inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000500), &(0x7f0000000540)=0x8) close(r2) close(r1) 10:19:49 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000000c0)=0x1000, 0xfffffffffffffe45) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r0, 0x1) 10:19:49 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240), &(0x7f0000000280)=0x8) 10:19:49 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="8d00589df42aafeab89b000020"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) r0 = socket(0xf, 0x1, 0xfffffffffffffffe) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080)={0x2, 0x9}, 0xfffffffffffffcb7) r1 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000380)=@assoc_id=0x0, &(0x7f00000003c0)=0x4) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000400)=@assoc_value={r2, 0x200}, 0xfffffffffffffd11) r3 = socket(0x1e, 0x100000805, 0x0) r4 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000700)=0x7, 0x4) sendto$unix(r3, &(0x7f0000000500)="14bc393da6ca56facdc7395a98378f759ae5821210f37d38292778b04252a402311df33fe1851808564597f876b09b87970f97f92786e5991f467a64786716f9e35c361d807ab9db058cc886fe0fd3afcd00cb77714146c8889d302ca00d0489c54477d9482214d24a03f5d3780a6f9085b4e4748b4b3a9ba2a9a1c29338d7a01e8752d7f6334a471c037a6118c8e47a601a986a82926c210746832951973af6252b6ecb5297a481cc28dc56ca35c656d0bf06728e93f589fa8b7a7599b8e2cf53633fe571efb78d6cb1c8dc5f2d5b8daa0cbc8961e912ecb2d455c89074799488c566ed75ffb8d544be5cc12c990a63", 0xf0, 0x24000000, &(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$inet_buf(r3, 0x0, 0x2f, &(0x7f0000000680)="7b4a4bad0d4d029f593d6708f6d18f541055c0aeb28f4b3a69bb29b28a465c0cd54536c84fbf70cf447d70653e7a6c1c2f8157997c0f15ec2fafa2f07c54cda65997566354dbee5badffafc7a847f3fe014ef57196fb374c31b30d64d8076f91f9313619ff1c3d1fd14bffe6cd6664faab", 0x71) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1) r5 = socket$inet6(0xa, 0x202000000802, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000180)=""/39, &(0x7f00000001c0)=0x27) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000100)=0x20000005, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000f68000)={@dev={0xfe, 0x80, [], 0x13}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000740)=0x7, 0x4) r6 = socket$inet6(0xa, 0x80000, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f000088c000)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x2, 0x80000000000041}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@mcast1={0xff, 0x1, [], 0x1}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x20) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000440)={r2, 0x3f}, &(0x7f0000000480)=0x8) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x80000001) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, &(0x7f0000000280)=0x8) sendfile(r7, r7, &(0x7f00000000c0)=0x202, 0xdd) 10:19:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") keyctl$get_keyring_id(0x0, 0x0, 0x0) [ 73.031251] IPVS: ftp: loaded support on port[0] = 21 [ 73.043792] IPVS: ftp: loaded support on port[0] = 21 [ 73.055201] IPVS: ftp: loaded support on port[0] = 21 [ 73.081537] IPVS: ftp: loaded support on port[0] = 21 [ 73.123846] IPVS: ftp: loaded support on port[0] = 21 [ 73.144782] IPVS: ftp: loaded support on port[0] = 21 [ 73.148254] IPVS: ftp: loaded support on port[0] = 21 [ 73.161828] IPVS: ftp: loaded support on port[0] = 21 [ 75.228529] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.235148] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.286736] device bridge_slave_0 entered promiscuous mode [ 75.317548] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.323985] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.337439] device bridge_slave_0 entered promiscuous mode [ 75.350471] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.356931] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.371401] device bridge_slave_0 entered promiscuous mode [ 75.379670] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.386083] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.403811] device bridge_slave_0 entered promiscuous mode [ 75.417680] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.424133] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.431550] device bridge_slave_0 entered promiscuous mode [ 75.440602] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.447009] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.456389] device bridge_slave_0 entered promiscuous mode [ 75.475455] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.481893] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.503008] device bridge_slave_0 entered promiscuous mode [ 75.519552] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.525994] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.535342] device bridge_slave_1 entered promiscuous mode [ 75.544645] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.551086] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.559685] device bridge_slave_1 entered promiscuous mode [ 75.570349] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.576910] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.602869] device bridge_slave_1 entered promiscuous mode [ 75.611469] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.617924] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.633149] device bridge_slave_1 entered promiscuous mode [ 75.640464] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.646912] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.654337] device bridge_slave_1 entered promiscuous mode [ 75.660809] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.667593] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.682449] device bridge_slave_1 entered promiscuous mode [ 75.690300] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.702615] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.711196] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.717611] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.735292] device bridge_slave_0 entered promiscuous mode [ 75.746918] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.757077] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.764668] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.779355] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.791813] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.798269] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.842967] device bridge_slave_1 entered promiscuous mode [ 75.856333] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.865740] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.872258] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.897006] device bridge_slave_1 entered promiscuous mode [ 75.906111] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.913756] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.922880] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.942328] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.949756] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.976508] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.987727] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.119667] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.128568] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.197338] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.297147] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.328157] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.338303] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.363027] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.374977] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.432620] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.444710] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.479159] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.522422] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.539322] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.555116] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.568806] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.580333] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.691194] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.710838] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 76.717906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.733912] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 76.742281] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.759090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.778346] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 76.787127] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 76.794138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.810109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.839571] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 76.848715] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 76.863605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.877633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.906561] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 76.932627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.954349] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 76.962487] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 76.978637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.016811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.081203] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 77.090493] team0: Port device team_slave_0 added [ 77.100198] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.107900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.140060] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.154386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.179470] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 77.188191] team0: Port device team_slave_0 added [ 77.201395] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 77.216877] team0: Port device team_slave_0 added [ 77.230149] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 77.244474] team0: Port device team_slave_1 added [ 77.291356] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 77.331685] team0: Port device team_slave_0 added [ 77.347519] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 77.363079] team0: Port device team_slave_1 added [ 77.375658] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 77.384318] team0: Port device team_slave_1 added [ 77.401779] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 77.420195] team0: Port device team_slave_0 added [ 77.449654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.466996] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 77.476750] team0: Port device team_slave_0 added [ 77.493710] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 77.504997] team0: Port device team_slave_1 added [ 77.514660] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 77.522867] team0: Port device team_slave_1 added [ 77.536903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.555995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.580747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.607155] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 77.617757] team0: Port device team_slave_0 added [ 77.630963] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 77.642312] team0: Port device team_slave_0 added [ 77.649940] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 77.660605] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 77.670280] team0: Port device team_slave_1 added [ 77.682732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.704511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.727963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.741321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.758697] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 77.772134] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 77.779573] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 77.796871] team0: Port device team_slave_1 added [ 77.807918] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 77.838408] team0: Port device team_slave_1 added [ 77.868477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.879788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.887899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.895963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.904348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.912969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.920812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.931488] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 77.941527] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 77.950352] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 