783cb0a5f9deeeb56dd5fd0bc8515dd950ac304ab9924db5614a76cc5eca0aa57b36be9f90fc4d79dcd5905e21be0804db4e5534d", "c550a742ca8b022a2e284cdaf7a3fb7e78c9b611fb0ab18da0631792b91f504c44d4cf2146e542e2948aac708d97a918e21879d8036833c324ee12c074af745b", "95b4737d36fd9312e23713fdb1e816b5f7740c8450815665d3f645caf16acfb3"}) [ 1229.506766] binder: 24260:24265 transaction failed 29201/-28, size 0-26388279066624 line 2973 11:55:19 executing program 2: signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x1f}, 0x8, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={"66696c74657200000000003f00000000000000000000000500", 0x2, 0x1, 0x1a8, [0x0, 0x20000180, 0x200001b0, 0x200001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x220) 11:55:19 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) [ 1229.554099] binder_alloc: binder_alloc_mmap_handler: 24260 20001000-20004000 already mapped failed -16 [ 1229.572739] binder: BINDER_SET_CONTEXT_MGR already set [ 1229.578372] binder_alloc: 24260: binder_alloc_buf, no vma [ 1229.610684] binder: 24260:24270 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1229.620217] binder: undelivered TRANSACTION_ERROR: 29201 [ 1229.627588] kauditd_printk_skb: 1 callbacks suppressed 11:55:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000000c0), 0x19e) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="d001"], 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x4, 0x8, 0xfffffffffffffff9, 0x1, 0x0, 0x0, 0xa, 0x9, 0xffffffffd51dd1f3, 0x51, 0x7, 0x8, 0x5, 0x1000, 0x5, 0x1, 0x6a0, 0x5, 0x3ff, 0x9, 0x4, 0x7ff, 0xcc, 0x7f, 0x9c, 0x2, 0xffffffffffff7fff, 0x91d0000000000000, 0xffffffff, 0x8, 0x0, 0xfffffffffffffff9, 0x5, 0x9, 0xff, 0x10000, 0x0, 0x8, 0x4, @perf_config_ext={0x7fffffff, 0x2}, 0x9011, 0xc8c3, 0xfffffffffffffc01, 0x6, 0x6, 0x100000000, 0x4}, r4, 0xc, 0xffffffffffffffff, 0xa) close(r1) accept4$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14, 0x80000) [ 1229.627618] audit: type=1400 audit(1544874919.532:2447): avc: denied { ioctl } for pid=24261 comm="syz-executor1" path="socket:[190369]" dev="sockfs" ino=190369 ioctlcmd=0x5410 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 1229.672633] binder: 24260:24265 ioctl 40046207 0 returned -16 [ 1229.679934] binder: undelivered TRANSACTION_ERROR: 29189 11:55:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x3, 0x0) read(r0, 0x0, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) 11:55:19 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x680, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x800) 11:55:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000002112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:19 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:19 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 11:55:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1230.089173] binder: 24302:24308 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1230.103961] binder_alloc: binder_alloc_mmap_handler: 24302 20001000-20004000 already mapped failed -16 11:55:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:20 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x2}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1230.138995] binder: BINDER_SET_CONTEXT_MGR already set [ 1230.150225] binder: 24302:24308 ioctl 40046207 0 returned -16 [ 1230.164278] binder_alloc: 24302: binder_alloc_buf, no vma [ 1230.172068] binder: 24302:24313 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1230.182633] binder: undelivered TRANSACTION_ERROR: 29201 [ 1230.193880] binder: undelivered TRANSACTION_ERROR: 29189 11:55:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000000003f112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:20 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0x40}, 0x1) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/107, 0x6b}, {&(0x7f0000000100)=""/38, 0x26}, {&(0x7f0000000140)=""/170, 0xaa}, {&(0x7f0000000200)=""/117, 0x75}, {&(0x7f0000000280)=""/171, 0xab}], 0x5, 0x0) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000a40)={0x0, 0xcfa3, 0x1, 0x4, 0xffffffffffff7fff, 0x1f}, &(0x7f0000000a80)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001a00)={0x0, 0x48, &(0x7f0000001980)=[@in6={0xa, 0x4e20, 0xd381, @loopback, 0x6}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e24, 0x91b8, @loopback, 0x1f}]}, &(0x7f0000001a40)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000003400)={0x1, 0x9, 0x8, 0x1f, 0xb4, 0xff, 0x3, 0x5, 0x0}, &(0x7f0000003440)=0x20) sendmmsg$inet_sctp(r0, &(0x7f0000003500)=[{&(0x7f00000003c0)=@in6={0xa, 0x4e24, 0x100, @loopback, 0x9}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000400)="b06675f0f99326ad79329db2a423f6a8477b94dd278d6f7f16c0aa150fe764cfd1f766c771ef8adfa02e7653908312cdfac4424c5a0cb7a8de335cfa8a4420b33f424804f74bebe11f6236aa1a6f29673d9a8dd1431595e1237999e8dcc29a9457055a365e08001677cc2ed8b8719d93f4439a24cfe22560bd4aa80a57a56141421dc23c7f682b3c0ab1450caa", 0x8d}, {&(0x7f00000004c0)="3a8e737eaadc40350ae8f356b1e17026ea5845590f278476745165da12d1a7151d3517a73110b6a3f33d5902b7f5f5c4ea7fad00c78a65944c891495e16be670807a7e30352fa24ea221668a0499bfe81833ba2d96665623c067df31e51dd4a7365a962e019985ebc25d0488ee5868232f38ff4cb8de00812674703fc06ac99ed0521697115d78151d8b650c7d0431f42bc6", 0x92}], 0x2, 0x0, 0x0, 0x20048090}, {&(0x7f00000005c0)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000000600), 0x0, &(0x7f0000000640)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x8}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}], 0x30, 0x4000884}, {&(0x7f0000000680)=@in6={0xa, 0x4e22, 0x3, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1c}}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f00000006c0)="e7a3a9184fc01aac056256537101eb5d45ac1f2c899ebf6734df4d00db6a654ab55caa708a7cb52a521b002375c25466ac99fe996fe31fb6acd73d14a702b8da451fa8d479704719d4b06e3a10fba389cd9b15c4213ce56ae116630fac5fb79eaaa4f76695c71ea52768b405e9e41ae2a46df6398e60355d55f1af59e512cee7e2d5ef282e93e1664f9ec6aa", 0x8c}, {&(0x7f0000000780)="ab2c291b047b2f7cd7619a7e535d79e46673ea867ba9a3e80d64042c88304833e675dca92e3bbf85f16a789b218b865f24b2f9aea0286ec9dc0c59fc60cf7a826838836ebc3d2dbf9ae89cc82dfba166220efac7193c496a11437664da79415e337ba71d9dbfe9d109c757b09a73140601aaf3dc1d2f664888cc06d069aa23e38b5ae168ec65a9cdd255e496b34efc460b1185ef673180e9aa49544283aaf5d98eb2f3f63741cd914b0b75949a0c5185effa039f59cfceec1fcd24a36bed607455", 0xc1}, {&(0x7f0000000880)="42f849526d7a91fb164468a104cb10b8d700a1a411a7ecc7a91c57734c31e4336ae540a35fdb3150a75b9bc68a088ec63b929e88bad4c9431533f8e375fc000b06cf60a3980942dc20acd6a4b76f17a8c90542bae26cad2393e93ee4cbd6f36504ab", 0x62}], 0x3}, {&(0x7f0000000940)=@in={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000980)="db142bdf7b5371a333cbe95445ce29084ec8ceb700e8bed3ea8c68bb6e09f60bc01b0f11386c", 0x26}, {&(0x7f00000009c0)="c0de4cddb04da6e2266102cae7f6469027a76d554e040ce5ab6a32790a46b3829ab0601420777333e44f77c485120924", 0x30}], 0x2, &(0x7f0000000ac0)=[@authinfo={0x18, 0x84, 0x6, {0x9}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x8, 0x8, 0x81, 0x7f, 0x1, 0xfff, 0x81, r2}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0xfffffffffffffffc}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xff}}], 0x78, 0x10}, {&(0x7f0000000b40)=@in6={0xa, 0x4e23, 0x23ad5a13, @local, 0x10001}, 0x1c, &(0x7f0000001180)=[{&(0x7f0000000b80)="eaad9bf8cf", 0x5}, {&(0x7f0000000bc0)="a1dd8f6fce5afbcbca84faf30f0b0f772d178761c5c79ec4922f7bcdc484c58e21588609ba1182d8b09057ed8e78d6afaa69ff14a86c369d86cd6d5b9a636fb251227e1b475af581995a0ae752ea33131adcbc6cd0d5a915d4f5775e468bbe006a6a667c49508883ea53808ce0af463f087b42a7fcfab04f68d46ceaaacef97315688a8a34cf0d87a82c595e416093221c1a43e04d5994a14ce5de29eb9746aec0abd69bb1ce9bf9fa568859922a265aaef1473d6103b85bd0e64b3c668432695e3bd76b9f516dc25f6b512d34789697ec10541b9f12978b78e6776b10766217efa0fb76c360f8040cd12259357ccb4a8b41", 0xf2}, {&(0x7f0000000cc0)="e7cdcdc984f409448ec155be532b820c5ddc6ba9fc5488bf78d92766ed0e74a3383f3b6f2a5f2c43b767ab3db8201527015a3c4c4c034510d9b8be7296558614c1e1e37c489a9acaaf25ac5462d917bc7171795768391b7f2e4cae971cf972814c06d45424b6110de5fd68f50dab4a7c34317a3bb009a23ec2de2fa49e364fd08e1fb28b381b4e43e1980512f207aa636a03a65b28f07bfce23bb57f462969d611805b2e8a52bb610c478a68ad42ea4ea3a898ae3291485c65a18d61424587fbc6ef126d2d3ad7d056af3964d27f84b084acf2e01ec8ec39383379e6eea78d3cde8f89d84748d84714367d5f254010f0588d73a24a2173", 0xf7}, {&(0x7f0000000dc0)="0c449775ade25612c6c05f94e3d56c473137e73b58b5a9eae1c32254c6eeb1a6f01ba50415bf4dd39c7482ee4974628c", 0x30}, {&(0x7f0000000e00)="96eac9611edaa664a53b82092118acb0dc273e5d200c9182de1423fbf1a3919a2bfa5b9939f85ef3921217b7cc740cc7b55ff286775c27f36109d84f21ed8b268cc7cc7c17d1594f18c51d1d5c2b807c6e71111bf9c3aab77dce26045000882aa7f1615367cf42e326aac61991426e1206b0179a088974c9838bde6b958dd8fe6170c3cc9219b63972a5a5941f6267", 0x8f}, {&(0x7f0000000ec0)="c0f7b97c8e2590d7d41a650cf8c8be8fd88349", 0x13}, {&(0x7f0000000f00)="ba1b871796b7b4a67a7b7e61d414c74d0872bb32ac49e27078db5c4a6637b632a58a38db365398a3058e6a85f9da5980730d0a8558f0b71a32267c7d500d1c48b8260dfcc7f5237f259d5c6d04bbc70e5eba4a201b042bf310a4672c103307c6af23c10bf9786b1eab35fd61ed97c11dcfb5b2e52111b8a826a08836622ddeb3dc1391ee467de5d2fd22e12967027c52fdd6a1d80c8ac83749c1bccef220597b7c2182b17787da9a9b2f000cb786fbb97c5b7d84c99ae3a09296726b584510adfc8ea7dfc2c296ddb0bbb24336e318dd7df05aebc6e5a44829c321891460f2aee403b92b192ca9d170e2bccaa1", 0xed}, {&(0x7f0000001000)="4a808aa3fd1470126e9647f272f42d98c7cf9ab34909aa2e178e1df735d512813bfdfd1f1ca9aabc51dee68208303cb8c90555f7e72b8f0cda4feddca594c208ed079680659f00da8e5431121da80ceac8d072ac12b933fda22ded6b90bd3b5720897dbd352bc8a203d52208", 0x6c}, {&(0x7f0000001080)="90fb98f37e9a01f3d3804d82f7b6e87a509ef738f788599dab2f9c8d8bd48fe1e3900e5fe3f165a82d5609f69afd228c7297b180d8207e64212bb3cbcc0a2a24d119eb8847c82830cc4d080f8f6a66a348c5f0830e0c4117708565901fe65deba1f5ff659f9d764ac0c8d0f49377e9c8eec220899882535dc2d70c55ec3c94d7aaef94a82660d3ac5aa71c4a98e63b5453b7bc52da19a55336993c5fd49bfa375632679ee7cf7d90df8380b240b61dacab66eed3eab3d233511f79e185c778b9392b02178e628bbbb16c6978ef0b7cf9c043a771ea84c02af1", 0xd9}], 0x9, &(0x7f0000001240)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x6}}], 0x18}, {&(0x7f0000001280)=@in={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f00000018c0)=[{&(0x7f00000012c0)="8d7ab13744f6aaf572a8a01375e9d2431e8236f71d2832e202b7ca9fc77d726bafdc98e92f6c1a20dad6d36f4b21fda33a9a2187652d0f55f09b93b7d3a980db54d28646a7196b4598a4ad47ce43fd89be8720d087d239838b640ca34cf41b4171b4351fc2722c536b86fc7d867760c3a682c67db6a87bba57a7e486b0551e7160500756c0559da402530fd01568255be4b936bceeb9e7d481906db4b1280bf61b63ea3cb940b6d0743a6dc962f440ee659a49165b97b3b3b2afec6781b21d2375f5eb0a86c6caa9390dcd95ad49afe40dd2bd1868df55362985eede7407d3e5758df38c4ffd2addc3fdd38b172e929ad4", 0xf1}, {&(0x7f00000013c0)="6835c818b5383699c953df31b13541bfdfbd44956c5c4f34e162399980aa72e70c5677e6f270c8bdbc20a5242105043e275ae0fbe857aeb2cb57894cbb9db93d7ef17408277057380e4cfb8bf86cac3f2f7218d8256347a67107a72209413d1704e2708cce1562e37296e5005fe09081b56162341b7fe2a6a53fc89c8ef3abeb083dc2ca4aa37e85d724228f5f340d9a0d988b0bc9b68bd5ec5983757b57ea04794dc83455822c2f4e7a8a510eb08541e6138a00bf09d835dde1f558ff", 0xbd}, {&(0x7f0000001480)="a35d887bc1f748790b7a65c554f6b930744639a8b3184e89ddcc73e5f36a8963f44fb58dc9c3a650e90a0c87f162bef9ac408a45cbd2ac4eb121617a01bf26d9c7a451e29a16d7ec306a642bd7330f04b79f8cfa7f", 0x55}, {&(0x7f0000001500)="165a3363b1", 0x5}, {&(0x7f0000001540)="dc8b68ab843f47030615b458136130395fc58fa2e80afe2a4878d2118e9af410bb211a24a359423373f54807ead71db0994c26239bc3253b05d167e9da44573cebfd0fda75103b00b1f2f8349dba78820dafd7e3346f29d8cc45d9048396d7aea9e74465ebe61faa2417ab777827ddda57235d9ca11d12c9a6d4c75d2980bc73c81ded7ca75c6e5f7e6c34d747029e911ee49260d903cafa734b0448d92f810d1320971665cbad242af822660c344ab5c7cfb0f302bd75cff06b3d0b471a7470d8ef019050979efedefc3dd335fbc149b992f3b8e0d893bcb90f65f040271fadb294140bd538875d77bc177cdeebfce0197e74c51c07e0", 0xf7}, {&(0x7f0000001640)="59c9c520496a9b6b533fa96bbaa1b8347da9599d6efdbea734a1b952d5f44cb5fac22bd07a9819b5fcb928d6e873311c5d479f8127440ee5ffde2176e4596105901c41539485e56164db5bd15cef8fe503181f1b0436f930927b37c5441d63eb8c79df0fa284d98495ca53fc2de6f87269", 0x71}, {&(0x7f00000016c0)="d4ff088ae32cbd9a99ea01ae64671432655bcccc2b840df9562015a260bfc9d6c0ebe5e1f513e0ee03df66268e3e188519a2748f7061763ce63d90594c632969b0376e7654b29547725264f294b15ab71f53f28a9afb9780424cf313fb9c4055b5810864fbca47db6d8a586171b82a20003a9681c7493b0c08e236436074a1c66805c13c95d415ae", 0x88}, {&(0x7f0000001780)="6d1416a7d1419f3da2fa36bd6581ebb44536adc07f50beb1d5140657f7f4986d2b1a7113e201624c7334fe655fa2befe583cec25eaca27d9a3fac88cd4259a", 0x3f}, {&(0x7f00000017c0)="5e07c65befe85fc799f4f96315c4c530674f50574c25725ce32e7bd7724ac248b57c9513e0c261db16bb7ec84a3317449fdb0f48014a69277ed55227765ecb84f795fd99902123ae8685ffcd0ce04ab54e3e32e3fea7f2efc64833345cf27c8b3a042013abe8f4bc6b231cefb5d15f5a2bf8900726514c72a5d1a014b3826a5dd0f901185a1fb2dc4099b5f2966a106a0dd83792777650", 0x97}, {&(0x7f0000001880)="aa4ae920bb71251dfcc87e9ef6e0a227b53aecf78d39b8bac8", 0x19}], 0xa, &(0x7f0000001a80)=[@dstaddrv6={0x20, 0x84, 0x8, @remote}, @sndinfo={0x20, 0x84, 0x2, {0xa218, 0x200, 0x8b, 0x8, r3}}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0xbcca}}], 0x70, 0x20000000}, {&(0x7f0000001b00)=@in={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000001d00)=[{&(0x7f0000001b40)="7215002dda6f7055a862b647234f55bdc55892bc122479bc42a7752001d0fc69592f117066f7a2d2b8c8600bce4b98a422c341f695aa5608570cdc7b70f330673952a05ed8393b9a15e0aae716c6a1fe860c26ec646658ce0120e502df99da32a0f344ce777f403d935e43a2d5333570cb608b807b3afbdde8ad5f940ac0912b94a11285cb513ed46a26ad908a58dc33", 0x90}, {&(0x7f0000001c00)="7a9db6a3545a42f37a0be9421215378bf2142fd86b467a9209e92d7d367f2885518e92d47db6f78da97ead410c814f35056429706d0fc23cbb886621dfdb52a02dd9eb437c4a58b951c2c47e6f77720a6bc3b7478ba3e5176893e24922bfe78abdcc5076d9586cc8cc7f08fd43818abcc0397f83544dde45bcf669f50b4f716e3d19ff593a7c8105b10faf247a5759eb291b1aead4ab2a073db9f6c95f7f1ef542d8b647f91edd3bbdeffdc770166c868aab124069e81a6eb8912c71f9b26d6ae4feb348849c604ad265eb19c874e5d7aae4f964", 0xd4}], 0x2, &(0x7f0000003740)=ANY=[@ANYBLOB="180000000000000084000000000000000000394b0900090018000000000000008400000000000000050006000400050018000000000000008400000005000000000020000101000018000047d31600000000008400000007000000000000000000000020000000000000008400000008000000fe80000000000000000000000000001218000000000000008400000000000000c1c5faff3f000300180000000000000084000000060000000180000000000000"], 0xb0, 0x40}, {&(0x7f0000001e00)=@in6={0xa, 0x4e24, 0x80000000, @loopback, 0x100000000}, 0x1c, &(0x7f0000001e80)=[{&(0x7f0000001e40)="667d0e16f86fb10c4b62875108d5d5de8c0ea9ce9412d3ad6587157d9416d9db3c94846502061f2e311efff417", 0x2d}], 0x1, &(0x7f0000001ec0)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @init={0x18, 0x84, 0x0, {0x1, 0x9, 0x1f, 0x9}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x12}}], 0x80, 0x4000}, {&(0x7f0000001f40)=@in6={0xa, 0x4e22, 0x7, @mcast1, 0x9}, 0x1c, &(0x7f0000003240)=[{&(0x7f0000001f80)="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", 0x1000}, {&(0x7f0000002f80)="3b1cb0ed9537582bea8da9922fa689a01e41f2870f6df594e4ba44f7c14991ee50f9583fab84e9701ea8747d80da38a7e6bd1eb3f75f3bb7ed88b5477154de587eb0700dda3fe76f2bc1e7b0294662ca45685c7edde392ec0d7082baac04e7728210781518a79e1e821e5e006bf72a8bce6165b41c5f00cf5cc30f34d88b5bf0fb74cadb93aa3b014d2def83dc970ec021356ccf679f5f7284e2ba1d96779b854a9ba19947722275431007ca28997aca2298e87270f25a8df76c02164f4503dda528351e0ea3913a2896", 0xca}, {&(0x7f0000003080)="b41773ca2cd55a9f7c7db3d96dd6baa2e39af02dc8134cee3436973c4bc1e5c44bc2c6068765eb61e18ee6d3fa523ec0764f5355ac81360b42ace74999162c9e1e22bbd341e1cfd574a7cbf7e2862542f065e0f87a1ce7b7729877411b15e4d0bc950f2fffd2ca98ee542af4f67be13a425921fc622c6d6790679d207ad9c721b6f221e5c4cfb47eaaa1e1c11a9fb312b763c37abcd83caef22a92617bee276efb870493a991b18cb1d9629f285e1c", 0xaf}, {&(0x7f0000003140)="4a6adb6710bfc5c1a6808e0d12ccd9e971f40f3fb3802c8a6287f76629ef6e87859ee0937639ff5d2c47894999aa23862072239a474b8e7db8832d242b6d219d8946c95783f1eb7c00421dc5dc1f5e54c22b59a17dfaa744d7a968c5725ea194a2abad0e36ab7221035233726ad808a29842773a96b44eecc9b67b1fac4a78914223ce8c20d83232f307baf21605cee42016739ea65266e4eb56f3c0ec585c4a6ad6aec92d9119271446827badb3e9b8d32313a48ac98bd038c7c9ac1ea6ed48a07f526c10b11ff047dbce8937340a", 0xcf}], 0x4, 0x0, 0x0, 0x4000}, {&(0x7f0000003280)=@in={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000033c0)=[{&(0x7f00000032c0)="3e95b264ecd7d68c6e6aaccf5a9b5882056c43e8aaa3860e4ca673b070ffe9d7fdebe83c367522f70a13a6dff7", 0x2d}, {&(0x7f0000003300)="08898f5e6ffb7cae2e35d67f67ab316821641d19f3679cb6236fa88f6f5239cceefb5e7159cbeb6b9dc943f69e91950931ea38b2eee9ac00d6e22d902397ad6bebab7d74e2f2bad9c451519e687a4e4f36f634352736a8920499eba10a6c61b6d8177d75d60ae5a6e60c5008e1748eed34e3108109d7c430d9bd464746c543b3da0b41fc1233c0295f0ad0425c08ab8a494c92ac49e4a00d81ed3f6fa16fd01496ac0969aa0ecd01811c3d1d914dd9e59b376093bf", 0xb5}], 0x2, &(0x7f0000003480)=[@authinfo={0x18, 0x84, 0x6, {0x7}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x8200, 0x1c, 0x3ab7, r4}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x1a}}], 0x68, 0x20008001}], 0xa, 0x4000010) sendfile(r1, r1, 0x0, 0x800) 11:55:20 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) getresgid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) chown(&(0x7f0000000000)='./file0\x00', r0, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x400000000001}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = request_key(&(0x7f0000000340)='.request_key_auth\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='&\x00', 0x0) add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000280)="1e5dc7ddfa497b05f4fdf5859f892f13d2bd68b3e9971b10d8cdf989922683c6c4727a0aae2f4b47ca9c05c54e83c6694c8588e6d19f8d557f1b74b41c9e4a5396ec1ac9947bcd13308213fef042f095cabcd39c3ed5e748e4b8069185f5ab2195740a4c82f6f34ff870c39faf56edd94611934cb9f55680185e3d5ea574f1cc897b25635e1112fadc40a34d7d635296", 0x90, r5) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r4) close(r3) 11:55:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:20 executing program 2 (fault-call:2 fault-nth:0): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) [ 1230.371562] binder_alloc: binder_alloc_mmap_handler: 24339 20001000-20004000 already mapped failed -16 [ 1230.423040] binder_alloc: 24339: binder_alloc_buf, no vma [ 1230.444543] binder: undelivered TRANSACTION_ERROR: 29201 [ 1230.452331] binder: undelivered TRANSACTION_ERROR: 29189 11:55:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0xfffffffffffffffd, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:55:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000007a000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1230.473723] FAULT_INJECTION: forcing a failure. [ 1230.473723] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.489075] CPU: 0 PID: 24358 Comm: syz-executor2 Not tainted 4.20.0-rc6+ #154 [ 1230.496456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1230.505818] Call Trace: [ 1230.508427] dump_stack+0x244/0x39d [ 1230.512095] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1230.517323] ? mark_held_locks+0x130/0x130 [ 1230.521582] should_fail.cold.4+0xa/0x17 [ 1230.525666] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1230.530769] ? print_usage_bug+0xc0/0xc0 [ 1230.534823] ? rcu_softirq_qs+0x20/0x20 [ 1230.538810] ? dput.part.25+0x241/0x860 [ 1230.542991] ? zap_class+0x640/0x640 [ 1230.546734] ? mark_held_locks+0x130/0x130 [ 1230.551003] ? find_held_lock+0x36/0x1c0 [ 1230.555095] ? __lock_is_held+0xb5/0x140 [ 1230.559185] ? perf_trace_sched_process_exec+0x860/0x860 [ 1230.564639] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 1230.570080] __should_failslab+0x124/0x180 [ 1230.574304] should_failslab+0x9/0x14 [ 1230.578124] kmem_cache_alloc_trace+0x2d7/0x750 [ 1230.582810] ? kasan_check_read+0x11/0x20 [ 1230.586944] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1230.592218] alloc_pipe_info+0x164/0x5d0 [ 1230.596288] ? pipe_read+0x940/0x940 [ 1230.600007] ? perf_trace_sched_process_exec+0x860/0x860 [ 1230.605464] ? ksys_dup3+0x680/0x680 [ 1230.609202] splice_direct_to_actor+0x786/0x9d0 [ 1230.613873] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1230.619414] ? pipe_to_sendpage+0x400/0x400 [ 1230.623763] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1230.628795] ? do_splice_to+0x190/0x190 [ 1230.632769] ? security_file_permission+0x1c2/0x220 [ 1230.637802] ? rw_verify_area+0x118/0x360 [ 1230.641951] do_splice_direct+0x2d4/0x420 [ 1230.646100] ? splice_direct_to_actor+0x9d0/0x9d0 [ 1230.650935] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1230.656479] ? __sb_start_write+0x1b2/0x370 [ 1230.660817] do_sendfile+0x62a/0xe20 [ 1230.664539] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1230.669135] ? __sb_end_write+0xd9/0x110 [ 1230.673204] ? fput+0x130/0x1a0 [ 1230.676474] ? do_syscall_64+0x9a/0x820 [ 1230.680444] ? do_syscall_64+0x9a/0x820 [ 1230.684423] __x64_sys_sendfile64+0x1fd/0x250 [ 1230.688906] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 1230.693482] do_syscall_64+0x1b9/0x820 [ 1230.697355] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1230.702749] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1230.707675] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1230.712508] ? trace_hardirqs_on_caller+0x310/0x310 [ 1230.717523] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1230.722543] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1230.727564] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1230.732421] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1230.737608] RIP: 0033:0x457659 [ 1230.740814] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1230.759712] RSP: 002b:00007f08c969cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1230.767411] RAX: ffffffffffffffda RBX: 00007f08c969cc90 RCX: 0000000000457659 11:55:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) [ 1230.774679] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1230.781991] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1230.789253] R10: 0000000000000800 R11: 0000000000000246 R12: 00007f08c969d6d4 [ 1230.796538] R13: 00000000004c3e0b R14: 00000000004d6c20 R15: 0000000000000004 11:55:20 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 11:55:20 executing program 2 (fault-call:2 fault-nth:1): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) 11:55:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x12002) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000080)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r3) close(r1) 11:55:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) [ 1230.928323] binder_alloc: binder_alloc_mmap_handler: 24365 20001000-20004000 already mapped failed -16 [ 1230.940809] binder: BINDER_SET_CONTEXT_MGR already set [ 1230.947168] binder: 24365:24369 ioctl 40046207 0 returned -16 [ 1230.966828] binder_alloc: 24365: binder_alloc_buf, no vma 11:55:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000004112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1231.016394] FAULT_INJECTION: forcing a failure. [ 1231.016394] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.075176] CPU: 1 PID: 24377 Comm: syz-executor2 Not tainted 4.20.0-rc6+ #154 [ 1231.082569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1231.091930] Call Trace: [ 1231.094536] dump_stack+0x244/0x39d [ 1231.094565] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1231.094604] ? __kernel_text_address+0xd/0x40 [ 1231.094633] should_fail.cold.4+0xa/0x17 [ 1231.103427] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1231.103451] ? save_stack+0x43/0xd0 [ 1231.103468] ? kasan_kmalloc+0xc7/0xe0 [ 1231.124594] ? kmem_cache_alloc_trace+0x152/0x750 [ 1231.129450] ? alloc_pipe_info+0x164/0x5d0 [ 1231.133701] ? zap_class+0x640/0x640 [ 1231.137433] ? __x64_sys_sendfile64+0x1fd/0x250 [ 1231.142114] ? do_syscall_64+0x1b9/0x820 [ 1231.146187] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1231.146951] binder_alloc: binder_alloc_mmap_handler: 24385 20001000-20004000 already mapped failed -16 [ 1231.151585] ? find_held_lock+0x36/0x1c0 [ 1231.151622] ? __lock_is_held+0xb5/0x140 [ 1231.151652] ? perf_trace_sched_process_exec+0x860/0x860 [ 1231.151679] __should_failslab+0x124/0x180 [ 1231.151699] should_failslab+0x9/0x14 [ 1231.151713] __kmalloc+0x2e0/0x760 [ 1231.151728] ? kmem_cache_alloc_trace+0x353/0x750 [ 1231.151747] ? kasan_check_read+0x11/0x20 [ 1231.162028] binder: BINDER_SET_CONTEXT_MGR already set [ 1231.165236] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1231.165253] ? alloc_pipe_info+0x2ce/0x5d0 [ 1231.165272] alloc_pipe_info+0x2ce/0x5d0 [ 1231.165293] ? pipe_read+0x940/0x940 [ 1231.170521] binder: 24385:24386 ioctl 40046207 0 returned -16 [ 1231.174796] ? perf_trace_sched_process_exec+0x860/0x860 [ 1231.174812] ? ksys_dup3+0x680/0x680 [ 1231.174839] splice_direct_to_actor+0x786/0x9d0 [ 1231.174862] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1231.180647] binder_alloc: 24385: binder_alloc_buf, no vma [ 1231.182879] ? pipe_to_sendpage+0x400/0x400 [ 1231.182897] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1231.182918] ? do_splice_to+0x190/0x190 [ 1231.182935] ? security_file_permission+0x1c2/0x220 [ 1231.182955] ? rw_verify_area+0x118/0x360 [ 1231.182974] do_splice_direct+0x2d4/0x420 [ 1231.182993] ? splice_direct_to_actor+0x9d0/0x9d0 [ 1231.183029] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1231.183046] ? __sb_start_write+0x1b2/0x370 [ 1231.183067] do_sendfile+0x62a/0xe20 [ 1231.183094] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1231.206160] ? __sb_end_write+0xd9/0x110 [ 1231.214449] ? fput+0x130/0x1a0 [ 1231.214465] ? do_syscall_64+0x9a/0x820 [ 1231.214485] ? do_syscall_64+0x9a/0x820 [ 1231.267260] __x64_sys_sendfile64+0x1fd/0x250 [ 1231.267293] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 1231.267319] do_syscall_64+0x1b9/0x820 [ 1231.280451] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1231.332193] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1231.337135] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1231.341997] ? trace_hardirqs_on_caller+0x310/0x310 [ 1231.347048] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1231.352084] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1231.357112] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1231.361975] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1231.367177] RIP: 0033:0x457659 [ 1231.370412] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1231.389312] RSP: 002b:00007f08c969cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1231.397031] RAX: ffffffffffffffda RBX: 00007f08c969cc90 RCX: 0000000000457659 [ 1231.404303] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1231.411589] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1231.418882] R10: 0000000000000800 R11: 0000000000000246 R12: 00007f08c969d6d4 11:55:21 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x80020000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0xfffffffffffffffc) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000000)={0x9, {0x6985, 0x20, 0x6, 0x100000000}}) sendfile(r1, r1, 0x0, 0x800) 11:55:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x221c0, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000080)=0x6) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r3) close(r2) 11:55:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000070000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:21 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) [ 1231.426173] R13: 00000000004c3e0b R14: 00000000004d6c20 R15: 0000000000000004 11:55:21 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) [ 1231.500819] binder_alloc: binder_alloc_mmap_handler: 24398 20001000-20004000 already mapped failed -16 [ 1231.527622] binder: BINDER_SET_CONTEXT_MGR already set [ 1231.545924] binder: 24398:24404 ioctl 40046207 0 returned -16 11:55:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) nanosleep(&(0x7f0000000080)={r3, r4+30000000}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:55:21 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:21 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 11:55:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000030000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:21 executing program 2 (fault-call:2 fault-nth:2): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) 11:55:21 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) [ 1231.983526] binder_alloc: binder_alloc_mmap_handler: 24422 20001000-20004000 already mapped failed -16 [ 1231.995521] FAULT_INJECTION: forcing a failure. [ 1231.995521] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.018076] CPU: 1 PID: 24429 Comm: syz-executor2 Not tainted 4.20.0-rc6+ #154 [ 1232.025461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1232.034842] Call Trace: [ 1232.037453] dump_stack+0x244/0x39d [ 1232.041106] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1232.046339] should_fail.cold.4+0xa/0x17 [ 1232.050425] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1232.050452] ? __lock_acquire+0x62f/0x4c20 [ 1232.050481] ? zap_class+0x640/0x640 [ 1232.050518] ? find_held_lock+0x36/0x1c0 [ 1232.067606] ? __lock_is_held+0xb5/0x140 [ 1232.071692] ? __lock_acquire+0x62f/0x4c20 [ 1232.071710] ? perf_trace_sched_process_exec+0x860/0x860 [ 1232.071729] ? mark_held_locks+0x130/0x130 [ 1232.071754] __should_failslab+0x124/0x180 [ 1232.071781] should_failslab+0x9/0x14 [ 1232.071803] kmem_cache_alloc_node_trace+0x270/0x740 [ 1232.098823] __kmalloc_node+0x3c/0x70 [ 1232.102638] kvmalloc_node+0x65/0xf0 [ 1232.106374] iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 1232.111332] ? check_preemption_disabled+0x48/0x280 [ 1232.116361] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1232.116383] ? copyin+0x100/0x100 [ 1232.116399] ? rcu_softirq_qs+0x20/0x20 [ 1232.116413] ? unwind_dump+0x190/0x190 [ 1232.116439] ? is_bpf_text_address+0xd3/0x170 [ 1232.116457] ? kernel_text_address+0x79/0xf0 [ 1232.116475] ? __kernel_text_address+0xd/0x40 [ 1232.116491] ? unwind_get_return_address+0x61/0xa0 [ 1232.116524] ? __save_stack_trace+0x8d/0xf0 [ 1232.116558] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1232.141690] ? iov_iter_pipe+0xbb/0x2f0 [ 1232.164424] default_file_splice_read+0x1db/0xb20 [ 1232.169293] ? __kmalloc+0x15b/0x760 [ 1232.173054] ? alloc_pipe_info+0x2ce/0x5d0 [ 1232.177296] ? splice_direct_to_actor+0x786/0x9d0 [ 1232.182154] ? do_syscall_64+0x1b9/0x820 [ 1232.186235] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1232.191614] ? percpu_ref_put_many+0x11c/0x260 [ 1232.196214] ? iter_file_splice_write+0x1050/0x1050 [ 1232.201252] ? zap_class+0x640/0x640 [ 1232.204990] ? kasan_check_read+0x11/0x20 [ 1232.209160] ? zap_class+0x640/0x640 [ 1232.212901] ? rcu_softirq_qs+0x20/0x20 [ 1232.216906] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1232.222453] ? fsnotify+0x50e/0xef0 [ 1232.226104] ? __init_waitqueue_head+0x9e/0x150 [ 1232.230801] ? fsnotify_first_mark+0x350/0x350 [ 1232.235387] ? __fsnotify_parent+0xcc/0x430 [ 1232.239725] ? __might_sleep+0x95/0x190 [ 1232.243725] ? fsnotify+0xef0/0xef0 [ 1232.247369] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1232.252415] ? selinux_file_permission+0x90/0x540 [ 1232.257279] ? security_file_permission+0x1c2/0x220 [ 1232.262312] ? iter_file_splice_write+0x1050/0x1050 [ 1232.267334] do_splice_to+0x12e/0x190 [ 1232.271162] splice_direct_to_actor+0x31c/0x9d0 [ 