77.959516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.967742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.988568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.996820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.004678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.013656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.024898] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.031783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.040913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.052737] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.061491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.071208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.094367] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 78.101515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.116609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.130966] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.138425] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 78.145928] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 78.154102] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 78.161364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.172652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.180437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.195665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.211479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.224990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.236924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.244831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.261289] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 78.274659] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 78.282120] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 78.290287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.306696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.344515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.355282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.363594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.371546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.381984] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 78.389581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.397825] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.417152] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 78.431912] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 78.444107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.455722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.501511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.519649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.536704] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 78.562144] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 78.569625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.579818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.610749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.635112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.648685] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 78.655910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.670349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.705494] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 78.726300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.751425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.480500] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.487071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.494145] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.500548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.521859] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 79.684412] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.690841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.697523] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.703940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.749434] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 79.770490] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.776930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.783634] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.790092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.854858] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 79.867157] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.873577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.880235] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.886616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.895570] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 79.905241] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.911661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.918366] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.924757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.938320] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 79.955368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.969281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.986917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.001229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.011588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.033233] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.039682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.046386] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.052799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.061719] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 80.175099] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.181544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.188224] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.194626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.205269] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 80.358937] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.365375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.372070] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.378467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.411903] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 80.992550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.001105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.017509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.849451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.910247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.061743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.097466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.146344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.214355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.350788] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 85.400152] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 85.437260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.568968] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 85.607884] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 85.617398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.638411] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 85.729705] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 85.822867] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 85.829294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.843607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.907290] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 85.913581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.921112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.949080] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 86.007228] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 86.013496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.024554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.113381] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 86.119669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.133558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.157412] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 86.168946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.180602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.197356] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 86.288797] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 86.295965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.305020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.325465] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.473157] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.492359] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 86.503128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.511659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.571480] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.622279] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.660306] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.740883] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 86.748511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.762838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.810106] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.977175] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.236888] 8021q: adding VLAN 0 to HW filter on device team0 10:20:05 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="000227bd7000fffbb8880e00000008001e05f71810a04764040001008303a4a6a8d44ee2dc8bc80000"], 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001a40)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', r3}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r4, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r5, 0xc004aea7, &(0x7f00000002c0)=0x3ff) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x181100, 0x0) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f00000000c0)={0x1, r6, 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r7, 0x1, 0x6}, 0x10) [ 89.402301] IPVS: length: 39 != 8 [ 89.415655] device bond_slave_1 entered promiscuous mode [ 89.428821] device veth0_to_bridge entered promiscuous mode [ 89.513216] IPVS: length: 39 != 8 [ 89.552793] device veth0_to_bridge left promiscuous mode [ 89.558552] device bond_slave_1 left promiscuous mode 10:20:05 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x341}, 0xb) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040828bd7000ffdbdf250f0000000800040001000000080099da5e4e9784f806000200000008007e302d250000dbfb60b3dc7e5c3521200be7da4eb750da22f36e2085dfd72b7a1e6fca1a44fe2016f0cff3c1ceaa471b7d94c02424e4bee29b776bf881935e758c0d5cf75165c03302524db67402a04d7349435c75f5934ad249bc107ea8c5aee8b5e6ca760a18fd73109599c73d98dbba9d56c6349dc758a361a8dbd363660b"], 0x2c}, 0x1}, 0x4000010) ioctl$sock_bt(r1, 0x8906, &(0x7f0000000000)) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xa0, r3, 0x300, 0x70bd25, 0x25dfdbfb, {0x1}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffe}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x16}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffa}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0xcc43d0d5c0f10581) r4 = getegid() fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x2, &(0x7f0000000400)=[r4, r5]) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000140)={0x1, 0x7f, 0x4, 0xcf84}, 0x8) recvmmsg(r1, &(0x7f00000003c0)=[{{&(0x7f00000002c0)=@rc, 0x80, &(0x7f0000004840), 0x0, &(0x7f0000000280)=""/30, 0xfffffffffffffec3}}], 0x1, 0x2002, &(0x7f0000004980)) 10:20:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000180)={0x0, @empty, 0x4e22, 0x4, 'sh\x00', 0x4, 0xff, 0x7}, 0x2c) r2 = socket(0x11, 0x2, 0x0) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, &(0x7f00000004c0)="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", 0x1000, 0x24040000, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) sendto(r3, &(0x7f0000000040)="12438413d3f441f021b55f83b17b7b557af7824b2e29089056bd2213d644508bb238c6b9aef765f442e4e81b09bd747c2cc16b1a3a1c20f3db8e145cf1034ab113c662f8299254c249ab407afb1d93159e20c8739f784588f0360957676993a1dbb9a5", 0x63, 0x48000, &(0x7f00000000c0)=@generic={0x19, "37f19a34cde8b8c609c6b1da2d2cb0f8dbf215f7b533b0af4ca829ab2dcfc435e549cd3c4ba1d55ea4ff63218bf8ecf20b563992aedd81b533422b9c7a7088355a694581b499e7367fb614233fc410614f73e773c2be04a61b6450b98cfde15ca28b326aa1d37a6352ca84b6f334877f8bb208f73f01f74255fe2d86f525"}, 0x80) sendto$inet(r3, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) 10:20:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x9d, @remote={0xfe, 0x80, [], 0xbb}, 0x4d}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x1c, 0x2c, 0x1, 0x0, 0x0, {0x1}}, 0xd6}, 0x1}, 0x0) 10:20:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000a0040000600100007802000060010000b8030000b8030000b803000004000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x4f0) 10:20:06 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) keyctl$set_reqkey_keyring(0xe, 0x7) connect$l2tp(r0, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmsg$nl_crypto(r0, &(0x7f000037ffc8)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14}, 0x202cf000}, 0x1}, 0x0) 10:20:06 executing program 5: mmap(&(0x7f0000011000/0xc000)=nil, 0xc000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000040)={{&(0x7f0000000140)=""/4096, 0x1000}, &(0x7f0000000000), 0x20}, 0x20) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000004000), 0x0, &(0x7f0000003fb8)=ANY=[@ANYBLOB="480000000000000014010000010000000000000000000000", @ANYPTR=&(0x7f0000012f46)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000001a000)=ANY=[@ANYPTR=&(0x7f0000012fe5)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="1b00000000000000"], @ANYBLOB="010000000000000000000000000000000000000000000000"], 0x48}, 0x0) [ 89.835975] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. [ 89.860824] capability: warning: `syz-executor2' uses 32-bit capabilities (legacy support in use) [ 89.929151] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. 