1232.275840] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1232.281391] ? pipe_to_sendpage+0x400/0x400 [ 1232.285743] ? do_splice_to+0x190/0x190 [ 1232.289746] ? security_file_permission+0x1c2/0x220 [ 1232.294799] ? rw_verify_area+0x118/0x360 [ 1232.298972] do_splice_direct+0x2d4/0x420 [ 1232.303131] ? splice_direct_to_actor+0x9d0/0x9d0 [ 1232.307993] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1232.313549] ? __sb_start_write+0x1b2/0x370 [ 1232.317887] do_sendfile+0x62a/0xe20 [ 1232.321639] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1232.326231] ? __sb_end_write+0xd9/0x110 [ 1232.330310] ? fput+0x130/0x1a0 [ 1232.333602] ? do_syscall_64+0x9a/0x820 [ 1232.337582] ? do_syscall_64+0x9a/0x820 [ 1232.341618] __x64_sys_sendfile64+0x1fd/0x250 [ 1232.346129] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 1232.350745] do_syscall_64+0x1b9/0x820 [ 1232.354659] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1232.360040] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1232.365171] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1232.370034] ? trace_hardirqs_on_caller+0x310/0x310 [ 1232.375062] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1232.380103] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1232.385163] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1232.390036] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1232.395232] RIP: 0033:0x457659 [ 1232.398434] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1232.417339] RSP: 002b:00007f08c969cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1232.425055] RAX: ffffffffffffffda RBX: 00007f08c969cc90 RCX: 0000000000457659 11:55:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000000000007a0000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1232.432331] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1232.439623] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1232.446936] R10: 0000000000000800 R11: 0000000000000246 R12: 00007f08c969d6d4 [ 1232.454216] R13: 00000000004c3e0b R14: 00000000004d6c20 R15: 0000000000000004 [ 1232.499395] binder_alloc: binder_alloc_mmap_handler: 24436 20001000-20004000 already mapped failed -16 [ 1232.521173] binder: BINDER_SET_CONTEXT_MGR already set [ 1232.531250] binder: 24436:24438 ioctl 40046207 0 returned -16 11:55:22 executing program 2 (fault-call:2 fault-nth:3): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) 11:55:22 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x800) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101002) 11:55:22 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:22 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:55:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000048000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:22 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x100000000, 0x1}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={r3, 0x7}, 0x8) close(r2) close(r1) 11:55:22 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) [ 1232.776090] FAULT_INJECTION: forcing a failure. [ 1232.776090] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.776428] binder: BINDER_SET_CONTEXT_MGR already set [ 1232.797569] binder: 24445:24451 ioctl 40046207 0 returned -16 [ 1232.822958] CPU: 1 PID: 24450 Comm: syz-executor2 Not tainted 4.20.0-rc6+ #154 [ 1232.830371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1232.839762] Call Trace: [ 1232.842386] dump_stack+0x244/0x39d [ 1232.846046] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1232.851271] should_fail.cold.4+0xa/0x17 [ 1232.855355] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1232.860472] ? __lock_acquire+0x62f/0x4c20 [ 1232.860498] ? zap_class+0x640/0x640 [ 1232.860522] ? find_held_lock+0x36/0x1c0 [ 1232.872514] ? __lock_is_held+0xb5/0x140 [ 1232.872545] ? __lock_acquire+0x62f/0x4c20 [ 1232.872562] ? perf_trace_sched_process_exec+0x860/0x860 [ 1232.872582] ? print_usage_bug+0xc0/0xc0 [ 1232.890353] ? mark_held_locks+0x130/0x130 [ 1232.894612] __should_failslab+0x124/0x180 [ 1232.898866] should_failslab+0x9/0x14 [ 1232.902683] kmem_cache_alloc_node_trace+0x270/0x740 [ 1232.907829] __kmalloc_node+0x3c/0x70 [ 1232.911647] kvmalloc_node+0x65/0xf0 [ 1232.915400] iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 1232.920345] ? check_preemption_disabled+0x48/0x280 [ 1232.925395] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1232.930345] ? copyin+0x100/0x100 [ 1232.933816] ? rcu_softirq_qs+0x20/0x20 [ 1232.937804] ? unwind_dump+0x190/0x190 [ 1232.941745] ? is_bpf_text_address+0xd3/0x170 [ 1232.946264] ? kernel_text_address+0x79/0xf0 [ 1232.950697] ? __kernel_text_address+0xd/0x40 [ 1232.955237] ? unwind_get_return_address+0x61/0xa0 [ 1232.960183] ? __save_stack_trace+0x8d/0xf0 [ 1232.964527] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1232.969558] ? iov_iter_pipe+0xbb/0x2f0 [ 1232.973552] default_file_splice_read+0x1db/0xb20 [ 1232.978406] ? __kmalloc+0x15b/0x760 [ 1232.982132] ? alloc_pipe_info+0x2ce/0x5d0 [ 1232.986376] ? splice_direct_to_actor+0x786/0x9d0 [ 1232.991231] ? do_syscall_64+0x1b9/0x820 [ 1232.995309] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1233.000690] ? percpu_ref_put_many+0x11c/0x260 [ 1233.005287] ? iter_file_splice_write+0x1050/0x1050 [ 1233.010316] ? zap_class+0x640/0x640 [ 1233.014060] ? kasan_check_read+0x11/0x20 [ 1233.018223] ? zap_class+0x640/0x640 [ 1233.020363] IPVS: ftp: loaded support on port[0] = 21 [ 1233.021944] ? rcu_softirq_qs+0x20/0x20 [ 1233.021980] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1233.021995] ? fsnotify+0x50e/0xef0 [ 1233.022030] ? __init_waitqueue_head+0x9e/0x150 [ 1233.022048] ? fsnotify_first_mark+0x350/0x350 [ 1233.049596] ? __fsnotify_parent+0xcc/0x430 [ 1233.053920] ? __might_sleep+0x95/0x190 [ 1233.057882] ? fsnotify+0xef0/0xef0 [ 1233.061523] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1233.066559] ? selinux_file_permission+0x90/0x540 [ 1233.071421] ? security_file_permission+0x1c2/0x220 11:55:22 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:23 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) [ 1233.076454] ? iter_file_splice_write+0x1050/0x1050 [ 1233.081479] do_splice_to+0x12e/0x190 [ 1233.085294] splice_direct_to_actor+0x31c/0x9d0 [ 1233.089962] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1233.095516] ? pipe_to_sendpage+0x400/0x400 [ 1233.099859] ? do_splice_to+0x190/0x190 [ 1233.103845] ? security_file_permission+0x1c2/0x220 [ 1233.108888] ? rw_verify_area+0x118/0x360 [ 1233.113058] do_splice_direct+0x2d4/0x420 [ 1233.117222] ? splice_direct_to_actor+0x9d0/0x9d0 [ 1233.122088] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1233.127657] ? __sb_start_write+0x1b2/0x370 [ 1233.131996] do_sendfile+0x62a/0xe20 [ 1233.135743] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1233.140360] ? __sb_end_write+0xd9/0x110 [ 1233.144434] ? fput+0x130/0x1a0 [ 1233.147742] ? do_syscall_64+0x9a/0x820 [ 1233.151761] ? do_syscall_64+0x9a/0x820 [ 1233.155782] __x64_sys_sendfile64+0x1fd/0x250 [ 1233.160295] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 1233.164901] do_syscall_64+0x1b9/0x820 [ 1233.168801] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1233.174174] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1233.179131] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1233.184176] ? trace_hardirqs_on_caller+0x310/0x310 [ 1233.189208] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1233.194240] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1233.199274] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1233.204138] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1233.209335] RIP: 0033:0x457659 11:55:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000004000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1233.212542] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1233.231450] RSP: 002b:00007f08c969cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1233.239164] RAX: ffffffffffffffda RBX: 00007f08c969cc90 RCX: 0000000000457659 [ 1233.246470] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1233.253740] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1233.261027] R10: 0000000000000800 R11: 0000000000000246 R12: 00007f08c969d6d4 [ 1233.268304] R13: 00000000004c3e0b R14: 00000000004d6c20 R15: 0000000000000004 11:55:23 executing program 2 (fault-call:2 fault-nth:4): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) 11:55:23 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) [ 1233.375743] binder: BINDER_SET_CONTEXT_MGR already set [ 1233.405201] binder_alloc_new_buf_locked: 4 callbacks suppressed [ 1233.405209] binder_alloc: 24470: binder_alloc_buf, no vma [ 1233.436717] binder: 24470:24471 ioctl 40046207 0 returned -16 [ 1233.447249] FAULT_INJECTION: forcing a failure. 11:55:23 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) [ 1233.447249] name failslab, interval 1, probability 0, space 0, times 0 [ 1233.490646] CPU: 0 PID: 24480 Comm: syz-executor2 Not tainted 4.20.0-rc6+ #154 [ 1233.498298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1233.507669] Call Trace: [ 1233.510286] dump_stack+0x244/0x39d [ 1233.513925] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1233.519129] should_fail.cold.4+0xa/0x17 [ 1233.523196] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1233.528321] ? lock_downgrade+0x900/0x900 [ 1233.532482] ? mem_cgroup_cancel_charge+0x1a0/0x1a0 [ 1233.537507] ? zap_class+0x640/0x640 [ 1233.541240] ? zap_class+0x640/0x640 [ 1233.544970] ? find_held_lock+0x36/0x1c0 [ 1233.549046] ? __lock_is_held+0xb5/0x140 [ 1233.553132] ? perf_trace_sched_process_exec+0x860/0x860 [ 1233.558588] ? find_held_lock+0x36/0x1c0 [ 1233.562664] __should_failslab+0x124/0x180 [ 1233.566911] should_failslab+0x9/0x14 [ 1233.570718] kmem_cache_alloc_node_trace+0x270/0x740 [ 1233.575822] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1233.580926] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1233.586037] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1233.590648] __kmalloc_node+0x3c/0x70 [ 1233.594465] kvmalloc_node+0x65/0xf0 [ 1233.598207] iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 1233.603186] ? mark_held_locks+0xc7/0x130 [ 1233.607343] ? free_unref_page+0x6e0/0x960 [ 1233.611593] ? copyin+0x100/0x100 [ 1233.615082] ? trace_hardirqs_on+0xbd/0x310 [ 1233.619413] ? __put_page+0x122/0x190 [ 1233.623226] ? trace_hardirqs_off_caller+0x310/0x310 [ 1233.628332] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1233.633857] ? mark_free_pages+0x3c0/0x3c0 [ 1233.638074] ? zap_class+0x640/0x640 [ 1233.641774] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1233.646776] ? iov_iter_pipe+0xbb/0x2f0 [ 1233.650739] default_file_splice_read+0x1db/0xb20 [ 1233.655563] ? __lock_is_held+0xb5/0x140 [ 1233.659622] ? splice_direct_to_actor+0x786/0x9d0 [ 1233.664450] ? fsnotify_first_mark+0x350/0x350 [ 1233.669026] ? iter_file_splice_write+0x1050/0x1050 [ 1233.674032] ? zap_class+0x640/0x640 [ 1233.677747] ? __put_compound_page+0xe0/0xe0 [ 1233.682164] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1233.687682] ? fsnotify+0x50e/0xef0 [ 1233.691299] ? do_splice_direct+0x420/0x420 [ 1233.695602] ? fsnotify_first_mark+0x350/0x350 [ 1233.700167] ? __fsnotify_parent+0xcc/0x430 [ 1233.704470] ? __might_sleep+0x95/0x190 [ 1233.708431] ? fsnotify+0xef0/0xef0 [ 1233.712046] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1233.717061] ? selinux_file_permission+0x90/0x540 [ 1233.721892] ? security_file_permission+0x1c2/0x220 [ 1233.726892] ? iter_file_splice_write+0x1050/0x1050 [ 1233.731890] do_splice_to+0x12e/0x190 [ 1233.735674] splice_direct_to_actor+0x31c/0x9d0 [ 1233.740337] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1233.745878] ? pipe_to_sendpage+0x400/0x400 [ 1233.750185] ? do_splice_to+0x190/0x190 [ 1233.754143] ? security_file_permission+0x1c2/0x220 [ 1233.759144] ? rw_verify_area+0x118/0x360 [ 1233.763309] do_splice_direct+0x2d4/0x420 [ 1233.767471] ? splice_direct_to_actor+0x9d0/0x9d0 [ 1233.772313] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1233.777848] ? __sb_start_write+0x1b2/0x370 [ 1233.782158] do_sendfile+0x62a/0xe20 [ 1233.785860] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1233.790428] ? __sb_end_write+0xd9/0x110 [ 1233.794502] ? fput+0x130/0x1a0 [ 1233.797764] ? do_syscall_64+0x9a/0x820 [ 1233.801723] ? do_syscall_64+0x9a/0x820 [ 1233.805683] __x64_sys_sendfile64+0x1fd/0x250 [ 1233.810174] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 1233.814743] do_syscall_64+0x1b9/0x820 [ 1233.818612] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1233.823960] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1233.828872] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1233.833702] ? trace_hardirqs_on_caller+0x310/0x310 [ 1233.838716] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1233.843735] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1233.848765] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1233.853598] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1233.858770] RIP: 0033:0x457659 [ 1233.861949] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1233.880855] RSP: 002b:00007f08c969cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1233.888544] RAX: ffffffffffffffda RBX: 00007f08c969cc90 RCX: 0000000000457659 [ 1233.895794] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1233.903052] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1233.910306] R10: 0000000000000800 R11: 0000000000000246 R12: 00007f08c969d6d4 [ 1233.917555] R13: 00000000004c3e0b R14: 00000000004d6c20 R15: 0000000000000004 [ 1235.447442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.453899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.461242] device bridge_slave_0 entered promiscuous mode [ 1235.470040] device bridge_slave_1 left promiscuous mode [ 1235.475619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.540164] device bridge_slave_0 left promiscuous mode [ 1235.545787] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.562902] team0 (unregistering): Port device team_slave_1 removed [ 1237.572739] team0 (unregistering): Port device team_slave_0 removed [ 1237.584029] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1237.652421] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1237.718706] bond0 (unregistering): Released all slaves [ 1237.804751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.811406] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.819018] device bridge_slave_1 entered promiscuous mode [ 1237.852384] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1237.882882] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1237.972045] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1238.032181] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1238.249729] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1238.257197] team0: Port device team_slave_0 added [ 1238.304150] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1238.312006] team0: Port device team_slave_1 added [ 1238.355991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1238.405261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1238.454603] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1238.461858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1238.478486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1238.516557] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1238.523782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1238.540556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1239.001982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.008424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1239.015103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.021536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.029956] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1239.817400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1240.283662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1240.372497] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1240.465674] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1240.472104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1240.479740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1240.572888] 8021q: adding VLAN 0 to HW filter on device team0 11:55:32 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x20202, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/softnet_stat\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x800) 11:55:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000000007a112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:32 executing program 2 (fault-call:2 fault-nth:5): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) 11:55:32 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:55:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x1, 0x8000, 0xffff}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={r4, 0x7f}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r3) close(r2) 11:55:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) [ 1242.169535] FAULT_INJECTION: forcing a failure. [ 1242.169535] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1242.181580] CPU: 0 PID: 24761 Comm: syz-executor2 Not tainted 4.20.0-rc6+ #154 [ 1242.188953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1242.198325] Call Trace: [ 1242.200943] dump_stack+0x244/0x39d [ 1242.204587] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1242.209795] should_fail.cold.4+0xa/0x17 [ 1242.213859] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1242.218458] binder_transaction: 16 callbacks suppressed [ 1242.218476] binder: 24755:24764 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1242.218959] ? is_bpf_text_address+0xac/0x170 [ 1242.218977] ? zap_class+0x640/0x640 [ 1242.218997] ? lock_downgrade+0x900/0x900 [ 1242.236363] binder_alloc_mmap_handler: 2 callbacks suppressed [ 1242.236380] binder_alloc: binder_alloc_mmap_handler: 24755 20001000-20004000 already mapped failed -16 [ 1242.237528] ? check_preemption_disabled+0x48/0x280 [ 1242.237548] ? zap_class+0x640/0x640 [ 1242.237563] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1242.237580] ? kasan_check_read+0x11/0x20 [ 1242.237603] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1242.241604] binder: BINDER_SET_CONTEXT_MGR already set [ 1242.245468] ? rcu_softirq_qs+0x20/0x20 [ 1242.245496] ? __lock_is_held+0xb5/0x140 [ 1242.245525] ? lock_release+0xa00/0xa00 [ 1242.245545] ? perf_trace_sched_process_exec+0x860/0x860 [ 1242.251952] binder_alloc: 24755: binder_alloc_buf, no vma [ 1242.260858] ? __might_sleep+0x95/0x190 11:55:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000007112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1242.260880] __alloc_pages_nodemask+0x366/0xea0 [ 1242.260899] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 1242.260913] ? default_file_splice_read+0x1db/0xb20 [ 1242.260925] ? do_splice_to+0x12e/0x190 [ 1242.260945] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 1242.260968] ? check_preemption_disabled+0x48/0x280 [ 1242.266408] binder: 24755:24764 ioctl 40046207 0 returned -16 [ 1242.269684] ? __lock_is_held+0xb5/0x140 [ 1242.269709] ? __kmalloc_node+0x3c/0x70 [ 1242.269724] ? __kmalloc_node+0x3c/0x70 [ 1242.269748] ? rcu_read_lock_sched_held+0x14f/0x180 11:55:32 executing program 1: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000010c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000001100)) open(&(0x7f0000001140)='./file0\x00', 0x10180, 0x100) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x50, 0x0, &(0x7f0000000040)) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f00000000c0)="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") close(r4) close(r3) [ 1242.275231] binder: 24755:24765 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1242.278801] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1242.278825] alloc_pages_current+0x173/0x350 [ 1242.278846] push_pipe+0x3ff/0x7a0 [ 1242.278860] ? __kmalloc_node+0x50/0x70 [ 1242.278884] iov_iter_get_pages_alloc+0x938/0x15a0 [ 1242.278907] ? free_unref_page+0x6e0/0x960 [ 1242.284801] binder_release_work: 14 callbacks suppressed [ 1242.284808] binder: undelivered TRANSACTION_ERROR: 29201 [ 1242.289470] ? copyin+0x100/0x100 [ 1242.289487] ? trace_hardirqs_on+0xbd/0x310 [ 1242.289504] ? __put_page+0x122/0x190 [ 1242.289536] ? trace_hardirqs_off_caller+0x310/0x310 [ 1242.289556] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1242.289580] ? mark_free_pages+0x3c0/0x3c0 [ 1242.289597] ? zap_class+0x640/0x640 [ 1242.289618] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1242.294836] binder: undelivered TRANSACTION_ERROR: 29189 [ 1242.297633] ? iov_iter_pipe+0xbb/0x2f0 [ 1242.297654] default_file_splice_read+0x1db/0xb20 [ 1242.297683] ? __lock_is_held+0xb5/0x140 [ 1242.297697] ? splice_direct_to_actor+0x786/0x9d0 [ 1242.297715] ? fsnotify_first_mark+0x350/0x350 [ 1242.297741] ? iter_file_splice_write+0x1050/0x1050 [ 1242.482226] ? zap_class+0x640/0x640 [ 1242.485931] ? __put_compound_page+0xe0/0xe0 [ 1242.490356] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1242.495878] ? fsnotify+0x50e/0xef0 [ 1242.499491] ? do_splice_direct+0x420/0x420 [ 1242.503797] ? fsnotify_first_mark+0x350/0x350 [ 1242.508360] ? __fsnotify_parent+0xcc/0x430 [ 1242.512670] ? __might_sleep+0x95/0x190 [ 1242.516641] ? fsnotify+0xef0/0xef0 [ 1242.520265] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1242.525307] ? selinux_file_permission+0x90/0x540 [ 1242.530141] ? security_file_permission+0x1c2/0x220 [ 1242.535157] ? iter_file_splice_write+0x1050/0x1050 [ 1242.540175] do_splice_to+0x12e/0x190 [ 1242.543991] splice_direct_to_actor+0x31c/0x9d0 [ 1242.548674] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1242.554212] ? pipe_to_sendpage+0x400/0x400 [ 1242.558539] ? do_splice_to+0x190/0x190 [ 1242.562546] ? security_file_permission+0x1c2/0x220 [ 1242.567567] ? rw_verify_area+0x118/0x360 [ 1242.571702] do_splice_direct+0x2d4/0x420 [ 1242.575838] ? splice_direct_to_actor+0x9d0/0x9d0 [ 1242.580670] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1242.586237] ? __sb_start_write+0x1b2/0x370 [ 1242.590580] do_sendfile+0x62a/0xe20 [ 1242.594304] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1242.598904] ? __sb_end_write+0xd9/0x110 [ 1242.602968] ? fput+0x130/0x1a0 [ 1242.606235] ? do_syscall_64+0x9a/0x820 [ 1242.610214] ? do_syscall_64+0x9a/0x820 [ 1242.614181] __x64_sys_sendfile64+0x1fd/0x250 [ 1242.618677] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 1242.623252] do_syscall_64+0x1b9/0x820 [ 1242.627138] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1242.632493] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1242.637422] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1242.642278] ? trace_hardirqs_on_caller+0x310/0x310 [ 1242.647299] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1242.652314] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1242.657318] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1242.662150] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1242.667336] RIP: 0033:0x457659 [ 1242.670511] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1242.689394] RSP: 002b:00007f08c969cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1242.697088] RAX: ffffffffffffffda RBX: 00007f08c969cc90 RCX: 0000000000457659 [ 1242.704343] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1242.711595] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 11:55:32 executing program 2 (fault-call:2 fault-nth:6): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) [ 1242.718878] R10: 0000000000000800 R11: 0000000000000246 R12: 00007f08c969d6d4 [ 1242.726127] R13: 00000000004c3e0b R14: 00000000004d6c20 R15: 0000000000000004 [ 1242.840272] binder: 24779:24785 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1242.865100] FAULT_INJECTION: forcing a failure. [ 1242.865100] name failslab, interval 1, probability 0, space 0, times 0 [ 1242.892607] binder_alloc: binder_alloc_mmap_handler: 24779 20001000-20004000 already mapped failed -16 [ 1242.927784] CPU: 1 PID: 24790 Comm: syz-executor2 Not tainted 4.20.0-rc6+ #154 [ 1242.935170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1242.944519] Call Trace: [ 1242.947125] dump_stack+0x244/0x39d [ 1242.950767] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1242.955976] should_fail.cold.4+0xa/0x17 [ 1242.960053] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1242.962071] binder_alloc: 24779: binder_alloc_buf, no vma [ 1242.965163] ? lock_downgrade+0x900/0x900 [ 1242.965182] ? mem_cgroup_cancel_charge+0x1a0/0x1a0 [ 1242.965199] ? zap_class+0x640/0x640 [ 1242.965214] ? zap_class+0x640/0x640 [ 1242.965239] ? find_held_lock+0x36/0x1c0 [ 1242.965260] ? __lock_is_held+0xb5/0x140 [ 1242.965291] ? perf_trace_sched_process_exec+0x860/0x860 [ 1242.965311] ? find_held_lock+0x36/0x1c0 [ 1242.975593] binder: 24779:24795 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1242.980016] __should_failslab+0x124/0x180 [ 1242.980039] should_failslab+0x9/0x14 [ 1242.980057] kmem_cache_alloc_node_trace+0x270/0x740 [ 1242.980071] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1242.980085] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1242.980102] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1242.980140] __kmalloc_node+0x3c/0x70 [ 1242.980175] kvmalloc_node+0x65/0xf0 [ 1242.980196] iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 1242.980213] ? mark_held_locks+0xc7/0x130 [ 1242.980232] ? free_unref_page+0x6e0/0x960 [ 1242.984420] binder: undelivered TRANSACTION_ERROR: 29201 [ 1242.987677] ? copyin+0x100/0x100 [ 1242.987694] ? trace_hardirqs_on+0xbd/0x310 [ 1242.987712] ? __put_page+0x122/0x190 [ 1242.987729] ? trace_hardirqs_off_caller+0x310/0x310 [ 1242.987751] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1242.987782] ? mark_free_pages+0x3c0/0x3c0 [ 1242.987801] ? zap_class+0x640/0x640 [ 1242.987825] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1242.987844] ? iov_iter_pipe+0xbb/0x2f0 [ 1242.992739] binder: undelivered TRANSACTION_ERROR: 29189 [ 1242.995977] default_file_splice_read+0x1db/0xb20 [ 1242.995994] ? __lock_is_held+0xb5/0x140 [ 1242.996032] ? splice_direct_to_actor+0x786/0x9d0 [ 1242.996052] ? fsnotify_first_mark+0x350/0x350 [ 1242.996074] ? iter_file_splice_write+0x1050/0x1050 [ 1242.996088] ? zap_class+0x640/0x640 11:55:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x100) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='map_files\x00') syz_open_dev$cec(&(0x7f0000000300)='/dev/cec#\x00', 0x3, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x20) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r2 = userfaultfd(0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) r3 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)={0xaa, 0x800}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000001c0)={{0x87, @empty, 0x4e21, 0x0, 'sh\x00', 0x2, 0x4, 0xd}, {@empty, 0x4e22, 0x0, 0x8000, 0x1ff, 0x4}}, 0x44) timerfd_create(0x7, 0x80800) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r4) close(r2) 11:55:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000000000004c0000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1242.996104] ? __put_compound_page+0xe0/0xe0 [ 1242.996147] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1242.996161] ? fsnotify+0x50e/0xef0 [ 1242.996182] ? do_splice_direct+0x420/0x420 [ 1242.996201] ? fsnotify_first_mark+0x350/0x350 [ 1243.037559] ? __fsnotify_parent+0xcc/0x430 [ 1243.037574] ? __might_sleep+0x95/0x190 [ 1243.037590] ? fsnotify+0xef0/0xef0 [ 1243.037611] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1243.037629] ? selinux_file_permission+0x90/0x540 [ 1243.037652] ? security_file_permission+0x1c2/0x220 [ 1243.037672] ? iter_file_splice_write+0x1050/0x1050 [ 1243.037688] do_splice_to+0x12e/0x190 [ 1243.037707] splice_direct_to_actor+0x31c/0x9d0 [ 1243.037727] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1243.046099] ? pipe_to_sendpage+0x400/0x400 [ 1243.046121] ? do_splice_to+0x190/0x190 [ 1243.046136] ? security_file_permission+0x1c2/0x220 [ 1243.046156] ? rw_verify_area+0x118/0x360 [ 1243.046174] do_splice_direct+0x2d4/0x420 [ 1243.046192] ? splice_direct_to_actor+0x9d0/0x9d0 [ 1243.046212] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1243.046228] ? __sb_start_write+0x1b2/0x370 [ 1243.046248] do_sendfile+0x62a/0xe20 [ 1243.046274] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1243.085358] ? __sb_end_write+0xd9/0x110 [ 1243.103837] ? fput+0x130/0x1a0 [ 1243.103855] ? do_syscall_64+0x9a/0x820 [ 1243.103871] ? do_syscall_64+0x9a/0x820 [ 1243.103893] __x64_sys_sendfile64+0x1fd/0x250 [ 1243.103912] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 1243.103939] do_syscall_64+0x1b9/0x820 [ 1243.103954] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1243.103972] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1243.103988] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1243.104018] ? trace_hardirqs_on_caller+0x310/0x310 [ 1243.131541] binder: 24801:24802 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1243.131745] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1243.131764] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1243.131796] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1243.143909] binder_alloc: binder_alloc_mmap_handler: 24801 20001000-20004000 already mapped failed -16 [ 1243.144912] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1243.144927] RIP: 0033:0x457659 [ 1243.144943] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1243.144952] RSP: 002b:00007f08c969cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1243.144967] RAX: ffffffffffffffda RBX: 00007f08c969cc90 RCX: 0000000000457659 [ 1243.144975] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1243.144984] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1243.144993] R10: 0000000000000800 R11: 0000000000000246 R12: 00007f08c969d6d4 [ 1243.145002] R13: 00000000004c3e0b R14: 00000000004d6c20 R15: 0000000000000004 [ 1243.218354] binder: BINDER_SET_CONTEXT_MGR already set [ 1243.338437] binder: 24801:24802 ioctl 40046207 0 returned -16 [ 1243.347124] binder_alloc: 24801: binder_alloc_buf, no vma [ 1243.364334] binder: undelivered TRANSACTION_ERROR: 29201 [ 1243.372191] binder: 24801:24805 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1243.408907] binder: undelivered TRANSACTION_ERROR: 29189 11:55:33 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20000, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000080)={[0x5, 0x1, 0x3, 0x8, 0xee, 0x0, 0x100000000, 0x4, 0xf000000000000000, 0xfff, 0x80000000, 0x80, 0x1, 0x6, 0x4ca93c94, 0x8], 0x10000, 0x200}) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x81, 0x1, [0x9]}, &(0x7f0000000180)=0xa) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000001c0)={r2, 0x8}, &(0x7f0000000200)=0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) socket$inet6(0xa, 0x2, 0x89) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x20) sendfile(r3, r3, 0x0, 0x800) 11:55:33 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:55:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:33 executing program 2 (fault-call:2 fault-nth:7): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) 11:55:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0xfffffffffffffffd) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000280)=""/161) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000080)=""/110, &(0x7f0000000000)=0x6e) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) ioctl$KVM_PPC_GET_SMMU_INFO(r3, 0x8250aea6, &(0x7f0000000180)=""/83) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r4) ioctl$VIDIOC_G_AUDOUT(r3, 