10:20:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") msgget(0x0, 0x400) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) modify_ldt$write(0x1, &(0x7f0000000140), 0x10) modify_ldt$read(0x0, &(0x7f0000002f2a)=""/214, 0xfffffffffffffc9d) 10:20:06 executing program 2: socketpair(0x5, 0x7, 0xe0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3ff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x5, 0x7, 0x0, 0x100000000, 0x2, 0x6, 0x96ed, 0x9, r2}, 0x20) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r5 = fcntl$getown(r3, 0x9) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) kcmp(r4, r5, 0x3, r3, r3) ioctl$VHOST_SET_OWNER(r1, 0x4008af24, 0x707000) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000280)={0x7, 0x4, 0x10001, 0x36f, 0xffffffffffffffff, 0x8, 0x1, 0xc11b, 0x9, 0x6}) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000400)) fsetxattr(r0, &(0x7f0000000200)=@random={'osx.', '\x00'}, &(0x7f0000000240)='/dev/vhost-vsock\x00', 0x11, 0x2) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000040)={0x0, 0x1000, 0x0, 0x3, 0x0, 0x7}) 10:20:06 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0xdc, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0xffffffff, @loopback={0x0, 0x1}, 0xf9}, @in6={0xa, 0x4e21, 0x7fff, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, @in6={0xa, 0x4e24, 0x80, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24}, @in={0x2, 0x4e20, @broadcast=0xffffffff}, @in6={0xa, 0x4e24, 0xffff, @loopback={0x0, 0x1}, 0x9}, @in6={0xa, 0x4e22, 0xfffffffffffffff7, @dev={0xfe, 0x80, [], 0x14}, 0x7}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, @in={0x2, 0x4e24, @multicast2=0xe0000002}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r1, 0x12}, &(0x7f0000000340)=0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/1, 0x1}], 0x2000000000000021, 0x0) 10:20:06 executing program 1: r0 = socket(0x400800000000011, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0x20100f}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x304) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3, 0x140) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f00000000c0)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00\x00\x00\x00\x00\x00\x00!\x00', 0xa201}) 10:20:06 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x90000, 0x0) accept4$netrom(r0, &(0x7f0000000140)=@full, &(0x7f0000000080)=0x48, 0x800) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = dup2(r1, r1) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f00000002c0)=""/231) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4040ae79, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000a1e43fe57efb591b8513b566ed8928037390fbbe7da69584f25c9de49fa39c874660a5e4a4a254c98f5e45735b5a7b8b18add8dc"]) 10:20:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000003, 0x7) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$sock_proto_private(r0, 0x89eb, &(0x7f00000002c0)="426825666d9b56078ed2cc3d0b4a5db8499ce11c4a58467162cbcd1d6a0ef411873ee4145a25964225442bc6722a5a0eff0e3ff3a1948eb64e322e4bb52481b344e57e8da9595af41a79036a8a22e65c0eac8a") modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0x20000800, 0x0, 0x1, 0x4, 0x5, 0x2, 0x3ff, 0x3, 0x5233}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000ff0700000000000000080012000000020000000000000000003000000000000000000000000000000000000000000000000000000000000001ac1414bb004000000100000000000000030005000000000002004000e00000010000000000000000"], 0x80}, 0x1}, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 10:20:06 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000240)=0x7ff, 0x1) 10:20:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x4c28, &(0x7f0000000080)=0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x8, {0x2, 0x4e20, @multicast2=0xe0000002}, {0x2, 0x4e22, @multicast1=0xe0000001}, {0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x40, 0x5, 0xc1a, 0x7ff, 0xe3b45c6, &(0x7f00000000c0)='ip6gretap0\x00', 0x7ff, 0x6ccf, 0x1}) syslog(0x3, &(0x7f0000000400)=""/130, 0x79) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280)={r1, 0x6}, &(0x7f00000002c0)=0x8) 10:20:06 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6-generic)\x00'}, 0x60) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) socketpair$inet6(0xa, 0x80006, 0xffffffffffffffc7, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet6_buf(r1, 0x29, 0x2b, &(0x7f00000000c0)=""/110, &(0x7f0000000140)=0x6e) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x3, 0x400}, &(0x7f0000000500)=0x90) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000003c0)={r3, 0x6}, &(0x7f0000000400)=0x8) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000000)) r4 = accept$alg(r0, 0x0, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/autofs\x00', 0x141000, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000440)={'veth0\x00', 0xb1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r5, 0xc0305302, &(0x7f0000000180)={0x8000, 0x1, 0x400, 0x7f, 0x101, 0x8}) sendmsg$can_raw(r4, &(0x7f0000477000)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0xff89}, 0x1}, 0x0) readv(r4, &(0x7f0000001700)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1) 10:20:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x6, 0xfffffffffffffec3) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000200)={"616807000000000000000000000000ff01000800000000000000000001"}, &(0x7f00000001c0)=0x1e) ioctl(r0, 0x5, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x408000, 0x80) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000500)=""/213) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, &(0x7f0000c97ff8)) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="96000000dc1bc94234f8ee07c3d88c5feb73121e49b1d41f80195cc8fb021621df34d5bc1806a2bba99d89fbc2f3bbff4e18472debec1e0dff9445f67b06c19f62d98cac05bcffe4249f5f8024b24903000000000000009d1439582c3166553661f5348d45"], &(0x7f0000000300)=0x2) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000380)=ANY=[@ANYRES64]) close(r3) 10:20:07 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) fallocate(r0, 0x12, 0x0, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000040)={{0x7fff, 0x5}, 'port1\x00', 0x40, 0x0, 0x0, 0x49bf, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x83e}) 10:20:07 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xf0df2da89959cbe, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='cgroup\x00') preadv(r0, &(0x7f0000000100), 0x361, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000000)={{0x100000, 0x6001, 0xf, 0x7f, 0x1, 0x82, 0x4, 0x800, 0xc000000000000000, 0x1, 0x8, 0x5}, {0x10f005, 0xf000, 0x1f, 0x9, 0x80000001, 0x1, 0x101, 0x3, 0x3, 0x0, 0x1ff}, {0x10001, 0x5000, 0x3, 0x9, 0x81, 0x6, 0x2, 0x4, 0x1000, 0x1, 0x100000001}, {0xd000, 0x2001, 0xe, 0xff, 0x80, 0x6, 0xffffffffffffffff, 0x80000000, 0x1, 0x1, 0x3, 0x2f}, {0xf007, 0x5001, 0xf, 0x5, 0x9, 0x80, 0x7fffffff, 0x7, 0x549c1b2f, 0x9, 0x101, 0x8}, {0xd000, 0x0, 0x0, 0x3, 0x5b6, 0xfffffffffffffffa, 0x9, 0xffffffffffffd283, 0x8, 0x6, 0x0, 0x6}, {0x1001, 0x0, 0x4, 0x7f, 0x8, 0x6, 0x9, 0x3f, 0xffffffffffff0000, 0x0, 0x0, 0xc20}, {0x10000, 0x0, 0xe, 0x3, 0x8, 0x2, 0x7d348f16, 0x8000, 0x9, 0x1f, 0x0, 0xabbd}, {0x11f000}, {0x100000, 0x100000}, 0x50002, 0x0, 0xf000, 0x20, 0xd, 0x8100, 0xf000, [0x3, 0x5cc4, 0x1000, 0x81]}) 10:20:07 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x38, &(0x7f0000000000)={0x0, 0x0, 0x3}) ptrace$getregset(0x4204, r0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=""/4096, 0x1000}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000000040)=""/128, 0x80) 10:20:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8, &(0x7f0000000040)="02d1eec1c5cbef3452942b8f7600779aeea4cbbf55e45e846aa0a29c978799fd570e2e57b04b1076a487b7a58a0ff4ade649965b109e1400c2f60379504cde79969e64e080d7db7435ef20a0137bd5e2fb17847c2ef102") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000411000)="bc", 0x1) ioctl$TCXONC(r1, 0x540a, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)=0x0) timer_settime(r3, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000000)) tkill(r2, 0x1000000000013) set_tid_address(&(0x7f0000000100)) 10:20:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0xfffffffffffffffe, 0x200) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000140)={0x200}) r3 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r3, &(0x7f0000000040)="06", 0x1) sendfile(r3, r3, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000700)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000180)=0x96) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00"}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000080)=@req={0x28, &(0x7f0000000000)={'\x00', @ifru_names='bcsf0\x00'}}) 10:20:08 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) signalfd4(r0, &(0x7f0000000280)={0x7}, 0x8, 0x80800) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x143101, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@remote}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000200)={0x8, 0x4}) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xffffffffffffff18, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000040)) ioctl$TIOCSBRK(r2, 0x5427) socket$inet(0x2, 0x1, 0x0) 10:20:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0047fc2f07d82c99240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x8002, {{0x2, 0x800000, @dev={0xac, 0x14, 0x14, 0x13}}}}, 0xfffffffffffffede) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000180)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) 10:20:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f760070") socketpair$inet(0x2, 0x80000, 0xfff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x7fffffff, {{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x88) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/sockcreate\x00') write$eventfd(r2, &(0x7f0000000180), 0x8) 10:20:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)="2e2f6367726f75702e63707500eac5bea7af575a45fddd5af3a7709295a69e7bc5fd0592bf2a4dc8ace908be8842141ca2a714ed0163d4afd8ac48123d4869e05556a93347d6a7430e03a5f2beb186f16bacf2e4dcdcf3b9ff1d99165ce38d996e7798fe471d9a0d81acd08788fcc9892a2487efcde7a649614b14ba1c18", 0x200002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400000, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000000040)={0x0, 0x1, 0x40}) r3 = openat$cgroup_int(r1, &(0x7f0000000240)='cpuset.memory_spread_slab\x00', 0x2, 0x0) sendfile(r3, r3, &(0x7f00000000c0), 0x5) 10:20:08 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x14, 0x80000) sendto$packet(r0, &(0x7f00000001c0)="9e2f93c4fa8581884c2cafe1b99a6a42ca9fdc7aa14c93b02b48dfd6828d73c3f32223097acd4b200cd428bb369c12377b14facea70e9925e7ec11d135e2f9482eb559fa5b68d8407ddd49577d56a7533d270301010000000000002c9e859c25e85df357bb35ba44f60000000000000000000000", 0x74, 0x4004011, 0x0, 0x12f) r1 = userfaultfd(0x7fe) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x4}) r2 = dup(r1) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000003ff0)={&(0x7f0000013000/0x3000)=nil, 0x20014000}) 10:20:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'syz_tun\x00', {0x2, 0x4e24, @multicast1=0xe0000001}}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x174]}) 10:20:08 executing program 7: r0 = socket(0x2, 0x805, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0xffffffffffffff44) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r1, 0xff}, &(0x7f0000000100)=0x8) syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x400, 0x20000) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt(r0, 0x114, 0x8, &(0x7f00003dd000)=""/13, &(0x7f000033bffc)=0xd) 10:20:08 executing program 7: openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x100, 0x128b, 0x100000001, 0x7f000000000000, 0x3, 0x3, 0x3, 0xa74, 0x261, 0x38, 0x232, 0x23, 0x7, 0x20, 0x2, 0x401, 0x8, 0x1}, [{0x0, 0x5, 0x4, 0x8, 0x2044, 0x15, 0x100, 0x8}], "37be24126c5bc683e5c22b0205b97dd0a27d915aa66918d339d611d19ae7625960a18940c4bfcda75601869e956d98d22e925b48b8a2", [[], [], [], [], [], []]}, 0x68e) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x8000000000009, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x2c) 10:20:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000000)={{}, {0x0, 0x0, 0x0, 0x0, 0xb8}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x11f004, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6d50}, {0x2004, 0x0, 0xf, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xe33, 0x0, 0xb461}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x81}, {0x0, 0x3000, 0x0, 0x5, 0x0, 0x4, 0x0, 0x5, 0xc8, 0x0, 0xdb0}, {0x0, 0x16000, 0xf}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getpeername$inet(r2, &(0x7f0000000180)={0x0, 0x0, @broadcast}, &(0x7f00000001c0)=0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x105d00) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:20:08 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="295ed277a4200100360070") r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000000)={0x1d}, 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x105040, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={0x0, 0xc6, 0x200, 0x6, 0x100000001, 0x6}, &(0x7f0000000140)=0x14) setsockopt(r1, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000080)) 10:20:08 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xcf}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000000000000000000010079a054000000000000000000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) 10:20:08 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000003c0)=""/246) 10:20:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"796378f261a685d97c9068e67ae6efff", 0x80401a}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40000, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000080)=""/174) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d8, &(0x7f0000000200)) 10:20:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000001040)={0x6, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000001c0)={{0xffffffffffffffff, 0x2, 0x200, 0x0, 0x1623}, 0x3, 0x4, 0x9}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000001140)="d607f50d96825046c8482772f50db08b8843826f73131290c9385f4aa5ae1118cee5293777d5d2fcd5f0445d3d1d4b93fc0738e27dd93e524b8cbd0d2e74a386aaace985efa556fb9309a5232a3c0b1baa8bf4b4bd23fd5359701e277cc6482058c332161c673f0559739d43f21aa1691102c13482ef2299ae804b1082b1a75a1194a7ea1fc9e13b27174dc71a725b099cd92760", 0x94}], 0x1}, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x25, 0x4d00c0) getpeername$ax25(r3, &(0x7f0000000100), &(0x7f0000000140)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:20:09 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x2bf) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0xc0a85320, &(0x7f0000000080)={0x80}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)) r1 = semget$private(0x0, 0x0, 0x0) semctl$SEM_INFO(r1, 0x1, 0x13, &(0x7f0000000180)=""/66) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) 10:20:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000000)="025cc83d6d345f8f760070") mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x100000000000000) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000140)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x800, 0x0) accept$unix(r1, &(0x7f0000000200), &(0x7f00000002c0)=0x6e) chdir(&(0x7f0000000600)='./file0\x00') umount2(&(0x7f0000000180)='../file0\x00', 0x2) chdir(&(0x7f0000000280)='/\x00') r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x4, 0x101000) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000080)=""/221) 10:20:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") seccomp(0x2, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000040)}) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x40000) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000040)={{0xbf, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e20, 0x3, 'rr\x00', 0x3, 0x1f, 0x6c}, {@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e23, 0x10000, 0x200, 0x7440, 0x4dff9656}}, 0x44) 10:20:09 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='6:4\r'], 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 10:20:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f760070") syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6002290f00303a0000000000ff0200000000000000000000000000018000907800000000609433df0000000000000000000000000000000000000001fe800000000000000b000080ffffff00000000000000000000000000"], 0x0) 10:20:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffe, 0x22) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00') ioctl(r0, 0x100008912, &(0x7f0000000280)="025c0d01f7001940837f70") r2 = request_key(&(0x7f0000000180)='id_resolver\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000380)='cgroup[$cgroup-\x00', 0xfffffffffffffffa) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000002c0)="868cec4fc82fd026cd136024fcb6cbd448f2b802d465d29ca76735c6cce9e3a4f0824c4a819f57ba8683cc10c4e181e8967bd6330c720b5511c4cc0ce25ff708334a25d54ca2fad32fffc772f18ef3", 0x4f, r2) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) keyctl$read(0xb, 0x0, &(0x7f00000001c0)=""/136, 0x88) 10:20:09 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet_sctp(0x2, 0x205ee6e213b1a496, 0x84) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000b00)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000000600000078050000e8020000e8020000e802000018010000e8020000e0040000e0040000e0040000e0040000e004000006000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="e0000002ac1414bb000000ff000000007465716c3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210003020000000000000000000000000000e80018010000000000000000000000000000000000000000000000002800727066696c7465720000000000000000000000000000000000000000000008000000000000002800727066696c74657200000000000000000000000000000000000000000000050000000000000030005450524f58590000000000000000000000000000000000000000000000001f00000001000000ffffffff4e210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c000000000000000000000000000000000000000000000000000280054544c00000000000000000000000000000000000000000000000000000003010000000000000000000000000009ffffff00ffffff0069726c616e30000000000000000000006c6f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000330003200000000000000000000000000000e8001001000000000000000000000000000000000000000000000000280074746c0000000000000000000000000000000000000000000000000000000307000000000000280069636d700000000000e2ed0a8519cf163b000000000000000000000000000800010000000000280045434e00000000000000000000000000000000000000000000000000000020000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010013801000000000000000000000000000000000000000000000000280074746c000000000000000000000000000000000000000000000000000000030600000000000050006f736600000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000080000000a00000001000000020000002800434845434b53554d000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c000000000000000000000000000000000000000000000000000280054544c0000000000000000000000000000000000000000000000000000000301000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000eb4bf28f34d12c8e939e49b7336549150bd3e7cd1922fd25b785cfa67e21f749a0bdbcdfb2ac77a00c45f3c35b088a4542a12024b7235b93b89686ad77ec9ba9adfdef7bf43e878c07ed600b0a160cd08311b1dd392b2ff32fa2ab6c08f68c503cc38e279c36bee996401c52028beb5f9516904f2f8c6b764adade75a1b7a8e90ba650168a8d2635b1b4b6313860"], 0x5d8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020b820d0200000000000000e01c001c"], 0x10}, 0x1}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x84000, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000880)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000a00)={0x0, 0xff}, &(0x7f0000000a40)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000a80)={r6, 0x200, 0x5, [0x8, 0x2, 0xffffffffffffffdd, 0x4a, 0x1]}, &(0x7f0000000ac0)=0x12) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000980)={'gretap0\x00', 0x0}) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000009c0)={0x5, 0x21, 0x2, 0x3, 0x272, 0x0, 0x3, 0x51d, 0x40, 0x3f, 0x8, 0x3f}) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000005380)={@mcast2, 0x0}, &(0x7f00000053c0)=0x14) recvmmsg(r2, &(0x7f0000007f80)=[{{&(0x7f0000006940)=@un=@abs, 0x80, &(0x7f0000006b80)=[{&(0x7f00000069c0)=""/11, 0xb}, {&(0x7f0000006a00)=""/226, 0xe2}, {&(0x7f0000006b00)=""/66, 0x42}], 0x3, &(0x7f0000006bc0)=""/112, 0x70, 0x8}, 0x10000}, {{&(0x7f0000006c40)=@xdp={0x0, 0x0, 0x0}, 0x80, &(0x7f0000007e40)=[{&(0x7f0000006cc0)=""/4096, 0x1000}, {&(0x7f0000007cc0)=""/25, 0x19}, {&(0x7f0000007d00)=""/74, 0x4a}, {&(0x7f0000007d80)=""/155, 0x9b}], 0x4, &(0x7f0000007e80)=""/196, 0xc4, 0x4}, 0x1}], 0x2, 0x40, &(0x7f0000008000)={0x0, 0x989680}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000008040)={{{@in6=@loopback, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000008140)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000008180)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000008280)=0xe8) recvmmsg(r2, &(0x7f0000008580)=[{{&(0x7f0000008340)=@xdp={0x0, 0x0, 0x0}, 0x80, &(0x7f0000008500)=[{&(0x7f00000083c0)=""/56, 0x38}, {&(0x7f0000008400)=""/243, 0xf3}], 0x2, &(0x7f0000008540)=""/58, 0x3a, 0x5b3d}, 0x6}], 0x1, 0x40002123, &(0x7f00000085c0)={0x0, 0x989680}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000008600)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000008700)=0xe8) getsockname$packet(r0, &(0x7f0000008740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000008780)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000008a80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000200}, 0xc, &(0x7f0000008a40)={&(0x7f00000087c0)={0x264, r4, 0x704, 0x70bd2b, 0x25dfdbfc, {0x1}, [{{0x8, 0x1, r5}, {0xc0, 0x2, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0xc, 0x4, [{0xffffffffffff797c, 0x9, 0x7f, 0x800}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x1c7c}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r8}, {0xf8, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0xc, 0x4, [{0xfac, 0x5, 0x5, 0x200}]}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r14}}}]}}]}, 0x264}, 0x1, 0x0, 0x0, 0x41}, 0x44) 10:20:09 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x3ff, &(0x7f00000000c0)) r0 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000300)={0x8, 0x1, 0x1, r1}) io_setup(0x401, &(0x7f00000004c0)) io_setup(0x80, &(0x7f0000000500)) io_setup(0xfffffffffffffc02, &(0x7f0000000100)) io_setup(0x5, &(0x7f0000000040)) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x200000, 0x0) accept4$llc(r2, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x0) io_setup(0x183f, &(0x7f0000000080)) 10:20:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './bus', [{0x20}, {0x20, 'smaps\x00'}, {0x20}], 0xa, "be2a201103b2782b38"}, 0x1b) creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) unlink(&(0x7f00000008c0)='./bus\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x80000000) 10:20:10 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0xc88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x10) fcntl$notify(r0, 0x402, 0xfffffffffffffffd) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 10:20:10 executing program 6: r0 = socket$kcm(0x29, 0x80000400000002, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3, 0x80) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00') ioctl(r0, 0x8912, &(0x7f0000000240)="d74799240970") ioctl$EVIOCGID(r1, 0x80084502, &(0x7f00000000c0)=""/36) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) membarrier(0x7b, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000100)=0x1f) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x6}]}, 0x10) 10:20:10 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x400, 0x0) accept4$alg(r0, 0x0, 0x0, 0xfa04b804a6fe484a) r1 = socket$kcm(0x29, 0x7, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000000c0)=0xbaf, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x11, &(0x7f0000ad2000)=ANY=[@ANYBLOB="001000"], &(0x7f0000000080)=0x23c) ioctl$sock_ipx_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000040)={'bcsf0\x00', {0x4, 0x80000000, 0x578, "00622af3cff9", 0xdd72}}) 10:20:10 executing program 0: r0 = socket$inet6(0xa, 0x805, 0x8) ioctl(r0, 0x8912, &(0x7f0000000140)="0047fc2f07d82c99240970bf1fe6ccd2bd317384c15e1c6b93276fc1baae") r1 = socket$alg(0x26, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0x100000001}, 0x1c) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(rmd320-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="000000000000000000200017d4eda612eb852a17d534c5ad7adc2a4d7930f41eb8d1ffff3a2aeec85fb7150348104cab926111c1c34059fb3729c1a8a06b16c7feefa16a259a7e9b82e9aa64571c5c17b9c00eb8ccc15457406cd623e89165e7f5d81ac935c303c6a2c908b960aac347b9dd47b9ca90", 0xe0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000000c0)={'dummy0\x00', 0x9}) 