0x80345631, &(0x7f0000000200)) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000340)={r0, 0x4, 0x365, "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"}) close(r1) 11:55:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000740000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:33 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) [ 1243.729999] binder: 24816:24823 transaction failed 29201/-28, size 0-26388279066624 line 2973 11:55:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:55:33 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) sendfile(r1, r1, 0x0, 0x800) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000000)={0x8, 0x11, &(0x7f0000000080)="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", {0xfffffffffffffff7, 0x97f3, 0x0, 0x3, 0xfffffffffffffff9, 0x6, 0xb, 0x1}}) [ 1243.791192] binder_alloc: binder_alloc_mmap_handler: 24816 20001000-20004000 already mapped failed -16 [ 1243.806986] binder: BINDER_SET_CONTEXT_MGR already set [ 1243.830244] binder: 24816:24833 ioctl 40046207 0 returned -16 [ 1243.834949] binder_alloc: 24816: binder_alloc_buf, no vma [ 1243.892096] binder: undelivered TRANSACTION_ERROR: 29201 [ 1243.907782] binder: 24816:24835 transaction failed 29189/-3, size 0-26388279066624 line 2973 11:55:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000060000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:33 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x5) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) [ 1243.938970] binder: undelivered TRANSACTION_ERROR: 29189 [ 1244.053062] binder: 24862:24866 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1244.102761] binder_alloc: binder_alloc_mmap_handler: 24862 20001000-20004000 already mapped failed -16 [ 1244.114003] binder_alloc: 24862: binder_alloc_buf, no vma [ 1244.115536] binder: BINDER_SET_CONTEXT_MGR already set [ 1244.120483] binder: 24862:24870 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1244.127389] binder: 24862:24866 ioctl 40046207 0 returned -16 [ 1244.134303] binder: undelivered TRANSACTION_ERROR: 29201 [ 1244.146597] binder: undelivered TRANSACTION_ERROR: 29189 11:55:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:55:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x2) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) r3 = dup(r0) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000180)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x0, 0x0, 0xff, 0x2, 0x2, 0x40}, &(0x7f0000000080)=0x20) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x8) ioctl$int_out(r3, 0x5462, &(0x7f00000001c0)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r5) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000100)=""/42, &(0x7f0000000140)=0x2a) close(r0) 11:55:34 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) 11:55:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000120000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:34 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0xffff8881b3ec7800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) [ 1244.572888] binder_alloc: binder_alloc_mmap_handler: 24876 20001000-20004000 already mapped failed -16 [ 1244.601809] binder: BINDER_SET_CONTEXT_MGR already set [ 1244.610135] binder: 24876:24886 ioctl 40046207 0 returned -16 11:55:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1244.619060] binder_alloc: 24876: binder_alloc_buf, no vma 11:55:34 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) sendfile(r1, r1, 0x0, 0x800) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x0, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@arp={@rand_addr, @dev={0xac, 0x14, 0x14, 0x1a}, 0xff000000, 0xff000000, @mac=@remote, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, @mac, {[0x0, 0xff, 0xff]}, 0x4, 0x2, 0xca, 0x1380000, 0x20, 0x8, 'team0\x00', 'team_slave_1\x00', {}, {0xff}, 0x0, 0x4c}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@arp={@empty, @multicast1, 0x0, 0xffffffff, @mac=@local, {[0x143799dca149a611, 0x0, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff]}, 0x8000, 0x7fff, 0xfffffffffffffeff, 0xac, 0x6e24, 0x59, 'veth0_to_bond\x00', 'vcan0\x00', {}, {0xff}, 0x0, 0x200}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @empty, @remote, 0x8, 0x1}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@link_local, @empty, @loopback, 0xf, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 11:55:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000074000000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:34 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x500) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) 11:55:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) [ 1244.912769] binder_alloc: binder_alloc_mmap_handler: 24915 20001000-20004000 already mapped failed -16 [ 1244.940347] binder_alloc: 24915: binder_alloc_buf, no vma [ 1244.947592] binder: BINDER_SET_CONTEXT_MGR already set [ 1244.954340] binder: 24915:24921 ioctl 40046207 0 returned -16 11:55:37 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:55:37 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r3) close(r2) 11:55:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:37 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x806) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) 11:55:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000001112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:37 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0xfffffffffffffffe, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x800) 11:55:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:37 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x812) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) [ 1247.641797] binder_transaction: 4 callbacks suppressed [ 1247.641814] binder: 24942:24947 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1247.675867] binder_alloc: binder_alloc_mmap_handler: 24942 20001000-20004000 already mapped failed -16 [ 1247.686854] binder: BINDER_SET_CONTEXT_MGR already set [ 1247.692338] binder: 24942:24947 ioctl 40046207 0 returned -16 [ 1247.699110] binder_alloc: 24942: binder_alloc_buf, no vma [ 1247.705876] binder: 24942:24954 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1247.729443] binder_release_work: 4 callbacks suppressed [ 1247.729450] binder: undelivered TRANSACTION_ERROR: 29201 [ 1247.737795] binder: undelivered TRANSACTION_ERROR: 29189 11:55:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000003112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:37 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0x2) write$P9_RSTAT(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x67) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000080)={0xffffffff00000001, "261f3f9315af70ab8704fd1892d90a788d6fb5a2f39929455c283c51e05d01b4", 0x1}) 11:55:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32, @ANYBLOB='#\x00/proc/sys/net/ipv4/vs/sync_retries\x00'], 0x41) 11:55:37 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x807) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) [ 1247.891223] binder: 24969:24972 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1247.929574] binder_alloc: binder_alloc_mmap_handler: 24969 20001000-20004000 already mapped failed -16 [ 1247.946118] binder: BINDER_SET_CONTEXT_MGR already set [ 1247.952148] binder: 24969:24972 ioctl 40046207 0 returned -16 [ 1247.952509] binder_alloc: 24969: binder_alloc_buf, no vma [ 1247.965424] binder: 24969:24980 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1247.975161] binder: undelivered TRANSACTION_ERROR: 29201 [ 1247.987781] binder: undelivered TRANSACTION_ERROR: 29189 11:55:40 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:55:40 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x805) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) 11:55:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, 0x0, 0x0) 11:55:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000480000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xffffffff, 0x30000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x9, 0x0, 0x4, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={r2, @in={{0x2, 0x4e22, @broadcast}}}, 0x84) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r4) close(r3) 11:55:40 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x1, {0xa, 0x4e24, 0x9, @loopback, 0x894}, r2}}, 0x38) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000140)={0x3ff, 0x9e, 0x4, 0x1, 0x6a, 0x9, 0x10001, 0x3, 0x7ff, 0x616, 0x6}, 0xb) sendfile(r1, r1, 0x0, 0x800) [ 1250.686592] binder: 24991:24996 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1250.698536] binder_alloc: binder_alloc_mmap_handler: 24991 20001000-20004000 already mapped failed -16 11:55:40 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x10) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) 11:55:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, 0x0, 0x0) 11:55:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1250.747388] binder: BINDER_SET_CONTEXT_MGR already set [ 1250.758263] binder: 24991:24996 ioctl 40046207 0 returned -16 [ 1250.778935] binder_alloc: 24991: binder_alloc_buf, no vma [ 1250.805141] binder: 24991:25010 transaction failed 29189/-3, size 0-26388279066624 line 2973 11:55:40 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x809) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) 11:55:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000500112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1250.857721] binder: undelivered TRANSACTION_ERROR: 29201 [ 1250.872582] binder: undelivered TRANSACTION_ERROR: 29189 11:55:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, 0x0, 0x0) [ 1250.976835] binder: 25025:25030 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1251.003201] binder_alloc: binder_alloc_mmap_handler: 25025 20001000-20004000 already mapped failed -16 [ 1251.023562] binder: BINDER_SET_CONTEXT_MGR already set [ 1251.039463] binder: 25025:25030 ioctl 40046207 0 returned -16 [ 1251.046559] binder_alloc: 25025: binder_alloc_buf, no vma [ 1251.052674] binder: 25025:25035 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1251.081194] binder: undelivered TRANSACTION_ERROR: 29189 [ 1251.093692] binder: undelivered TRANSACTION_ERROR: 29201 11:55:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000)=0x9, 0x4) r4 = getpgrp(0xffffffffffffffff) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x6000, 0x0) rt_sigqueueinfo(r4, 0x21, &(0x7f0000000100)={0xe, 0x0, 0x1e9}) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x50, 0x0, &(0x7f0000000040)) r6 = dup(r3) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000200)='cubic\x00', 0x6) close(r3) close(r2) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x2, 0x0) read$eventfd(r7, &(0x7f00000000c0), 0x8) getsockopt$IPT_SO_GET_REVISION_MATCH(r7, 0x0, 0x42, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) ioctl$VIDIOC_G_AUDOUT(r6, 0x80345631, &(0x7f00000002c0)) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000340)='team\x00') getsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000001e40)={@remote, 0x0}, &(0x7f0000001e80)=0x14) accept4$packet(r5, &(0x7f0000001ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001f00)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001f40)={'vcan0\x00', 0x0}) getpeername$packet(r5, &(0x7f0000003340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003380)=0x14) getpeername(r5, &(0x7f0000003480)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003500)=0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003540)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000003580)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000003680)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000036c0)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f00000037c0)=0xe8) recvmmsg(r5, &(0x7f0000007f00)=[{{&(0x7f0000003800)=@sco, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003880)=""/78, 0x4e}, {&(0x7f0000003900)=""/5, 0x5}, {&(0x7f0000003940)=""/104, 0x68}, {&(0x7f0000005000)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/104, 0x68}, {&(0x7f0000003a40)=""/156, 0x9c}, {&(0x7f0000003b00)=""/199, 0xc7}, {&(0x7f0000003c00)=""/5, 0x5}], 0x8, &(0x7f0000003cc0)=""/84, 0x54}, 0x101}, {{&(0x7f0000003d40)=@ax25, 0x80, &(0x7f0000006200)=[{&(0x7f0000003dc0)=""/228, 0xe4}, {&(0x7f0000003ec0)=""/205, 0xcd}, {&(0x7f0000006000)=""/155, 0x9b}, {&(0x7f00000060c0)=""/229, 0xe5}, {&(0x7f00000061c0)=""/48, 0x30}], 0x5}, 0x4}, {{&(0x7f0000006280)=@nfc, 0x80, &(0x7f0000006580)=[{&(0x7f0000006300)=""/50, 0x32}, {&(0x7f0000006340)=""/62, 0x3e}, {&(0x7f0000006380)=""/173, 0xad}, {&(0x7f0000006440)=""/67, 0x43}, {&(0x7f00000064c0)=""/191, 0xbf}], 0x5}, 0x1}, {{&(0x7f0000006600)=@can={0x1d, 0x0}, 0x80, &(0x7f0000006680), 0x0, &(0x7f00000066c0)=""/238, 0xee}, 0x2}, {{0x0, 0x0, &(0x7f0000007b40)=[{&(0x7f00000067c0)=""/100, 0x64}, {&(0x7f0000006840)=""/3, 0x3}, {&(0x7f0000006880)=""/102, 0x66}, {&(0x7f0000006900)=""/255, 0xff}, {&(0x7f0000006a00)=""/4096, 0x1000}, {&(0x7f0000007a00)=""/132, 0x84}, {&(0x7f0000007ac0)=""/109, 0x6d}], 0x7}, 0xd}, {{&(0x7f0000007bc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000007d00)=[{&(0x7f0000007c40)=""/120, 0x78}, {&(0x7f0000007cc0)=""/28, 0x1c}], 0x2, &(0x7f0000007d40)=""/81, 0x51}}, {{&(0x7f0000007dc0)=@ipx, 0x80, &(0x7f0000007ec0)=[{&(0x7f0000007e40)=""/123, 0x7b}], 0x1}, 0x3f}], 0x7, 0x3b9bad1723a37a3d, &(0x7f00000080c0)={0x0, 0x1c9c380}) accept$packet(0xffffffffffffffff, &(0x7f0000008100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000008140)=0x14) getpeername$packet(r6, &(0x7f0000008180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000081c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000008580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000008540)={&(0x7f0000008200)={0x32c, r8, 0x300, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r9}, {0xb8, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x250, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r19}}, {0x8}}}]}}]}, 0x32c}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) 11:55:43 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:55:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900", @ANYRES32], 0x1c) 11:55:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000003f00112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:43 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) r2 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) sendfile(r1, r1, 0x0, 0x800) 11:55:43 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x803) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) 11:55:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="41000000370200020300000000090268cbd90ade72f36900"], 0x18) [ 1253.784045] binder: 25051:25057 transaction failed 29201/-28, size 0-26388279066624 line 2973 11:55:43 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x804) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) [ 1253.827897] binder_alloc: binder_alloc_mmap_handler: 25051 20001000-20004000 already mapped failed -16 [ 1253.839371] binder: BINDER_SET_CONTEXT_MGR already set [ 1253.846124] binder: 25051:25057 ioctl 40046207 0 returned -16 [ 1253.853164] binder_alloc: 25051: binder_alloc_buf, no vma [ 1253.861510] binder: 25051:25065 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1253.870848] binder: undelivered TRANSACTION_ERROR: 29201 11:55:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000300112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) [ 1253.882936] binder: undelivered TRANSACTION_ERROR: 29189 11:55:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x0) 11:55:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000000c0)=0xb7d, 0x4) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:55:43 