10:20:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth0_to_bond\x00', &(0x7f0000000140)=@ethtool_ringparam={0x10}}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x240, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x6}) 10:20:10 executing program 4: pause() mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000380)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000200)='net/fib_triestat\x00') mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x0, &(0x7f000002f000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x100) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 10:20:10 executing program 7: clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) recvfrom$unix(r2, &(0x7f0000bf5000), 0xffffffffffffffe9, 0x0, &(0x7f0000d93ff6)=@file={0x0, './file0\x00'}, 0xfffffffffffffeaa) r3 = syz_open_procfs(r0, &(0x7f0000000040)='auxv\x00') r4 = getpid() fcntl$setown(r1, 0x8, r4) fcntl$setsig(r1, 0xa, 0x12) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r5 = dup2(r1, r2) tkill(r0, 0x16) exit(0x0) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) close(r3) ioctl$EVIOCGABS0(r5, 0x80184540, &(0x7f0000000140)=""/115) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, &(0x7f00000000c0)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000005c0)=[{0xf, 0xe2c}], 0x1) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) 10:20:10 executing program 3: r0 = socket(0x9, 0x401, 0x4) io_setup(0x5, &(0x7f0000000040)=0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x480000, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x8102, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000400)='/dev/admmidi#\x00', 0x5, 0x0) io_submit(r1, 0x3, &(0x7f0000000480)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x9, r0, &(0x7f0000000240)="dedaed487f252b6734ced0d536bc514345bfaf2f5d353ab77c96b2724ec74b86bdfc4a6c1d77226f0b9e691245b29ef293d6f145676ac47c5b5dabba16445dba2f6c374324b790222a66f0b6252ed1542d5809381909a68e1e094566634a03c8f66050110a015aa4ad7eda8193e032ca23fe427d58108620719bc2082eea05a7ce437eeb6662023bb78c6f4f13601caf0c4cf1e648f7db790eff253dfc", 0x9d, 0xff, 0x0, 0x1, r2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2a05a683a7c0147b, 0x5, r0, &(0x7f0000000300)="b65df1c914bff13da74108967a724a3d22d0594147dcc31a3d89ee1cf02ff09c31bc23aec418da7ec6b12ddd97bf493f7cc211d8ffdb152b85ebbd6547e1e5f7e257513a3b948cd8dcc47363b3f33cbc30e041d25d14c8d1610d976169aaab385edf57bdd8d6f9c0d993b9ade058a2df85", 0x71, 0x2, 0x0, 0x0, r3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x2, r0, &(0x7f0000000700)="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", 0x1000, 0x1, 0x0, 0x1, r4}]) io_getevents(r1, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], &(0x7f0000000100)={0x77359400}) io_submit(r1, 0x1300, &(0x7f00000006c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0), 0x90aa01}]) r5 = getuid() quotactl(0x18b, &(0x7f0000000000)='./file0\x00', r5, &(0x7f00000001c0)="1356891350a27fe01e91829408fd4097c0b4bc2e205a6a818439b45b144b5c3838e8a141fe3559f234b01888f9283ac437b661d46076283c2fc807da88339f637a0999f73e59d849a99c82283722a70a24949a0b") 10:20:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fremovexattr(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="62747266732e2f6465762f6b766d002c1e5da823378ba838705bb5e1f9ef503c39ca345a6759683462d3c5159df7f809805022189cbfcca162e038ecc0d542d3c263ad60c978b569309ead502ae996"]) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x5, &(0x7f00000002c0)=""/4096) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f00000012c0)={0x1, 0xe75, 0x8, 0xff, 0x21, 0xfffffffffffffff8, 0x5, 0x1, 0x0}, &(0x7f0000001380)=0x20) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000013c0)={r3, 0x7ff}, &(0x7f0000001400)=0x8) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f00000000c0)=""/27) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x44000, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f00000001c0)=0x804, 0x4) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000100)={0x0, 0x2000000001, 0x2, &(0x7f0000000080)}) r7 = syz_open_dev$mice(&(0x7f0000001300)='/dev/input/mice\x00', 0x0, 0x100) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000001340)) 10:20:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(cbc-camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)=""/220, 0x200005dc}], 0x1, &(0x7f0000000280)=""/91, 0x5b}, 0x0) socket$alg(0x26, 0x5, 0x0) 10:20:10 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getuid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000005c0), 0x0, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2}], 0x20}], 0x1, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, &(0x7f0000000000)=0x80) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x492, 0x2, 0x1, 0x0, 0x81}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000300)={r1, 0x8000}, 0x8) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) 10:20:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000004c0)={0xa}, 0x1c) r1 = socket$inet6(0xa, 0x80800, 0xfffffffffffffffd) ioctl(r1, 0x9339, &(0x7f00000000c0)="0202000000345f8f760070") r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udplite6\x00') socketpair(0x2, 0x3, 0x9, &(0x7f0000000100)) sendfile(r1, r2, &(0x7f0000000040), 0x8010003) 10:20:10 executing program 6: socket$inet6(0xa, 0x8000000000000802, 0x7f) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x163000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0x41, 0x3, 'client1\x00', 0x2, "e4b02cf183064e6e", "133c9b2540335288ce3bc79d0a943549bd02e015dd41d0d49f9bc3d1bb7b32be", 0x3d0000000000, 0x335f}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={"6c6f3a11ee5420fdabfe152a34f600f0", &(0x7f0000000200)=@ethtool_stats={0x1d, 0x3, [0x8001, 0x1, 0x1550]}}) 10:20:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000005c0)={@remote={0xfe, 0x80, [], 0xbb}, 0xaa, 0x1, 0x0, 0x9, 0x1, 0xfffffffffffffc00, 0x40}, &(0x7f0000000680)=0x20) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)="ea5e18409d3466811032d444687ec4b8d031ad2dbdeb20fd6fe16fdf26360d631ebe40f4d9dd18f01e7883eb2fb0e9fa81af267a5761f6455497bba43e360bf99a220db944b53d027300c1c88b1773831f62b37100ef421476b30d64cc69dbfedc1a6e197ebc61e7f098c67e3b8c15b54592a5f3404d7b598e", 0x79}, {&(0x7f0000000140)="9ac3c587764a20fb8f325db13093355d621031ce8ed75a09f7fbece78568a2f732f878d829b65f3c6b84a20b04849853de50e5a005beb0190312d741a02bf0d6ff89d376346e74763fd92dd301d6dc536bd07aea5dcba24992688e2c0abd7603949c48d8f2a466aaf3655eafaac00182566db0c788c61c026f7d5af2b8b47d93948eec2e2389d96d3029dc7ad86e7b3621a0075e48f528a86cb2f7d0b6c4048957c5ba6a0cf4ba663b762d6efbc94223fa28fbc011ad7b165860f196266a80c4942c90387cae8e303f8ad01e", 0xcc}, {&(0x7f0000000240)="8dc2af41ae09f27fc4be9a551303f5e4e88fd2df265ccb4e84002719c688d792f12a657d0e1ad0cd8f6590437ed4982348a2dbd5999a63e0d7c6246fc36d91933f49da4f4ecf5ba32bd64c0f661d155632a0c60912d21b52a0686593bb9a251b7fcc0900c8d4ca49f308406cdd973007c6881ff7ffa32d4b69b1c0494df595a2485f98b01491fe746a75d86acdfdcc60ebacaf7de6785781564cb8c81daa024747b090a08ddb2aa80187c63f0159", 0xae}, {&(0x7f0000000300)="2ffcefd9bbf702f869e771abef868a1a9f40c7156d3f591490766a16245440ac6ff13ca11cee486d9a789af2853f40d89bbaf4bd2c0c390c173d072e70151f05046fa23528064d7a1937f69e739b8414c011d9a55106b3ce9f050117d564e9195a9b074d9a27f45198045bcebc951427b92df750a3df2dfdfcb1be123ac4f7b901d1509b8a72388f0d833f6d5c6ef310a733d18c", 0x94}, {&(0x7f00000003c0)="1c1206511e856608c1284fe387115b486a7eb1e51a014d68911518fa2bde7c95f17e06116855d5cf10d828e49872dbc6b1e5b80c87fdcdc587c8cd44c4ab0cb5e9bff15df10ec4a783f66fe2225d378bdb1e6ff9a7361bfe9102bd4dbce14b7450b18a4e48a5b0a212a43e79a80879b69289e46c0c694a05def7e80d4dd57ac0b6b3116dfa48ec90b27bf09ec99a8ba2aece8a", 0x93}, {&(0x7f0000000480)="98e9262a1d00dac1b78c79baebb72ce1281e8ffdb7db2f573c951fb09fb60aa265dd1ad520875bdd52fcb1cd697d88b550902c5001a7549fc5d3748f8c3ccf2ede91aed2644f7c3b0eabe21c1dfa04b7", 0x50}, {&(0x7f0000000500)="735918b110f2b2bbafd3e7633728ec81358e3adcfbfa4c5c9c1fb3a566e3300382d874d53c6061c43a42aa4346dcefa4efb64febfe24351b4ec72e3c4b3a2e05424d7aa5eada523b48e4757f2d2a2eddad6102038e61a78cac94404a484f05d265e9cf6aa91a5d466f95c08615cdb47c563ac2404932712d932f07f4bc090e533154c3a28457ceb367c6f019f0e1033fd5bd9271477971dd44ff859125d8", 0x9e}, {&(0x7f0000000800)="fdf44fb79594f63d93df4bf5d3a6ce1ebef4bbeb246b659801a13a92a97f312253a91638eb9b0457cb88969985aee1b1697709e2b0455db1538d0911eaf24c", 0x3f}, {&(0x7f0000000600)="a48007054d79a70c2064d2b6", 0xc}, {&(0x7f0000000640)="8132fada884ede2c89161844623a1d95b68716c9af58a730e3fb11386ff4fed220d744676bd0e418c0c7b1277d4aa3bf3caf041d7734984affa93750ee", 0x3d}], 0xa, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000071c0)=[{{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000006000)=""/103, 0x67}, {&(0x7f0000006080)=""/160, 0xa0}], 0x2, &(0x7f00000061c0)=""/4096, 0x1000}}], 0x7000, 0x0, &(0x7f0000007380)={0x0, 0x1c9c380}) 10:20:10 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x8002) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000040)={[0x9, 0x7, 0x3ff, 0x6, 0x0, 0x5, 0xfffffffffffffff7, 0x1, 0x81, 0xffffffffffffffff, 0x8, 0x1, 0x4, 0x8f, 0x100, 0x5], 0x5006, 0x502}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = semget$private(0x0, 0x0, 0x0) semctl$GETZCNT(r1, 0x3, 0xf, &(0x7f0000000100)=""/150) waitid(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)) [ 94.318236] QAT: Invalid ioctl [ 94.324266] QAT: Invalid ioctl [ 94.352804] QAT: Invalid ioctl 10:20:18 executing program 2: syz_emit_ethernet(0xfffffffffffffdfb, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa9b97ebb7ae8886dd6050a09c00083c00fe80000000000000000000000000000000aa00000000000890780000000000000000000000000000"], &(0x7f0000000040)) 10:20:18 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000280)="295ed277a4200100360070") r1 = socket$inet6(0xa, 0x80002, 0x3) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8000, 0x0) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000040)=0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r1, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="10000000000000000000f6ffffff0000"], 0x10}}], 0x1, 0x7ffffff8) 10:20:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x507803, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x2400) dup2(r0, r1) 10:20:18 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="295ed277a4200100360070") r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000180)=0x600000, 0xfec9) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000ab2000)=0x1002, 0x4) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000002140)={'broute\x00'}, &(0x7f0000001d00)=0x78) sendto$inet(r1, &(0x7f00000001c0)="38e20703", 0x4, 0x0, &(0x7f0000821ff0)={0x2, 0x4e1c}, 0x10) recvmsg(r1, &(0x7f0000000740)={&(0x7f00000000c0)=@nl=@unspec, 0x80, &(0x7f0000000640), 0x0, &(0x7f00000006c0)=""/110, 0x6e}, 0x40012021) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000680)={0x0, 0x7fff}, &(0x7f0000001780)=0x8) r3 = memfd_create(&(0x7f00000017c0)="76626f786e657430b700", 0x3) openat$cgroup_ro(r3, &(0x7f0000002100)='cpuacct.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000001cc0)={0x0, 0x0, 0x6, 0x9, 0x8, 0x6}, &(0x7f00000020c0)=0x14) sendmmsg$inet_sctp(r1, &(0x7f0000001e40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000040)="b236c1c6f52872217f095e462d6ed84af50972e9a2", 0x15}, {&(0x7f0000000200)="5914cd83fa6d09249ea20967ec0e2be6d401ce7c94be0cfdedde71c4265f3be0b5d5511b6bee88524604cc374f53bf3ee76ba27f4aca311e6965d8456ad86c520f5a0a7dd0158ee40cdc3094f6bd8ae7617e2e87f4b7c27b3575225977792778a8641d6898fcd10e8416dd3cefcb58ae1dfdb5ac172df2c3ce3786f75037a7c63648ea4144a6cea77a25055aa58098ccbe7c1cbc391ee97aa2c172f4a3e2c3d09ac2", 0xa2}, {&(0x7f0000000080)="1f57605a75f496b178e94546f53f86d525326f2127a1", 0x16}], 0x3, 0x0, 0x0, 0x8000}, {&(0x7f0000000300)=@in6={0xa, 0x4e20, 0x6, @ipv4={[], [0xff, 0xff], @rand_addr=0x3ff}, 0xff80000000000000}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000340)="90301364a0b59534f0305f5bd6cf72d85d23d1bb3d71c0d55e126fe8c334d1f2a6c512c190bb425abd48ed510e918d78e5033e09c6e5ebcc597984691635c7", 0x3f}, {&(0x7f0000000380)="91beb2ccfb0b1efd2281d12fba7eeaf1be2363f7c88cf27a45e298809abce2b3ddc987e4c347e00c89436634c4151ee79bf998d2abff0efa3f10fe5f36e265c6a20675bacaac34eb150303b1eaf6820d5dc26566fd7e753ea2e324b1a10dab478b6ddaf0ba27e1f84eea786f35784a8198d72efd9f0ee684251e1fad4c215861da89e7984e77978f64eb3906b41fae178eb607a71ac44894f84f1e37dff435ec2922d88892abae5280b3d110f0fe864665180ee4743b56af81b3fc7ab7351c25a0206042825cfdf58a9e68b9c49d3a59106a65604478cf97d5e480db8a38bda0ee6d5609aac35cd2c003ad2138e2c6", 0xef}, {&(0x7f0000000480)="26405dbcb141c55893b86cfde3e5bfd9f4b4e4b8181afd65e19c3aad459d17f9b525ee2dc9428d9c4d476cf0ba5579999dd80824d1f7f58ff7185a4790e555d55dd2e52af0", 0x45}, {&(0x7f0000000500)="567e4dd81e6678c140afc71ccd18083298e11a664c450e4c9ba4d4f14f89b932d8f375c8d7493262c3321381d1ec06c784a7b05c01f4cdea2ff610593a8559ff62b3c2bdd90de49c90f3e2abceb49cca90014eb3a309ab40c359b86e8d053a12c4da0d937e2d4726c0f2d37040179657190f2c5a27ab4de40a27d7849fbf9d7121b83ac86128a64d7dae0250291a09fe2aa7b9561f37cde9e41d3c1d7ba14678984c115c5da6610bf3d21e7c7f9cd9290dca7a3254737e04", 0xb8}, {&(0x7f00000005c0)="f32c2edc327dfa62a8a24052f79b32dc19c9a402a4044e4e7900bb001efb8f4552d6bd110600f13de94786edd5", 0x2d}, {&(0x7f0000000780)="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", 0x1000}], 0x6, &(0x7f0000001f00)=ANY=[@ANYBLOB="20000000000000008400000002000000040001000004000064000000", @ANYRES32=r2, @ANYBLOB="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"], 0x38, 0x800}, {&(0x7f0000001800)=@in={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000001840)="030baa8c4752c5c39920a3ef0e9a65e8ce481d21c397608cc07c4bb503a49587d5bc71a5e7f317", 0x27}, {&(0x7f0000001880)="5a9c51622d8a2c78533c55c3fbc5e1bcd4bcb9aed090152ed3939511bdec5070c8b2296be1b58036cef68c5b09b6f97b05c818c59685888d8c42b72cf3d7c1ee70e2f01bb3a5093ce2bd805b1d274a44a40071e8fc9df0c214a8", 0x5a}, {&(0x7f0000001900)="d7ab85a6472f49d54da47fdbcff98a849e1668d53723697ea617369d8b7c9a679b1ffd4b986b070d3e7b042d713c236dcd4401e12b0f3a082ce1b8a33cfa7f044e4c7eb3a40766c1c960847caa787ea1879271172fe64ee4d762b028ca7a8bc091422e812f84c1e569e6c4594ff0a17b10cb460631899c871ece59243046a8762b32fe4a83ad9e46a6f609501d490acdc9d881c9fd838a7232d8596a8d8de2cbd3adc385d7b348ab50a3d05947acdc9f6d11effae6edb1710350452f4c43a0cb3faba9c001152472c4741a693393dd62f85d3ee89b523680bc7ae9bfdfe7c80774bae79636810613aa60598947", 0xed}, {&(0x7f0000001a00)="63e2ea58a5d07d281fe238", 0xb}, {&(0x7f0000001a40)='2', 0x1}, {&(0x7f0000001a80)="113465c9f5b63ce2f6088e6bb29e8f6079f4bd25c6b5c9705581e1ff2d5b0cb4d377c65c08cd0e44fb24ed56f5cc86f6c930ef3ae171caf12ee8b2d969178d43425097fe64f38f9e6e933f5189aaf9c4ce4de058938fd1babdb3bb7b00ad73452296782f784006fcf20fae7e8546ce3fc72b74a2fe43df052116d17dc2d8d6cb04f2e6b26e6ed0ba9f7757f603629a2f3d7f282b92", 0x95}, {&(0x7f0000001b40)="9a6482f218694d92d5b360d5996232f90494c05962fae0296b096501b7261a5a4bd2e4d34b0e58cfc39e82f1bdc15fd2a7273b071448a3cf45873cba0681e125adfee3ec772613bfdb3027bcf75f8b8b61d1e5a44831dd01ab5f68007a64e1ec85aaa8313515faed82ff7a6545b24121e055a90eb07d3d881b90d716229eb270eab3861dbc3e4534a01d66452eed79de35510b0217cd24e767be89714161d1e5d4da81ad7ae33883b3eaa1f2deaac361e5a5d3f2eebc2797e8616a9bdca36464789a0b830265316fe69b79d387a0c3d8a7086133964bfa37f7e338fe4e669baa85a209454c0a02e0", 0xe8}], 0x7, &(0x7f0000001d40)=ANY=[@ANYBLOB="30000000000000008400000001000000050001000002000017000000ff0f00000000400209b510980000003f", @ANYRES32=r4, @ANYBLOB="18000000000000008400000000000000000004000900000418000000000000008400000006000000020000000000000018000000000000008400000005000000000000000700000018000000000000008400000005000000300000000100010018000000000000008400000000000000f8ff00ffff010500180000000000000084000000000000000800000481000000180000000000000084000000060000000500000000000000"], 0xd8, 0x4000000}], 0x3, 0x20000040) 10:20:18 executing program 1: pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xffff, 0x400000) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f00000001c0)=0x1) getsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 10:20:18 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x0, 0x8001, 0x0, 0x0, 0x5f}, 0x98) 10:20:18 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x8) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x15f) 10:20:18 executing program 7: clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) recvfrom$unix(r2, &(0x7f0000bf5000), 0xffffffffffffffe9, 0x0, &(0x7f0000d93ff6)=@file={0x0, './file0\x00'}, 0xfffffffffffffeaa) r3 = syz_open_procfs(r0, &(0x7f0000000040)='auxv\x00') r4 = getpid() fcntl$setown(r1, 0x8, r4) fcntl$setsig(r1, 0xa, 0x12) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r5 = dup2(r1, r2) tkill(r0, 0x16) exit(0x0) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) close(r3) ioctl$EVIOCGABS0(r5, 0x80184540, &(0x7f0000000140)=""/115) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, &(0x7f00000000c0)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000005c0)=[{0xf, 0xe2c}], 0x1) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) 10:20:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000380)=0x200000000) readv(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1) close(r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)=@can={0x0, 0x0}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000140)=""/18, 0x12}, {&(0x7f0000000300)=""/40, 0x28}, {&(0x7f00000003c0)=""/172, 0xac}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/135, 0x87}], 0x5, &(0x7f00000015c0)=""/4096, 0x1000, 0x1}, 0x100) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000025c0)={@empty, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, 0xffffffff, 0x6, 0x3, 0x500, 0xc43, 0x1200088, r3}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) tkill(r2, 0x1000000000016) 10:20:18 executing program 3: getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0), &(0x7f0000000200)=0x8) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000072f000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) 10:20:18 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x4) r1 = socket$alg(0x26, 0x5, 0x0) fgetxattr(r1, &(0x7f00000000c0)=@known='security.evm\x00', &(0x7f00000001c0)=""/118, 0x76) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000003c0)={0xef2, 0x0, 0x1, 0x7, 0x7, 0x1, 0x983a, 0x0, 0x8, 0x3, 0x3f, 0xffffffff}) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000400)={0x7d2, 0x4}) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000001c40)=@sco, 0x80, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x1a}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x1, 0x0, &(0x7f00000067c0)) bind$alg(r1, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) mq_timedsend(r1, &(0x7f0000000240)="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", 0xfa, 0x6, &(0x7f0000000100)={0x77359400}) r2 = accept4(r1, 0x0, &(0x7f0000000000)=0xfffffffffffffcbe, 0x0) recvmmsg(r2, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 10:20:18 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x281, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write$fuse(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x28) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000040)={0x0, 0xfffffffffffffffa, 0x14, 0x8, 0x7, 0xc4e7, 0x100000000, 0x5ec2fd7b, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x6}}, 0x1, 0x395d, 0x100000001, 0x0, 0x4}}, &(0x7f0000000100)=0xb0) 10:20:18 executing program 5: r0 = socket$inet6(0xa, 0x80b, 0x1f) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x40000, 0x0) recvfrom$inet(r2, &(0x7f0000000140)=""/72, 0x48, 0x40000000, &(0x7f00000001c0)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a", 0x4) r3 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r3, &(0x7f0000002540)={&(0x7f0000000000)=@llc, 0x80, &(0x7f0000000280)=[{&(0x7f00000012c0)=""/210, 0xd2}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x2, &(0x7f00000024c0)=""/86, 0x56}, 0x0) 10:20:18 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x1000, 0x2) r1 = accept(r0, 0x0, &(0x7f0000000040)) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) 10:20:18 executing program 6: r0 = socket$inet(0x2, 0x80003, 0x3ff) finit_module(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0) r1 = memfd_create(&(0x7f0000000300)="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", 0x2) write(r1, &(0x7f0000000040)="16", 0x1) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047033007d82c99240970") sendfile(r1, r1, &(0x7f0000001000), 0xffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x40011, r4, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000100), 0x1) clone(0x0, &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) fcntl$addseals(r1, 0x409, 0x8) fsetxattr(r1, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000080)="02000000b2de30925a1d964243791761ef9e39fb6ca87aac88e2eca883369ed56870d13d9b4ead92a681770568e16fd47240f2", 0x4, 0x0) fcntl$addseals(r1, 0x409, 0x0) 10:20:18 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x4001, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000240)=""/57) r2 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x8, 0x100) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0xb4f) getsockopt(r0, 0x200100000114, 0x2711, &(0x7f0000000000)=""/1, &(0x7f00000000c0)) r3 = gettid() capset(&(0x7f0000000040)={0x19980330, r3}, &(0x7f0000000080)={0x50, 0xffffffffffffff01, 0x3ff, 0x80000000, 0x61ec, 0x10001}) ptrace(0x10, r3) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$VT_RELDISP(r4, 0x5605) 10:20:18 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288a932044578bdd58dac8492c", 0xdc63b475a4c819c1) accept$alg(r0, 0x0, 0x0) accept4(r0, &(0x7f0000000640)=@ipx, &(0x7f00000006c0)=0x80, 0x80000) 10:20:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000000c0)=""/36) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000100)={"69705f7674ff030000008000", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='veth1\x00', 0x10) signalfd4(r0, &(0x7f00000000c0)={0x400}, 0x8, 0x80800) 10:20:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000000c0)=""/36) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:18 executing program 0: syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x0) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) io_submit(r0, 0x1, &(0x7f00000007c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000040)='0', 0x1}]) 10:20:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000000c0)=""/36) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0xfffffffffffff001, 0x63e}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r2, 0x2}, &(0x7f00000001c0)=0x8) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x121102, 0x0) io_setup(0x8, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000000)="10000000060000000000000000000000", 0x10}]) 10:20:19 executing program 4: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = getpid() fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x204401, 0x0) sendfile(r4, r0, 0x0, 0x8) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f00000000c0)=r3) ioctl$SNDRV_TIMER_IOCTL_STATUS(r4, 0x80605414, &(0x7f00000001c0)=""/239) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f00000000c0)) 10:20:19 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000740)={[], 0x9, 0x7, 0x1, 0x0, 0x6, 0xf000, 0x15000, [], 0x3ff}) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x7fc) setsockopt$ipx_IPX_TYPE(r1, 0x100, 0x1, &(0x7f0000000000)=0x2, 0x4) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000240)={"ba05486958826bdec1a0cb037a66df9b25c92d7cfeefb5c75822ec88717245aaf3a9e3b0609bb6bbcf3f52c67d0078db6eef11f153995b3a4a622e578c87eb12f49ba1ae42499490893c66d1280413eeb9bd4d571f699bf655e057bbdd7a4ee9fed406614423788c0b943b99abba4d162535366590fe980458cb70af7942a0ea91dda450ddd314fb103f7d7b582a2afffca7dd85b8d8120598e43efb1ca4fcd808645a7e892bcffd739458cf7a112136bd95e81128f95f1cd602f3510d77e868a21f39387c4dd323f51a4494e834d9a251f65843748da1cc04c255e6eeaa16c04cbf8537f22a859ef907a56e42be2664548bf044be2277d9dbcfc743319c7a65f2be7cc3fce4d4d2f1c929fcfd3e8a6cc6ebae79b7d9b553b004a296fd5d04c551a19ec32b4d103c536a3e8b0daa9d45d97984a21df57ba1b2a8419d80a558821fe28c56d59ff2040519f41a58da4ecf46a14a0652ed7aa17c465c4c874bf43c26a3d261b547288179aa23a017270b0575002a346c6bec9c69f16c908126ed23971ede68f6aa3ec92e55dd22a414b3260ffce05ab4260496f4c5501667742b422092175ac2cc9b88bbffd95a2ac59ab3a842bab421a0ec3669c7cc25921c408f716df2d1383fbf62c7d47edf6bc29cbf9c28fdcf925c26ace16bd69da1fa99f1a117236abc9458bc9836f90a9cb95deff48477c28b4e926107e1d7f8a26d41cc4d3aebb72317a7da1fc9e1c38101b7b653a4c6bab551af2f183d968ee9e5589ef702faac0441dbbf5f361d87101fe1299bd9400af256425e8d202cb71c5ed88a3dbdec4e3d03fa62058c583b6675a7e64fe19b0f308de4e25df9d408cd362509d58f0aa288bdcb3b42484ad7b267e71a065320d0506a0f80a4663394125cd2ffaf58b18ad02327bbdcbbb8ea91f9025c13a810310152e5892b5dad6aa99027a8c2b1aa23a348b78ed35b96781b7b63e4006dea36c35dc2f16812bab6d478af9888afa3ffd89a2df8cba46177dfdf3366c5a7d383cfd144182e3784f8220bad2d9c4179dba3a65737ec5fe62ec7cbf996997f9ddb42ce9af0a0d63116af999165534e0201ee5a4c05f55fb05209c4a4ff62364b13b082347edd121aef3a6a6959d58cdc43078875a5495dd17ec3c288a99550466e39a60ee082b51d0c3226df2de82111333578f53b66338e6f7542c22d162e02aa71b5dcd531cdcf89d8e1db9aa5cca498f4045fd5ac86f5d24757a2ecf58408c17b3e117c3fe4df4834b62d38bba5164c1e60a762ebe2f2413fafa2ab7833fbce7f4bc5d9641d59388fe97c223e9fffe5d0f357eba320770544f85f6e490cb7fd101eea34d52fa71ec40fb88988d3ce9f7eecdf3c9b8cb2d1dee07e2499b2e4106bc43697ea3735e39ecc03ca85a410ca2d0e9a726e0b59280dd532bc297d9b2d01a83d4cfc3c764ea3f20e19"}) clone(0x0, &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f00000006c0)) 10:20:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) r1 = socket(0x3, 0x80f, 0x6) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000240)=0x3ab, &(0x7f0000000280)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x13a) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x20000, 