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x810) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) [ 1253.998091] binder: 25076:25081 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1254.015747] binder_alloc: binder_alloc_mmap_handler: 25076 20001000-20004000 already mapped failed -16 [ 1254.025918] binder: BINDER_SET_CONTEXT_MGR already set [ 1254.031870] binder: 25076:25081 ioctl 40046207 0 returned -16 [ 1254.032375] binder_alloc: 25076: binder_alloc_buf, no vma [ 1254.050679] binder: 25076:25082 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1254.071618] binder: undelivered TRANSACTION_ERROR: 29201 [ 1254.080811] binder: undelivered TRANSACTION_ERROR: 29189 11:55:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x0) 11:55:46 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:55:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000020000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:46 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x802) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) 11:55:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="0200a9ffffff41000000ff07480000ffffff810000000000000000002300000000000000000000000000000000000000000000000000000000000100000055", 0x3f, 0x1c0}]) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:55:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x0) 11:55:46 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x20) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x800) 11:55:46 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x80a) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) [ 1256.880816] binder: 25107:25117 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1256.891916] Dev loop1: unable to read RDB block 1 [ 1256.897277] loop1: unable to read partition table 11:55:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) [ 1256.934467] binder_alloc: binder_alloc_mmap_handler: 25107 20001000-20004000 already mapped failed -16 [ 1256.944419] loop1: partition table beyond EOD, truncated [ 1256.954750] binder: BINDER_SET_CONTEXT_MGR already set [ 1256.963432] binder_alloc: 25107: binder_alloc_buf, no vma [ 1256.971819] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) 11:55:46 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semget$private(0x0, 0x0, 0x120) semget$private(0x0, 0x2, 0x0) semget$private(0x0, 0x4, 0x81) semget$private(0x0, 0x4, 0x1) r1 = semget$private(0x0, 0x1, 0x3ad) semctl$GETNCNT(r1, 0x800000000000000, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) [ 1256.980856] binder: 25107:25128 ioctl 40046207 0 returned -16 [ 1256.982858] binder: 25107:25133 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1256.998650] binder: undelivered TRANSACTION_ERROR: 29201 [ 1257.006473] binder: undelivered TRANSACTION_ERROR: 29189 11:55:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000000000000a0000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:47 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) sendfile(r1, r1, 0x0, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r2, 0xf2, "92074a", "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"}}, 0x110) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) getresgid(&(0x7f0000000080)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) setgid(r3) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000140)={'veth1_to_bond\x00', {0x2, 0x4e23, @multicast1}}) 11:55:47 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) [ 1257.066064] Dev loop1: unable to read RDB block 1 [ 1257.085502] loop1: unable to read partition table [ 1257.110542] loop1: partition table beyond EOD, truncated [ 1257.160410] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 1257.193919] binder: 25153:25156 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1257.229278] binder_alloc: binder_alloc_mmap_handler: 25153 20001000-20004000 already mapped failed -16 [ 1257.256514] binder_alloc: 25153: binder_alloc_buf, no vma [ 1257.262641] binder: BINDER_SET_CONTEXT_MGR already set [ 1257.268088] binder: 25153:25156 ioctl 40046207 0 returned -16 [ 1257.274809] binder: 25153:25162 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1257.283911] binder: undelivered TRANSACTION_ERROR: 29201 [ 1257.313954] binder: undelivered TRANSACTION_ERROR: 29189 11:55:49 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:55:49 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x800) socket$inet6_udp(0xa, 0x2, 0x0) 11:55:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) 11:55:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:55:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000000000004c0000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:49 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f00000001c0)=0x8, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000080)={0x2, {{0xa, 0x4e20, 0x0, @empty, 0xb27}}}, 0x88) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) exit(0x0) sendfile(r1, r1, 0x0, 0x800) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000140)={@multicast1, @empty}, &(0x7f0000000180)=0xc) 11:55:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x620000, 0x4) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0x5, 0xbd6d, 0x2fc, 0x1f}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r1, r1, 0x0, 0x800) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x9, 0x2694, 0x1b79, 0x9, 0x101, 0x100000001, 0x9}, 0x1c) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) [ 1259.960608] binder: 25179:25184 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1259.988029] binder_alloc: binder_alloc_mmap_handler: 25179 20001000-20004000 already mapped failed -16 [ 1259.997727] binder: BINDER_SET_CONTEXT_MGR already set [ 1260.004629] binder: 25179:25184 ioctl 40046207 0 returned -16 11:55:49 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="410000003702000203000000"], 0xc) [ 1260.012645] binder_alloc: 25179: binder_alloc_buf, no vma [ 1260.018925] binder: 25179:25189 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1260.037227] binder: undelivered TRANSACTION_ERROR: 29201 [ 1260.045606] binder: undelivered TRANSACTION_ERROR: 29189 11:55:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000740000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0xa881, 0x4) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000080)) close(r1) 11:55:50 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) sendfile(r1, r1, 0x0, 0x800) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x2, 0x8, 0x7, 0x1, 0x7f}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYBLOB="02000a00d300040005004ee20500962766858a043a4002fe0f00"], 0x1c) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000100)={0x29, 0x4, 0x0, {0x3, 0x100, 0x1, 0x0, [0x0]}}, 0x29) 11:55:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) [ 1260.193884] binder: 25211:25213 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1260.248998] binder_alloc: binder_alloc_mmap_handler: 25211 20001000-20004000 already mapped failed -16 [ 1260.289170] binder: BINDER_SET_CONTEXT_MGR already set [ 1260.305064] binder: 25211:25213 ioctl 40046207 0 returned -16 [ 1260.313505] binder_alloc: 25211: binder_alloc_buf, no vma [ 1260.319437] binder: 25211:25221 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1260.328724] binder: undelivered TRANSACTION_ERROR: 29201 [ 1260.336381] binder: undelivered TRANSACTION_ERROR: 29189 11:55:52 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:55:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) 11:55:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 11:55:52 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x147003, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f00000000c0)) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000080)={0x1, 0xffffffffffffffff}) pwrite64(r1, &(0x7f0000000000)="9ebbfb3735fd6cb588a9ff1866ce6220c0e1129ee7cc3c11ddbfb65f00dd6de35d00d5976d2dadb2238fdeeda53fc5bf456079088a4e6c5c35e3937e22062fea", 0x40, 0x3c) exit(0x0) sendfile(r1, r1, 0x0, 0x800) 11:55:52 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @sack_perm, @timestamp], 0x3) r1 = semget$private(0x0, 0x7, 0x43) semctl$IPC_INFO(r1, 0x4, 0x3, &(0x7f0000000080)=""/134) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x2) r2 = add_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000002580)='user\x00', &(0x7f00000025c0)={'syz', 0x3}, &(0x7f0000002600)="39dcc396d34291c82bb3cda80f75cde2d0acb77dbe0c479b9ac249ca529c6a5716adde98e35377697f283bb0b652cbd7736b3bde546244982b5c14a916159f70e324e18f195651ebbf2a78ccb972ba03656845b8b2370f4027b0761db9d152e6fb3916c3c142d739f74955a7b52303cf19d0f1505a4aacc7f0a7788ff296fb4d5f298513991b246e7244d77a28db3bd5088bcb1f0918da11ccdfac37299217b1cbfd712ad80b58cd7cf882db591d7c71", 0xb0, 0x0) keyctl$instantiate_iov(0x14, r2, &(0x7f0000002500)=[{&(0x7f00000001c0)="c51b8017c5d5cb721c7c465429f580c87d412fe17b42aa4b5785f02082a711626743454f508e321a110ab709a07e5313b663f9b03283acb317725242a5cd1ab8ce4be620738d54fb2aaabc9503b27754ea3acd6b4f31aa13112fc925bac10ab3a099828a0db27d2b0e587317271b7dad4d2db391940742bef428b51f1d28779ce5955e7174e09ba25e00e3d9f2c1924c512b848e16843f47c4d48b472c750960fd0f01782a5764eca4da7172500563b65d997c9e042373b261476f23dc3017d87f03f2daf0b0343abf38b64e065c7b5c40d76c52528e9cb43cf1c5db091e0f8bcf", 0xe1}, {&(0x7f00000002c0)="ff2d02db1a4293a8eae4717692852abcd2ed4f32bba73baf5df41948936e8020ff5416b2f1ef42c7dbfc97d0f9c00d31f4c923c45bd7c4e4339b8dc1111793d4d919e4c38349d4a9d929f01b327200cdaa12e92098c9b08912d6120f93466dd2c3e219044daa5da9feafb243423437af2034b152d07f7c8537010f4b747ad844e7c2b8e3feffc86f6dc32012de771e7f7c61448543a516e5ca435cacf1fe732f991ce4d75a17cdee0525d6e6dc744e5da14fca0fff87ab190585710f7ed6b37d1602db0552c12ed4417b4960a9adda1bc92de4955b1ab5d2", 0xd8}, {&(0x7f00000003c0)="b7e81d6c2a3d4ac2367636caf62742cbf09ddb46abe5e874319a1d4d761d0de5bf6fb3cf12a56cbce530291d438cf596f50b094d4353876eacd3e596352f556f3f3d85927fc6a04fdb9dea8f5280e008a67a636c916e34d85c584b602c895079e765444670f7b5be36ab5f3eb1e31f76c1450012adb1a517b6fa866d4b7e38b3c9b4922ca976277311", 0x89}, {&(0x7f0000000480)="8ed137eea18388a1d159a03d38865e5e2d297391785fc24bfd85eba6cdce16d3a67bb8c98c8da35b5486920e1068ef1f4b167e26875523c66f", 0x39}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="628217", 0x3}, {&(0x7f0000001500)="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", 0x1000}], 0x7, r3) 11:55:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000000000000000000000006c0000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) [ 1263.096839] binder: 25242:25249 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1263.111604] binder_alloc: binder_alloc_mmap_handler: 25242 20001000-20004000 already mapped failed -16 11:55:53 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x88000000000) 11:55:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000050000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:53 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000), 0x225) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000380)=0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, [], 0x14}, @in=@loopback, 0x4e21, 0x9, 0x4e21, 0x4e73, 0xa, 0x20, 0x20, 0x3e, r3, r4}, {0x401, 0x8001, 0x7, 0x8, 0x7, 0x0, 0x2, 0x89b0}, {0x3, 0xffff, 0x7, 0x7}, 0x10000, 0x6e6bb2, 0x1, 0x1, 0x0, 0x2}, {{@in6, 0x4d5, 0xff}, 0xa, @in=@multicast2, 0x3506, 0x4, 0x1, 0x7fffffff, 0x2000000ff, 0x4, 0xfffffffffffffffa}}, 0xe8) close(r2) close(r1) [ 1263.149766] binder: BINDER_SET_CONTEXT_MGR already set [ 1263.149828] binder_alloc: 25242: binder_alloc_buf, no vma [ 1263.155063] binder: 25242:25249 ioctl 40046207 0 returned -16 [ 1263.168221] binder: 25242:25253 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1263.179488] binder: undelivered TRANSACTION_ERROR: 29201 [ 1263.186431] binder: undelivered TRANSACTION_ERROR: 29189 11:55:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="410000003702"], 0x6) 11:55:53 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x10) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f0000000080)=""/154, &(0x7f0000000140)=0x9a) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r1) close(r0) [ 1263.372383] binder: 25268:25272 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1263.383353] binder_alloc: binder_alloc_mmap_handler: 25268 20001000-20004000 already mapped failed -16 [ 1263.405761] binder: BINDER_SET_CONTEXT_MGR already set [ 1263.411996] binder_alloc: 25268: binder_alloc_buf, no vma [ 1263.421887] binder: 25268:25272 ioctl 40046207 0 returned -16 [ 1263.425347] binder: 25268:25275 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1263.436916] binder: undelivered TRANSACTION_ERROR: 29201 [ 1263.444048] binder: undelivered TRANSACTION_ERROR: 29189 11:55:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:55:56 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x800) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x40, 0x3}, 0x1}}, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x0, 0xea2, 0xfc0, 0x8, 0x800, 0x1f, 0x0, {0x0, @in6={{0xa, 0x4e21, 0xd785, @dev={0xfe, 0x80, [], 0x10}, 0x3}}, 0x7, 0x8, 0x3, 0x29b, 0xf17}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="000000000000bd8e63cc9da937b3788c4fd6ac7f5c8e9fe48bf6bc9bfc57019c842d7a8fb12c92de6ac30b62f30a47857f6e870ac018f5eefc05b78d925f15fc7e9658066aedae86805d977a97b20c6f19fdbac6589c76988e4eaa532e87c9a7305a8394c4dae5b4808ed46e015594cfd8ebd6"], &(0x7f0000000240)=0xe) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r1, 0x3da9e324}, &(0x7f00000001c0)=0x8) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x20) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x84, r2, 0xa12, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) 11:55:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000a00112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) 11:55:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:55:56 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x200000000000800) 11:55:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) [ 1266.202448] binder: 25297:25305 transaction failed 29201/-28, size 0-26388279066624 line 2973 11:55:56 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x9) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x3) [ 1266.243514] binder_alloc: binder_alloc_mmap_handler: 25297 20001000-20004000 already mapped failed -16 [ 1266.256894] binder: BINDER_SET_CONTEXT_MGR already set [ 1266.272607] binder: 25297:25305 ioctl 40046207 0 returned -16 [ 1266.281184] binder_alloc: 25297: binder_alloc_buf, no vma 11:55:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) [ 1266.312819] binder: undelivered TRANSACTION_ERROR: 29201 [ 1266.321357] binder: 25297:25313 transaction failed 29189/-3, size 0-26388279066624 line 2973 11:55:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000080)=0x9) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:55:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000700112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:56 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x264a17c5, 0x500) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000003c0)={0x1, {{0xa, 0x4e20, 0x4, @empty, 0xffffffff7fffffff}}}, 0x88) recvmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000000c0)=@pppol2tpin6, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000180)=""/113, 0x71}, {&(0x7f0000000200)=""/34, 0x22}], 0x3, &(0x7f0000000280)=""/175, 0xaf}, 0x20) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000380)=0xa502, 0x515) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r1, r1, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) [ 1266.357344] binder: undelivered TRANSACTION_ERROR: 29189 [ 1266.463555] binder: 25331:25334 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1266.496562] binder_alloc: binder_alloc_mmap_handler: 25331 20001000-20004000 already mapped failed -16 [ 1266.506326] binder: BINDER_SET_CONTEXT_MGR already set [ 1266.512106] binder: 25331:25334 ioctl 40046207 0 returned -16 [ 1266.522730] binder_alloc: 25331: binder_alloc_buf, no vma [ 1266.528831] binder: 25331:25338 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1266.538819] binder: undelivered TRANSACTION_ERROR: 29201 [ 1266.549157] binder: undelivered TRANSACTION_ERROR: 29189 11:55:59 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:55:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='A\x00\x00'], 0x3) 11:55:59 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f00000000c0)={0x80000000000000, 0x1000, 0x2, 0x4, 0x40000}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{0x8, 0x11a7}, 'port1\x00', 0x48, 0x4, 0x0, 0x1, 0x9, 0xfff, 0x9, 0x0, 0x2, 0x2}) sendfile(r0, r0, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) 11:55:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000004800112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:59 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x7, 0x2000) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x2}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95)=0xb7, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r3) close(r2) 11:55:59 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x80000, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x5, &(0x7f00000000c0)='*#.!