0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000001c0)="b90a75bf748ecdc81877d7759036a4d4fe92f50efb240520bbf03f6b907f61dcdf3a221f1c2d7c576481f545c2b0ca0bcbae58327ae2ae1807ec973256c1ba6748e5ab7efeecf031c22f5b277f98b51205c2e6b90cebe9f175147ee72c62d514b9c290f0f3309e72647d0dfe8641c5e6bffaae") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendmmsg(r0, &(0x7f0000005f00)=[{{&(0x7f0000004980)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000140)=[{0x10}], 0x24}}], 0x1, 0x0) 10:20:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000000c0)=""/36) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000002d001900031000000c0000000800080055000000"], 0x20}, 0x1}, 0x0) 10:20:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") unshare(0x64000400) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000180)) renameat(r1, &(0x7f0000000240)='./file0\x00', r0, &(0x7f00000002c0)='./file0\x00') ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000200)) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x13, 0x7c, &(0x7f0000000040)="862a77c510b21a41e489f6bb088e6b531db8f62d264c1a7ce29390ac0ad96b94d64e4abb6776f8dbc3f6d117fc9ffb34f502cc4da516553c790bb431528d61eefbae0630dcdea9732109a17f0bb8a32504307d0c7628feeaeffa4dfe7339e2cb9e045e00f50249fa0f3d6b18fb82a171490888201d8d4be7e5d2032d"}) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0xdff) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x83f, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000001c0)={0x67, @broadcast=0xffffffff, 0x4e23, 0x1, 'wlc\x00', 0x38, 0x3, 0x72}, 0x2c) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000280)={0x0, 0xfffffffffffffffd}) 10:20:19 executing program 7: clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) recvfrom$unix(r2, &(0x7f0000bf5000), 0xffffffffffffffe9, 0x0, &(0x7f0000d93ff6)=@file={0x0, './file0\x00'}, 0xfffffffffffffeaa) r3 = syz_open_procfs(r0, &(0x7f0000000040)='auxv\x00') r4 = getpid() fcntl$setown(r1, 0x8, r4) fcntl$setsig(r1, 0xa, 0x12) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r5 = dup2(r1, r2) tkill(r0, 0x16) exit(0x0) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) close(r3) ioctl$EVIOCGABS0(r5, 0x80184540, &(0x7f0000000140)=""/115) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, &(0x7f00000000c0)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000005c0)=[{0xf, 0xe2c}], 0x1) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) [ 103.786206] IPVS: ftp: loaded support on port[0] = 21 10:20:20 executing program 0: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e22, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e23}, 0x10) getpeername$inet(r0, &(0x7f0000000040)={0x0, 0x0, @rand_addr}, &(0x7f0000000080)=0x10) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x1, 0x4000) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000100)) 10:20:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, [], 0x1f}, 0x6}, @in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}], 0x2c) fcntl$setlease(r1, 0x400, 0x0) r2 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r2, r1) 10:20:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0), 0x32e) r2 = accept$alg(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x7, 0x4, 0x5, 0x4, r3}, &(0x7f00000001c0)=0x10) write$rdma_cm(r2, &(0x7f0000000c80)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000c40)={0xffffffff}, 0x13f, 0x4}}, 0x20) write$rdma_cm(r0, &(0x7f0000000cc0)=@query_route={0x5, 0x10, 0xfa00, {&(0x7f00000002c0), r4}}, 0x18) recvmsg(r2, &(0x7f0000000000)={&(0x7f00000004c0)=@alg, 0x80, &(0x7f0000000180)=[{&(0x7f0000f81000)=""/4096, 0x1000}], 0x1, &(0x7f0000000040)=""/87, 0x57}, 0x0) 10:20:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000000c0)=""/36) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) r1 = socket(0x3, 0x80f, 0x6) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000240)=0x3ab, &(0x7f0000000280)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x13a) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x20000, 0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000001c0)="b90a75bf748ecdc81877d7759036a4d4fe92f50efb240520bbf03f6b907f61dcdf3a221f1c2d7c576481f545c2b0ca0bcbae58327ae2ae1807ec973256c1ba6748e5ab7efeecf031c22f5b277f98b51205c2e6b90cebe9f175147ee72c62d514b9c290f0f3309e72647d0dfe8641c5e6bffaae") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendmmsg(r0, &(0x7f0000005f00)=[{{&(0x7f0000004980)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000140)=[{0x10}], 0x24}}], 0x1, 0x0) 10:20:20 executing program 6: socket$inet6(0xa, 0x1000000000002, 0x0) pkey_free(0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000000)='posix_acl_accessloppp1\x00', 0x1) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000040)={{0x9, 0x5, 0x8000, 0x80000001, 0x8, 0xffffffffdcb6f783}, 0x8, 0x0, 0x10001}) 10:20:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000000c0)=""/36) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:20 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1000008000) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = accept4(r0, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000001440)='team\x00') getsockname$packet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x14) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000200)={@dev, @local}, &(0x7f0000000240)=0xc) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000280)={@loopback}, &(0x7f00000002c0)=0x14) accept$packet(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000001340)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000014c0)={'vcan0\x00', r3}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000013c0)={0x0, @multicast2, @broadcast}, &(0x7f0000001400)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000003c00)={'team0\x00'}) recvmsg(r0, &(0x7f0000004240)={&(0x7f0000003c40)=@can, 0x80, &(0x7f00000040c0)=[{&(0x7f0000003cc0)=""/113, 0x71}, {&(0x7f0000003d40)=""/114, 0x72}, {&(0x7f0000003e40)=""/16, 0x10}, {&(0x7f0000003f40)=""/1, 0x1}, {&(0x7f0000003f80)=""/230, 0xe6}, {&(0x7f0000004080)=""/50, 0x32}], 0x6, &(0x7f0000004140)=""/233, 0xe9, 0x7f}, 0x2163) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000004280)={0x0, @local, @remote}, &(0x7f00000042c0)=0xc) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000004300)={@local}, &(0x7f0000004340)=0x14) getsockname$packet(r2, &(0x7f0000005280), &(0x7f00000052c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000005300)={'vcan0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000005340)={{{@in=@remote, @in=@remote}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000005440)=0xe8) getpeername$packet(r2, &(0x7f0000005540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000005580)=0x14) getpeername(r0, &(0x7f0000005880)=@hci, &(0x7f0000005900)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005940)={'team0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000005980)={{{@in6=@dev, @in=@remote}}, {{@in=@rand_addr}, 0x0, @in=@multicast1}}, &(0x7f0000005a80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000005ac0)={'vcan0\x00'}) getsockname$packet(r2, &(0x7f0000005b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000005b40)=0x14) getpeername(r1, &(0x7f0000005d40)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000005dc0)=0x80) getsockname$packet(r2, &(0x7f0000005e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000005e40)=0x14) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000064c0)={@loopback, @multicast2}, &(0x7f0000006500)=0xc) recvmmsg(r2, &(0x7f0000008800)=[{{0x0, 0x0, &(0x7f00000065c0)=[{&(0x7f0000006540)=""/123, 0x7b}], 0x1, &(0x7f0000006600)=""/17, 0x11, 0x74ea}, 0x5}, {{&(0x7f0000006640)=@in6={0x0, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000006c80)=[{&(0x7f00000066c0)=""/168, 0xa8}, {&(0x7f0000006780)=""/255, 0xff}, {&(0x7f0000006880)=""/128, 0x80}, {&(0x7f0000006900)=""/99, 0x63}, {&(0x7f0000006980)=""/93, 0x5d}, {&(0x7f0000006a00)=""/126, 0x7e}, {&(0x7f0000006a80)=""/49, 0x31}, {&(0x7f0000006ac0)=""/13, 0xd}, {&(0x7f0000006b00)=""/173, 0xad}, {&(0x7f0000006bc0)=""/166, 0xa6}], 0xa, 0x0, 0x0, 0x10001}, 0x4}, {{&(0x7f0000006d40)=@can, 0x80, &(0x7f0000008100)=[{&(0x7f0000006dc0)=""/4096, 0x1000}, {&(0x7f0000007dc0)=""/2, 0x2}, {&(0x7f0000007e00)=""/84, 0x54}, {&(0x7f0000007e80)=""/138, 0x8a}, {&(0x7f0000007f40)=""/133, 0x85}, {&(0x7f0000008000)=""/202, 0xca}], 0x6, &(0x7f0000008180)=""/255, 0xff, 0x2}}, {{&(0x7f0000008280)=@sco, 0x80, &(0x7f0000008340)=[{&(0x7f0000008300)=""/10, 0xa}], 0x1, &(0x7f0000008380)=""/245, 0xf5}, 0x2dd}, {{&(0x7f0000008480)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000008580)=[{&(0x7f0000008500)=""/126, 0x7e}], 0x1, 0x0, 0x0, 0x7fff}, 0x3}, {{&(0x7f00000085c0)=@sco, 0x80, &(0x7f0000008780)=[{&(0x7f0000008640)=""/234, 0xea}, {&(0x7f0000008740)=""/25, 0x19}], 0x2, &(0x7f00000087c0)=""/11, 0xb, 0x1ff}, 0x10001}], 0x6, 0x20, &(0x7f0000008980)) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000009140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000009100)={&(0x7f00000089c0)=ANY=[@ANYBLOB="4c060000", @ANYBLOB="517371a370f2000000000000010000000000", @ANYBLOB="a401020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000600000008000600", @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000500000008000600", @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000004000008000600", @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74647276616c00000000000000000000000800030003000000080004000300000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400f63c000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000", @ANYBLOB="7400020038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000400000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000500000008000100", @ANYBLOB="400002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYBLOB="08000100", @ANYBLOB="a80102003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000000000008000600", @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYBLOB="080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040002000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400ff00000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000", @ANYBLOB="0400020008000100", @ANYBLOB="7c000200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000600000008000600", @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000600000008000100", @ANYBLOB="8001020040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63650040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004001eac000008000600", @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004005a00000008000600", @ANYBLOB], 0x17}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) recvfrom$ax25(r2, &(0x7f0000000340)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000006180), 0x1b3, 0x0) close(r2) close(r1) 10:20:20 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x5, 0x4) write(r0, &(0x7f0000000300), 0x0) 10:20:20 executing program 1: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530000000008000", &(0x7f0000000000)=@ethtool_cmd={0xd}}) r1 = creat(&(0x7f0000001300)='./file0\x00', 0x3f) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) [ 104.103409] IPVS: ftp: loaded support on port[0] = 21 10:20:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000000c0)=""/36) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:20 executing program 6: r0 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="d9a140488bea355e69b311388026d0699f164742c9ea232fe581989c25681287105161464f0e6a0ff3eead50df98364531a08ad17498a872a333d28a833bd94a709cde56f6b807152a7fcc5998115c683a10b3e3e563f3f5c280b2f05866950f6074d05b57617819bc00f86be530acdab1af59c367b6727ba70674fe3ae54721bbfc18a3c60125d1b25d60ed0c414fb178a1819060e255b364899ca76b4b1a7b0fe553af7b87cd5b79a1f467be948e12d830256b37becd0c05e5ef09f71f8c0062ea", 0xc2, 0x4000, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="295ed277a4200100360070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 10:20:20 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x8400, 0x0) getpeername$ipx(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) r1 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x800000, 0x80202) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c02, 0x0) 10:20:20 executing program 5: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000029000000040000500000000000000000"], 0x18}, 0x0) [ 104.933964] random: crng init done [ 104.958173] dccp_close: ABORT with 23 bytes unread 10:20:21 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000007c0)=""/246) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000002c0)=""/201, 0xc9, 0x0) 10:20:21 executing program 2: perf_event_open(&(0x7f0000001f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000000efff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f000000b000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r1, 