\x00', 0xffffffffffffffff}, 0xffffffffffffff52) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000180)="000000008001000000355d32e96ad5c02f696b5933c76360") setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0x100000000}, @timestamp, @mss={0x2, 0x2}, @window={0x3, 0x8, 0x3}], 0x4) exit(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@ipv4, @in=@empty}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000040)) sendfile(r2, r2, 0x0, 0x800) socket$bt_rfcomm(0x1f, 0x0, 0x3) [ 1269.271859] binder: 25352:25360 transaction failed 29201/-28, size 0-26388279066624 line 2973 11:55:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) 11:55:59 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x1f) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/4) sendfile(r0, r0, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7fc) [ 1269.317138] binder_alloc: binder_alloc_mmap_handler: 25352 20001000-20004000 already mapped failed -16 [ 1269.341972] binder: BINDER_SET_CONTEXT_MGR already set [ 1269.349059] binder_alloc: 25352: binder_alloc_buf, no vma [ 1269.358107] binder: 25352:25369 ioctl 40046207 0 returned -16 11:55:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x68) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r3) close(r1) [ 1269.365168] binder: 25352:25370 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1269.375393] binder: undelivered TRANSACTION_ERROR: 29201 [ 1269.382693] binder: undelivered TRANSACTION_ERROR: 29189 11:55:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000040000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:55:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) 11:55:59 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xb) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) process_vm_readv(r1, &(0x7f00000010c0)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/39, 0x27}], 0x2, &(0x7f0000001240)=[{&(0x7f0000001100)=""/117, 0x75}, {&(0x7f0000001180)=""/158, 0x9e}], 0x2, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000001280)=""/81) [ 1269.526340] binder: 25384:25388 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1269.578965] binder_alloc: binder_alloc_mmap_handler: 25384 20001000-20004000 already mapped failed -16 [ 1269.602973] binder: BINDER_SET_CONTEXT_MGR already set [ 1269.608996] binder_alloc: 25384: binder_alloc_buf, no vma [ 1269.614886] binder: 25384:25388 ioctl 40046207 0 returned -16 [ 1269.615885] binder: 25384:25396 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1269.629960] binder: undelivered TRANSACTION_ERROR: 29201 [ 1269.660882] binder: undelivered TRANSACTION_ERROR: 29189 11:56:02 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0xfffffffffffffffd) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) memfd_create(&(0x7f00000000c0)='%\x00', 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r3) close(r2) mknodat(r1, &(0x7f0000000080)='./file0\x00', 0xe040, 0x7) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x8000, 0x0) 11:56:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) 11:56:02 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x800) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getgid() r3 = geteuid() mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x800, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1200}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x6}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3a6a6bf4}}, {@allow_other='allow_other'}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@subj_user={'subj_user', 0x3d, 'oom_score_adj\x00'}}]}}) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) 11:56:02 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1000000000013) 11:56:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000070000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:56:02 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3e73, 0x0) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x7, 0x4, 0x991, 0x1000, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r2, &(0x7f0000000140)=0x4) exit(0x0) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000180)={0x4, 0xffff, [{0x94, 0x0, 0x20}, {0x3, 0x0, 0x40}, {0x0, 0x0, 0x708c}, {0x3, 0x0, 0x3ff}]}) sendfile(r1, r0, 0x0, 0x800) 11:56:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='A\x00'], 0x2) [ 1272.325733] binder: 25408:25414 transaction failed 29201/-28, size 0-26388279066624 line 2973 11:56:02 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x9cc, 0x3d115566, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1b}}}, {0xa, 0x4e23, 0x6, @mcast1, 0x7fff}, r1, 0x5}}, 0x48) flistxattr(r0, &(0x7f0000000080)=""/130, 0x82) 11:56:02 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x101, 0x20}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r3, 0xb2, "d8623891f5156adf9e607b6885ead61302437bf589ad822e6b82caa80eff0c4ca3f2a16a623283213f97af5a5d346a0c2691f708f1c957ab099cb6dc145d2f2c758d5f9f8d4b12d155211a4ec4dea8bfe6315b9168ec57a94f85003ec45d7ad16a2950656a583ea3d3c4a58267990308445815cea70f4bacb249185005436c1e0a320c6b08f1a9368d305e69a54da438b1294aa66f5ce80cb3d90f680c7fe8d37fb3169a3ca51da4b65e56e4f39c1652bf5c"}, &(0x7f0000000180)=0xba) close(r2) close(r1) 11:56:02 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) sendfile(r1, r1, 0x0, 0x800) connect$unix(r0, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e23}, 0x6e) [ 1272.376974] binder_alloc: binder_alloc_mmap_handler: 25408 20001000-20004000 already mapped failed -16 [ 1272.403721] binder_alloc: 25408: binder_alloc_buf, no vma [ 1272.407568] binder: BINDER_SET_CONTEXT_MGR already set [ 1272.411934] binder: 25408:25427 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1272.429222] binder: 25408:25414 ioctl 40046207 0 returned -16 [ 1272.436793] binder: undelivered TRANSACTION_ERROR: 29201 [ 1272.445547] binder: undelivered TRANSACTION_ERROR: 29189 11:56:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000000600112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:56:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='A'], 0x1) 11:56:02 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x800) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000)) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) 11:56:02 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) write$eventfd(r0, &(0x7f0000000000)=0x9, 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) sendfile(r1, r1, 0x0, 0x800) accept4(r0, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x80, 0x80800) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000200)={@mcast1, @local, @empty, 0x100000000, 0x9, 0x8, 0x400, 0xfffffffffffffffb, 0x2000010, r2}) 11:56:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) [ 1272.628650] binder: 25463:25467 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1272.659590] binder_alloc: binder_alloc_mmap_handler: 25463 20001000-20004000 already mapped failed -16 [ 1272.674260] binder: BINDER_SET_CONTEXT_MGR already set [ 1272.678291] binder_alloc: 25463: binder_alloc_buf, no vma [ 1272.686376] binder: 25463:25470 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1272.696903] binder: undelivered TRANSACTION_ERROR: 29201 [ 1272.704449] binder: undelivered TRANSACTION_ERROR: 29189 [ 1272.723411] binder: 25463:25467 ioctl 40046207 0 returned -16 11:56:05 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1000000000013) 11:56:05 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x800) ioctl$void(r0, 0xc0045878) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x2) r1 = geteuid() r2 = getegid() write$P9_RGETATTR(r0, &(0x7f0000000080)={0xa0, 0x19, 0x1, {0x7, {0x1, 0x2, 0x2}, 0x40, r1, r2, 0x9, 0xfffffffffffffff7, 0x8, 0x8b, 0x200, 0x600000000000000, 0x1, 0x10000, 0x3, 0x3, 0x4e, 0x400, 0x0, 0xffffffffffffff1e}}, 0xa0) 11:56:05 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f000086c000)='./file0\x00', 0x103d, 0x0) r3 = open$dir(&(0x7f00004be000)='./file0\x00', 0x80000880, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) close(r3) creat(&(0x7f00007dc000)='./file0\x00', 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000440)={0xfffffffffffffffc}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0x200000000000000}, 0x1c) listen(r4, 0x10001) r5 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x20, 0x0) r6 = dup2(r5, r5) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000340)={0x10001, 0x37c, 0x4, 0x8, 0x7fff, 0x0, 0x7, 0x80000000000, 0x37, 0x4, 0x0, 0x3}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000200)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) ioctl$sock_inet_udp_SIOCOUTQ(r6, 0x5411, &(0x7f00000003c0)) r8 = getpgrp(r7) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r5, 0xc0405519, &(0x7f0000000480)={0x1, 0x2, 0x3, 0x0, "73797a3100000000000000000000000000200000007555a73600", 0x1}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105511, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x5, r8, 0x1, 0x0, 'syz0\x00', &(0x7f0000000000)=["4c65746831812d2900"], 0x9}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) 11:56:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000006800112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:56:05 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) 11:56:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x80, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) inotify_init() r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x2080, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766649e6570", @ANYRESHEX=r0, @ANYBLOB=',msize=0x0000000000000008,cachetag=oom_score_adj\x00,subj_user=/dev/net/tun\x00,\x00']) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)="6f6f6d5f73636f72655f61646a002a68777f5010910e7856bba3225ab5264ff2b44eebedc22a4f4404d73a2c28229e116ff4640bd5536d0cb44ba8d99bf150939b42aa3f46110f77c24b4782bb1d135da552fea2a5011184e8248908d85d7e40c993dc2f44bdff90ade93189d20e635e6f70c1418408c1615f1230b951b9b4a07dcdd0e663ceffb10d8953aa81050f2a637e1230f3377dc6c7709fedcac4ec10abdfaeafb1fbb7244ccb71b3baa3c04b90af5c36c75fe27fbe06ccc7c533035e4a93d28f01b02e568f93df670eb71b") exit(0xffffffffffffff80) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x80000, 0x0) sendfile(r2, r2, 0x0, 0x800) open(&(0x7f0000000340)='./file0\x00', 0x8400, 0x150) 11:56:05 executing program 2: r0 = socket(0x5, 0x0, 0xd5) setsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000140)="366cd69b55aa40b4217af3334d1ac69b081b85eb592673e4f4141642365da51f71ebbccce5d21111f950ace72370adb27a43307db0ab7e5446f41481d1d6c7f6da895cd672fce6cd7c6d72cddb557a1c6dd57def996718dad0b7f0b33ab11898150fb0f551767d28e79c6db324fe80885243", 0x72) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r1, r1, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) r2 = msgget$private(0x0, 0xe) msgctl$IPC_STAT(r2, 0x2, &(0x7f00000001c0)=""/170) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x7fffffff, 0x9}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={r3, 0x9013}, &(0x7f0000000100)=0x8) 11:56:05 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) [ 1275.423211] binder: 25495:25500 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1275.438245] binder_alloc: binder_alloc_mmap_handler: 25495 20001000-20004000 already mapped failed -16 [ 1275.448257] binder: BINDER_SET_CONTEXT_MGR already set [ 1275.453814] binder: 25495:25500 ioctl 40046207 0 returned -16 [ 1275.460293] binder_alloc: 25495: binder_alloc_buf, no vma [ 1275.466413] binder: 25495:25503 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1275.502610] binder: undelivered TRANSACTION_ERROR: 29201 [ 1275.513364] binder: undelivered TRANSACTION_ERROR: 29189 11:56:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000030000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:56:05 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40000, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000080)={0x29, 0x6, 0x0, {0x2, 0x4}}, 0x29) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) 11:56:05 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x101, 0x20}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r3, 0xb2, "d8623891f5156adf9e607b6885ead61302437bf589ad822e6b82caa80eff0c4ca3f2a16a623283213f97af5a5d346a0c2691f708f1c957ab099cb6dc145d2f2c758d5f9f8d4b12d155211a4ec4dea8bfe6315b9168ec57a94f85003ec45d7ad16a2950656a583ea3d3c4a58267990308445815cea70f4bacb249185005436c1e0a320c6b08f1a9368d305e69a54da438b1294aa66f5ce80cb3d90f680c7fe8d37fb3169a3ca51da4b65e56e4f39c1652bf5c"}, &(0x7f0000000180)=0xba) close(r2) close(r1) 11:56:05 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x4, 0x295e, 0x7}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0x1, 0x8001}, 0x8) sendfile(r0, r0, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) [ 1275.626649] binder: 25520:25522 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1275.646786] binder_alloc: binder_alloc_mmap_handler: 25520 20001000-20004000 already mapped failed -16 [ 1275.690548] binder: BINDER_SET_CONTEXT_MGR already set [ 1275.697938] binder: 25520:25522 ioctl 40046207 0 returned -16 [ 1275.711317] binder_alloc: 25520: binder_alloc_buf, no vma [ 1275.724951] binder: 25520:25525 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1275.746091] binder: undelivered TRANSACTION_ERROR: 29201 [ 1275.754584] binder: undelivered TRANSACTION_ERROR: 29189 11:56:08 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000780)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x1000000000013) 11:56:08 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') r1 = signalfd(r0, &(0x7f0000000000)={0xa6b}, 0x8) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r1, r0, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) 11:56:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000120000112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:56:08 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x501080, 0x10c) write$P9_RSTATFS(r2, &(0x7f0000000700)={0x43, 0x9, 0x1, {0x6, 0x401, 0x3, 0x200, 0x1000, 0x8, 0x3, 0xffffffff}}, 0x43) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getegid() setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_int(r2, 0x0, 0x1f, &(0x7f0000000780), &(0x7f00000007c0)=0x4) vmsplice(r3, &(0x7f0000000680)=[{&(0x7f0000000080)="4dc937b4bbabf62b874f4d215f4401e7cdef975626d93a72513c1afd88620c95d589f9c3b8ed7bbbe0adc3210baf6e222f5e7cc658156c7c5c2c749c9a0ab2a79a3f9ea0b09b56c47ee75cfa2132444eea1a5fd29d513766b44a44cac6c17b6cc2433d6ddd3c7225f91b2cc25bc124a1ee46b233d8ad5ff61656d24ebd5e82921c6e3ae85f", 0x85}, {&(0x7f0000000140)="5c87a6b9fdb7cc9c695b80a2b22e1e00b3912c07331b442e2793cbcc59d975f305416c44168b4f171deeb5a7d97e6fbabc201b3d8fea75b9d59a0b8d663eb44ad71116c49b2d26ca029f479908fd7277be0cab0800f8ebdb4975a74ba9517ad5283be2a05d053ad6aab31b0a8a", 0x6d}, {&(0x7f00000001c0)="1cb7c549a32b7ca18e2afc7cdf451c51d0880b129d3358d8aafa6e6d4826409fa33cbba8717e78c649ad45fa09a98640890301642cf8b8feb147807a965775c1cb9c7a013d59bd7db2bf276822c8a2c928d35b", 0x53}, {&(0x7f0000000280)="c4fbb45564a175d74d2f27b77852108b11e2ae6682e5bd74643aa92f40cd7848f0e6ee8deb4c6de98816189a858ef4dee363399ea1106842b985870d5ec31715098b2ed24a4e468e4ab7fabc263304108921bd83a945805bee05320f2394f48bc494b328d1902ad4abdf1d56a6d69c552f22dcc2701d41dc86b312d2eec34cdb972703edeb11d1d25cbe7de37c1fb64463b4fb6009ede6ad3623a109b21a64e9049eb459deb3ca9225f9893fd61e457aa9f03401980fa7a13f69af4e062efc6f01ee70bfd58d98bdee48d43972ddbd453a6b05b743b31480b6cd7b99c44eb20b2cfb043f", 0xe4}, {&(0x7f0000000380)="92e54c5dda1fe970608f048e7c960689317dc163f34650e308f6f00bd5d3f96c2bc0714ba8f4f1e5856912c5ec091f4d6c03d57e74d9d7971172ded146bda9bef7e7b576c32dc83085dec670e851a439e8a569c3dbbc903e630113c2b564f925d5bf16b2fbaaf9cec9bca3cbcc72fae99d52c89f57b74765485e743b1d554796b8c1a25076d9e9566ff787d8f195afcc9df9a4fa4a180298c1f71d698ff649cba0d29c0ae521ab21cf6eb3953dd64a2f123fb845239d79d682e1cc0f7c03bc1b05adeab5cd11e635a9172b", 0xcb}, {&(0x7f0000000000)="378c40862a3af583ecaa9592c7deeaa8718e165cfb8acb8b96197128d7887c4d3ccb4d08c6", 0x25}, {&(0x7f0000000480)="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", 0xfe}, {&(0x7f0000000580)="72b0982cc4748e1e0e280b86aad509b4526e980b9d153b37f8e8aa997f8c4106ae4b3c9bce4f5e55f9f73ff14e5e5dc0f7989b6b3b50b92fc3329d35e7805839597d4d1a44f095ea702dd151ca6c3478d75eaa64cc50e76dd2fc5b8740d688d056820bdcfb49980c593891954bd86199ba51ed110ca4f7ec1979700d644c8ec001e0ecec89a6e38ab28239ea90ddfeefe448a58a5d014fbb55d50c4aee59f041d84555fc549867c10aa4b1692eff5974d7100cc6cf666876eb3ebe77edfb101670e28fe7e62003c5344c9bd855546377027dcf2669f8da74", 0xd8}], 0x8, 0xa) close(r3) close(r1) 11:56:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x101, 0x20}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r3, 0xb2, "d8623891f5156adf9e607b6885ead61302437bf589ad822e6b82caa80eff0c4ca3f2a16a623283213f97af5a5d346a0c2691f708f1c957ab099cb6dc145d2f2c758d5f9f8d4b12d155211a4ec4dea8bfe6315b9168ec57a94f85003ec45d7ad16a2950656a583ea3d3c4a58267990308445815cea70f4bacb249185005436c1e0a320c6b08f1a9368d305e69a54da438b1294aa66f5ce80cb3d90f680c7fe8d37fb3169a3ca51da4b65e56e4f39c1652bf5c"}, &(0x7f0000000180)=0xba) close(r2) close(r1) 11:56:08 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x20) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000140)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4, 0xff, 0x46, 0xe7c, 0x9}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r3, 0x80000001}, 0x8) sendfile(r2, r2, 0x0, 0x800) [ 1278.553718] binder: 25552:25557 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1278.567505] binder_alloc: binder_alloc_mmap_handler: 25552 20001000-20004000 already mapped failed -16 [ 1278.587555] binder: BINDER_SET_CONTEXT_MGR already set 11:56:08 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) 11:56:08 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xd25, 0x4, 0x0, 0xb34c, 0x2c, 0x20}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) close(r2) close(r1) [ 1278.608266] binder: 25552:25557 ioctl 40046207 0 returned -16 [ 1278.614444] binder_alloc: 25552: binder_alloc_buf, no vma [ 1278.621368] binder: 25552:25562 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1278.631169] binder: undelivered TRANSACTION_ERROR: 29201 [ 1278.640794] binder: undelivered TRANSACTION_ERROR: 29189 11:56:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x32, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0063404000000000000000000000000000006c00112f733f47ffff10e26fdd2c810000000000000000000000000000000018"], 0x0, 0x0, 0x0}) 11:56:08 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r0, r0, 0x0, 0x8000000000800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) 11:56:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x101, 0x20}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r3, 0xb2, "d8623891f5156adf9e607b6885ead61302437bf589ad822e6b82caa80eff0c4ca3f2a16a623283213f97af5a5d346a0c2691f708f1c957ab099cb6dc145d2f2c758d5f9f8d4b12d155211a4ec4dea8bfe6315b9168ec57a94f85003ec45d7ad16a2950656a583ea3d3c4a58267990308445815cea70f4bacb249185005436c1e0a320c6b08f1a9368d305e69a54da438b1294aa66f5ce80cb3d90f680c7fe8d37fb3169a3ca51da4b65e56e4f39c1652bf5c"}, &(0x7f0000000180)=0xba) close(r2) close(r1) [ 1278.775146] binder: 25583:25585 transaction failed 29201/-28, size 0-26388279066624 line 2973 [ 1278.785945] binder_alloc: binder_alloc_mmap_handler: 25583 20001000-20004000 already mapped failed -16 [ 1278.796666] binder_alloc: 25583: binder_alloc_buf, no vma [ 1278.802730] binder: BINDER_SET_CONTEXT_MGR already set [ 1278.803797] binder: 25583:25587 transaction failed 29189/-3, size 0-26388279066624 line 2973 [ 1278.838028] INFO: task syz-executor3:16604 blocked for more than 140 seconds. [ 1278.852188] Not tainted 4.20.0-rc6+ #154 [ 1278.853377] binder: 25583:25585 ioctl 40046207 0 returned -16 [ 1278.856918] binder: undelivered TRANSACTION_ERROR: 29201 [ 1278.856952] binder: undelivered TRANSACTION_ERROR: 29189 11:56:08 executing program 2: r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000002, r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendfile(r1, r1, 0x0, 0x800) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) [ 1278.888421] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1278.907831] syz-executor3 D22768 16604 13048 0x00000000 [ 1278.916462] Call Trace: [ 1278.920152] __schedule+0x8cf/0x21d0 [ 1278.923973] ? __sched_text_start+0x8/0x8 [ 1278.928302] ? find_held_lock+0x36/0x1c0 [ 1278.933838] ? zap_class+0x640/0x640 [ 1278.938089] ? zap_class+0x640/0x640 [ 1278.941892] ? finish_task_switch+0x1f4/0x910 [ 1278.956946] ? _raw_spin_unlock_irq+0x27/0x80 [ 1278.973531] ? _raw_spin_unlock_irq+0x27/0x80 [ 1278.993047] ? find_held_lock+0x36/0x1c0 [ 1278.998708] schedule+0xfe/0x460 [ 1279.002603] ? __mutex_lock+0xafa/0x16f0 [ 1279.007166] ? __schedule+0x21d0/0x21d0 [ 1279.012074] ? kasan_check_read+0x11/0x20 [ 1279.016704] ? do_raw_spin_unlock+0xa7/0x330 [ 1279.022415] ? do_raw_spin_trylock+0x270/0x270 [ 1279.029522] ? ww_mutex_lock.part.8+0xf0/0xf0 [ 1279.034368] ? mutex_destroy+0x200/0x200 [ 1279.038674] schedule_preempt_disabled+0x13/0x20 [ 1279.043864] __mutex_lock+0xaff/0x16f0 [ 1279.048166] ? tun_get_user+0x1db5/0x4250 [ 1279.052900] ? mutex_trylock+0x2b0/0x2b0 [ 1279.057339] ? check_preemption_disabled+0x48/0x280 [ 1279.062759] ? print_usage_bug+0xc0/0xc0 [ 1279.068103] ? try_to_wake_up+0x11c/0x1440 [ 1279.072485] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1279.078846] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1279.084461] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1279.096012] ? preempt_schedule+0x4d/0x60 [ 1279.101623] ? print_usage_bug+0xc0/0xc0 [ 1279.110547] ? __lock_acquire+0x62f/0x4c20 [ 1279.117781] ? _raw_spin_unlock_irqrestore+0xbb/0xd0 [ 1279.123394] ? mark_held_locks+0x130/0x130 [ 1279.127953] ? migrate_swap_stop+0x8a0/0x8a0 [ 1279.132494] mutex_lock_nested+0x16/0x20 [ 1279.136561] ? mutex_lock_nested+0x16/0x20 [ 1279.140968] tun_get_user+0x1db5/0x4250 [ 1279.145093] ? tun_net_xmit+0x1c90/0x1c90 [ 1279.149387] ? zap_class+0x640/0x640 [ 1279.153306] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 1279.159220] ? futex_wake+0x304/0x760 [ 1279.163095] ? find_held_lock+0x36/0x1c0 [ 1279.167258] ? tun_get+0x206/0x370 [ 1279.170957] ? lock_downgrade+0x900/0x900 [ 1279.175195] ? check_preemption_disabled+0x48/0x280 [ 1279.180416] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1279.185447] ? kasan_check_read+0x11/0x20 [ 1279.189757] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1279.195156] ? rcu_softirq_qs+0x20/0x20 [ 1279.199284] ? tun_get+0x22d/0x370 [ 1279.202934] ? tun_chr_close+0x180/0x180 [ 1279.207097] tun_chr_write_iter+0xb9/0x160 [ 1279.211466] do_iter_readv_writev+0x8b0/0xa80 [ 1279.216051] ? vfs_dedupe_file_range+0x700/0x700 [ 1279.220969] ? rw_verify_area+0x118/0x360 [ 1279.225229] do_iter_write+0x185/0x5f0 [ 1279.229275] ? dup_iter+0x260/0x260 [ 1279.233040] vfs_writev+0x1f1/0x360 [ 1279.236754] ? vfs_iter_write+0xb0/0xb0 [ 1279.240938] ? lock_release+0xa00/0xa00 [ 1279.245017] ? perf_trace_sched_process_exec+0x860/0x860 [ 1279.250594] ? posix_ktime_get_ts+0x15/0x20 [ 1279.255015] ? trace_hardirqs_off_caller+0x310/0x310 [ 1279.260307] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1279.265942] ? __fdget_pos+0xde/0x200 [ 1279.269902] ? __fdget_raw+0x20/0x20 [ 1279.273759] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1279.279497] ? put_timespec64+0x10f/0x1b0 [ 1279.283729] do_writev+0x11a/0x310 [ 1279.287406] ? vfs_writev+0x360/0x360 [ 1279.291939] ? trace_hardirqs_off_caller+0x310/0x310 [ 1279.297165] __x64_sys_writev+0x75/0xb0 [ 1279.301323] do_syscall_64+0x1b9/0x820 [ 1279.305295] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1279.310806] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1279.315851] ? trace_hardirqs_on_caller+0x310/0x310 [ 1279.321040] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1279.326119] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 1279.332958] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1279.337982] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1279.343240] RIP: 0033:0x457511 [ 1279.346562] Code: Bad RIP value. [ 1279.356713] RSP: 002b:00007f7c90782ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 1279.364597] RAX: ffffffffffffffda RBX: 000000000000fed1 RCX: 0000000000457511 [ 1279.372340] RDX: 0000000000000001 RSI: 00007f7c90782bf0 RDI: 00000000000000f0 [ 1279.380157] RBP: 000000002000a000 R08: 00000000000000f0 R09: 0000000000000000 [ 1279.388217] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f7c907836d4 [ 1279.395626] R13: 00000000004c537d R14: 00000000004d9890 R15: 00000000ffffffff [ 1279.403084] [ 1279.403084] Showing all locks held in the system: [ 1279.410055] 1 lock held by khungtaskd/1019: [ 1279.414614] #0: 0000000051609b8e (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x424 [ 1279.428074] 3 locks held by rs:main Q:Reg/6112: [ 1279.432866] 1 lock held by rsyslogd/6114: [ 1279.437104] #0: 0000000037495aa1 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1bb/0x200 [ 1279.445254] 2 locks held by getty/6237: [ 1279.449383] #0: 00000000ee1c592d (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 1279.457673] #1: 000000001904b5fd (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 1279.466615] 2 locks held by getty/6238: [ 1279.470682] #0: 000000002d64e193 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 1279.479435] #1: 000000009de6c516 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 1279.488418] 2 locks held by getty/6239: [ 1279.492577] #0: 0000000076c15b17 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 1279.500853] #1: 000000007e6feb1c (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 1279.509810] 2 locks held by getty/6240: [ 1279.513796] #0: 0000000090fc64c3 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 1279.522096] #1: 000000008a12905f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 1279.530989] 2 locks held by getty/6241: [ 1279.534958] #0: 0000000078783b77 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 1279.543231] #1: 00000000010ef7a8 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 1279.552160] 2 locks held by getty/6242: [ 1279.556127] #0: 000000007b346806 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 1279.564671] #1: 00000000797a5b79 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 1279.573606] 2 locks held by getty/6243: [ 1279.577615] #0: 0000000048dacbed (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 1279.585839] #1: 00000000e5972f86 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 1279.594741] 1 lock held by syz-executor3/16591: [ 1279.599451] #0: 00000000375628b9 (&tfile->napi_mutex){+.+.}, at: tun_get_user+0x1db5/0x4250 [ 1279.608100] 1 lock held by syz-executor3/16604: [ 1279.612775] #0: 00000000375628b9 (&tfile->napi_mutex){+.+.}, at: tun_get_user+0x1db5/0x4250 [ 1279.621485] [ 1279.623115] ============================================= [ 1279.623115] [ 1279.630295] NMI backtrace for cpu 1 [ 1279.633928] CPU: 1 PID: 1019 Comm: khungtaskd Not tainted 4.20.0-rc6+ #154 [ 1279.640929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1279.650280] Call Trace: [ 1279.652863] dump_stack+0x244/0x39d [ 1279.656526] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1279.661703] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1279.667232] nmi_cpu_backtrace.cold.2+0x5c/0xa1 [ 1279.671954] ? lapic_can_unplug_cpu.cold.27+0x3f/0x3f [ 1279.677138] nmi_trigger_cpumask_backtrace+0x1e8/0x22a [ 1279.682405] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1279.687577] watchdog+0xb51/0x1060 [ 1279.691132] ? hungtask_pm_notify+0xb0/0xb0 [ 1279.695440] ? __kthread_parkme+0xce/0x1a0 [ 1279.699672] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1279.704759] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1279.709858] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1279.714439] ? trace_hardirqs_on+0xbd/0x310 [ 1279.718745] ? kasan_check_read+0x11/0x20 [ 1279.722876] ? __kthread_parkme+0xce/0x1a0 [ 1279.727097] ? trace_hardirqs_off_caller+0x310/0x310 [ 1279.732183] ? trace_hardirqs_off_caller+0x310/0x310 [ 1279.737271] ? lockdep_init_map+0x9/0x10 [ 1279.741326] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1279.746423] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1279.751979] ? __kthread_parkme+0xfb/0x1a0 [ 1279.756229] ? hungtask_pm_notify+0xb0/0xb0 [ 1279.760535] kthread+0x35a/0x440 [ 1279.763888] ? kthread_stop+0x900/0x900 [ 1279.767859] ret_from_fork+0x3a/0x50 [ 1279.771695] Sending NMI from CPU 1 to CPUs 0: [ 1279.776257] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0x6/0x10 [ 1279.777252] Kernel panic - not syncing: hung_task: blocked tasks [ 1279.789939] CPU: 1 PID: 1019 Comm: khungtaskd Not tainted 4.20.0-rc6+ #154 [ 1279.796947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1279.806285] Call Trace: [ 1279.808859] dump_stack+0x244/0x39d [ 1279.812498] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1279.817690] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1279.822710] panic+0x2ad/0x55c [ 1279.825893] ? add_taint.cold.5+0x16/0x16 [ 1279.830036] ? nmi_trigger_cpumask_backtrace+0x1c8/0x22a [ 1279.835472] ? nmi_trigger_cpumask_backtrace+0x1f9/0x22a [ 1279.840907] ? nmi_trigger_cpumask_backtrace+0x1d1/0x22a [ 1279.846355] ? nmi_trigger_cpumask_backtrace+0x1c8/0x22a [ 1279.851805] watchdog+0xb62/0x1060 [ 1279.855341] ? hungtask_pm_notify+0xb0/0xb0 [ 1279.859654] ? __kthread_parkme+0xce/0x1a0 [ 1279.863872] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1279.868961] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1279.874049] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1279.878616] ? trace_hardirqs_on+0xbd/0x310 [ 1279.882920] ? kasan_check_read+0x11/0x20 [ 1279.887050] ? __kthread_parkme+0xce/0x1a0 [ 1279.891273] ? trace_hardirqs_off_caller+0x310/0x310 [ 1279.896364] ? trace_hardirqs_off_caller+0x310/0x310 [ 1279.901451] ? lockdep_init_map+0x9/0x10 [ 1279.905531] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1279.910635] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1279.916158] ? __kthread_parkme+0xfb/0x1a0 [ 1279.920382] ? hungtask_pm_notify+0xb0/0xb0 [ 1279.924732] kthread+0x35a/0x440 [ 1279.928083] ? kthread_stop+0x900/0x900 [ 1279.932045] ret_from_fork+0x3a/0x50 [ 1279.937041] Kernel Offset: disabled [ 1279.940669] Rebooting in 86400 seconds..