0xc1004110, &(0x7f0000001f64)="967d34f201000005100000009c") ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000000)="0db4a2b0bd5297cdedeef8079d166681986dad816c39e3a60b8ba784ad1e30900a0fe24819e185c1c64a1a7856f541e557658c1393312991be13") ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)) 10:20:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet_dccp_buf(r2, 0x21, 0x2, &(0x7f00000000c0)="8f552c2619e822a04909f040d34831306f06c7beaf2684b9578cde2c5ac4fc21259dcde349f470ac4dca15434987b88fb5e0d1e4208c8c54441cbd8381c2fd00c44259d01743eb2c34ce963c78f50e02ccf1752a3a79dc0451c8a99f9f44700aa055e6ebd5c5f4e65a56954ee312d2655d101353e4ddc2d94477e4e3312388e03677f30160970ca09e35c11b22f62178e593c66cbd21aa36751600d2d7fce73229a9eed251b49356c32df99e3886ea3403ff2f07bd4832f5bc34fdf603d73abc6d8cb22ee4787837ec30299353a4aa1d2636d3a867b5daefb11ee57c86783adea7716b0adb9f991deb4b370912d264f39db88e", 0xf3) getsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f00000001c0), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 10:20:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000000c0)=""/36) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:21 executing program 4: r0 = socket$inet6(0xa, 0x43, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") pselect6(0x38, &(0x7f0000000040), &(0x7f0000000000), &(0x7f000044cfc0), &(0x7f0000000ff8)={0x0, 0x989680}, &(0x7f0000000ff8)={&(0x7f0000000ff8), 0x8}) 10:20:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000040)=0x3) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'erspan0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}}) 10:20:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'eql\x00', 0xa201}) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000180)={{0xff, @empty, 0x4e22, 0x0, 'none\x00', 0x2, 0x8949, 0x49}, {@rand_addr=0x1, 0x4e22, 0x4, 0x4, 0x3, 0x6}}, 0x44) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x30, &(0x7f0000000080)={@dev={0xfe, 0x80}}, 0xa5) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000140)) 10:20:21 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x4924924924922c9, 0x10000000000040) connect$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) connect$unix(r0, &(0x7f0000681000)=@abs, 0x8) 10:20:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:22 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x7, &(0x7f0000000040)="5530262c851403000000000000000000006f5650b6ccf81439ec70f40f2fdb3730a54af77b7f5ce73ce6c19a042497024094bec3144332330569a282a2cb04d4e46f633afe7563c79d2f2fff0dc086129e5fcc2ad5b21746e5d3ff871f1020e1a0d78a4459570a4291cefb2b26090df8f4a6264c038320763ab970bce0f4cef7bd89b3efc66aca152326eea33927bb3bf37ebc7baa7478a521ebc30c") setsockopt$inet6_int(r0, 0x29, 0x100000000000048, &(0x7f0000000000)=0x6, 0x4) 10:20:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = accept(r0, &(0x7f0000000280)=@vsock={0x0, 0x0, 0x0, @my}, &(0x7f0000000140)=0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x20000004, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x200, 0x9, 0x9, 0x100, 0x3ff}, 0x14) close(r2) recvfrom(r1, &(0x7f0000000000)=""/121, 0x79, 0x12, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x80000, 0x0) ftruncate(r2, 0x7) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) 10:20:22 executing program 7: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x2, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2e, 0x2180) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000040)=""/189) mlock(&(0x7f0000374000/0x1000)=nil, 0x1000) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x0) [ 106.765079] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 10:20:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)) ioctl$KVM_GET_EMULATED_CPUID(r1, 0x8008ae9d, &(0x7f0000000040)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x2000, 0x0) 10:20:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x100, 0x0) sendmsg$alg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="ef0bf6e31fcaaaa09059c2d14d00e1c205463e33ffb5ae56e6eb4b51a4b6752a42ec9171b33dc48b2cbe9da92c47037603524c74ce75b731e6771b159ab40a1182d3b59df5b92c9f5e6d53cf92cc54d4c6e1b55c0a4e49eefe68bea65aa3913655652f6e911589d76f5d4a0c084c5c45e518a921160dfe", 0x77}, {&(0x7f0000000140)="478bcd3140abdc7a3b7010af1f670def2c66ce70f2a82058534d35dbd4e484e48ff1e2", 0x23}, {&(0x7f0000000200)="4bbbb707494cc3dc8f5c32b8e3540ec0cd227d6e4c48660bfe15ca52391cd31aa655de6e3c33166b26f89668b0388b5bcc9397d9cadc136e1b7fe74ee287ec39af3ab2cb235cbca28938af458eb6cbd0516299768b439216dbf399352bf6002f00576c86d338f9bb4af04412be818459fa82eb111498622b824ec5", 0x7b}], 0x3, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xc0, 0x117, 0x2, 0xaa, "5299b8be245129fd89aebf66fd75c626c94ad54f5ee8254fa101292835e4e8291e97c5750f1f3a2e442b13d0ef8e70a1c9fcc4cb9a85724f5b25d89c04717a9080edf9c61a3ee5eb7fbb321280b1046d7451982e2a6101e9fcedb13a140ac376cb2956ca25c928c32d5bc67c7f7a22203535cb1fa9f608138fe39433e3f00b0bfd69cd31ca512c4e84288dfa82edefe941c21ccf4807cec39cac855ad4f7084e33ea2ba7f61dd78356a8"}, @assoc={0x18, 0x117, 0x4, 0x10001}, @assoc={0x18, 0x117, 0x4, 0xf42}, @op={0x18, 0x117, 0x3}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18, 0x117, 0x3, 0x1}], 0x168, 0x1}, 0x0) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003cc0)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001740)="a7118230eef5e420406dc6a099da077d64d054e0293b261fd23e223ac994e771d39076c63413ac4c3797871c905a3788788903cb54e0b814d561537a2e51405ff0b5bbcb5fe7f41a21b44db2d47be29e7e805a6d3d2a98cea5945db9b758fad872a60d0c8531afe1dbf4d5962f155c68", 0x70}], 0x1, &(0x7f0000000200)}], 0x1, 0x0) recvmsg(r2, &(0x7f0000b24000)={&(0x7f0000f7ffa8)=@alg, 0x49, &(0x7f00000c2fd0)=[{&(0x7f0000f80f9a)=""/102, 0x66}, {&(0x7f0000af7000)=""/4096, 0x1000}], 0x2, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) 10:20:23 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:23 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000180)={'bridge_slave_1\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="100000007d0000000000000000ed0002"]}) 10:20:23 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfff, 0x0) getsockopt$llc_int(r1, 0x10c, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) 10:20:23 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x0) getsockname$unix(r0, &(0x7f00000000c0), &(0x7f0000000180)=0x6e) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x10) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)='{') 10:20:23 executing program 1: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xfffffffffffffffe, 0x8400) getsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) lsetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)="0200000008000000000000000200f30000000000", 0x14, 0x0) 10:20:23 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000240)={0x2}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'team_slave_1\x00', 0x4}, 0x18) 10:20:23 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x68, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, @in6={0xa}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, @in={0x2, 0x0, @rand_addr}, @in={0x2, 0x0, @rand_addr}]}, &(0x7f0000000100)=0x10) write(r0, &(0x7f0000000140)="150000000000080083a66dd2c86b6525000010", 0x13) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000001440)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001400)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r1, &(0x7f0000000440)=@get_event={0xc, 0x8, 0xfa00}, 0x10) write$rdma_cm(r1, &(0x7f0000000ec0)=@join_ip_mcast={0x10, 0x30, 0xfa00, {&(0x7f0000000e80)={0xffffffff}, 0x4, {0xa, 0x4e20, 0xffffffff80000001, @local={0xfe, 0x80, [], 0xaa}, 0x4}, r2}}, 0x38) write$rdma_cm(r1, &(0x7f0000000f00)=@leave_mcast={0x11, 0x10, 0xfa00, {&(0x7f0000000180), r3}}, 0x18) 10:20:23 executing program 7: r0 = memfd_create(&(0x7f0000000080)='.*\x00', 0x1) write(r0, &(0x7f0000000180)="16f91220a8c7a61a85492a000000000000000000", 0x14) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000240)) [ 106.963530] 9pnet_virtio: no channels available for device ./file0 10:20:23 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) socket$inet6(0xa, 0xe, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4, 0x4) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="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", 0x1000, 0x48080, &(0x7f0000000040)={0xa, 0x4e24, 0x6f0, @loopback={0x0, 0x1}, 0x8}, 0x1c) 10:20:23 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000003, 0x1) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f760070") getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r1, 0x4, 0x30}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x4, 0x0, 0x3f, 0x6, r2}, &(0x7f0000000180)=0x10) get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0x65, &(0x7f0000008000/0x4000)=nil, 0x2) [ 107.106954] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 10:20:24 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x3, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f000087ef6a)=""/1, 0x1}], 0x1, 0x0) preadv(r0, &(0x7f0000a19fd0)=[{&(0x7f00002ac000)=""/106, 0x6a}], 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = gettid() ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x5, 0x100000000, 0x4, 0x101, 0x4dbb, r1}) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r3 = getpgid(r2) tkill(r3, 0x15) 10:20:24 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000012000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) tkill(r1, 0x9) close(r5) 10:20:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4188aea7, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000001d64041b79d85dd1e87fc91e31a41d52c7605d8099cfdafefc4d0697a2476bfb37756539da2fefa12717905d93bfd8d5dd18d945984bc576b5395cb43398113ff8f26285010cb7ae116e3b18e0c30574039b0396445f60fb58106035af8efcba42ab25fbea1abbfca11d8b87205097bbf8850c31e46f5173bb3abb0992843465ed11d5b31b578c89c8076d5d05fb31f98b12f205e2bd53ad99eda671e7d59fa24ead24ab4ec8a0a910061d8d1939ca29765ae8fa02297fac0bd640dfffd58cdf9f8359e0801e8f228e4d09a23a8a160c43a8edfc6a6e2672d87a2bdb501ac"]) 10:20:24 executing program 5: seccomp(0x2, 0x20000000003, &(0x7f0000000040)={0x17}) 10:20:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000001c0)={r1, 0x11}) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x800, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000200)=0x0) sched_getscheduler(r4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f00000000c0)) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r2, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101000, 0x0) ioctl$KDGETLED(r5, 0x4b31, &(0x7f0000000280)) sendto$inet(r2, &(0x7f0000000000)="18", 0x1, 0x4000000, &(0x7f0000000040)={0x2}, 0x10) 10:20:24 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:24 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x20000000008912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = socket$vsock_dgram(0x28, 0x2, 0x0) shutdown(r2, 0x1) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x3) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @rand_addr}, 0x10) getsockname(r1, &(0x7f0000000040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80) getsockname$ipx(r3, &(0x7f0000000180), &(0x7f00000001c0)=0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000b00)=0x8, 0x4) sendto$inet(r0, &(0x7f0000001100)="d6", 0x1, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 10:20:24 executing program 7: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x21000000) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200482, 0x0) ioctl(r0, 0xe3a, &(0x7f0000000040)="1d8f2e7dd7272cb7fdf6a2a54351bfc5a9fbbf920889aaef596e821194683a0a9764588bedcf4590184234b1fe4b39142bb58a64df7583b3df4c9a2a6727e6a841caf06d2b2e4f04b6ea10b1ea3255e0807da6f5071a24714738bc941fb6a5f4ad9b69fc264eda7ef5e32d0dd871e412fcfd050271645aec44bb7144ddbae369028268c8119e6ce06d458353b25fa2f268c1f86d822927") 10:20:24 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)=ANY=[], &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x1}, 0x1) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0xc000000a, 0x0, 0x1, 0x81, 0x2, 0x800, 0x2e5}]}) madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xf) ioctl(r0, 0x7f, &(0x7f0000000200)="3ec51b04f19551377fc51f55eb130a0098c0a2b4ab358fe67a9b0c0b75b50ef9efd9516027f7c242c0a9c7499afdfe9a02312301b1678cffa97b7bba650ac4cb7b49284bcaa0e82c6f0ce475f316f0140939b76c289567a3475e3001f78cf275b46d2dd4517ca6c7d21ae4217b5cf8d92527c5e8388945afa082b59512dd6f559a309da8186d2ea21ca301dcf5004a6f85b66d89d4e09396b06de38abdce5680a2660000000000000000000000") ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000000)) 10:20:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) [ 108.051966] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 10:20:25 executing program 7: pause() mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='.', &(0x7f00000001c0)='loefs\x00', 0x9004, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000200)) preadv(r0, &(0x7f0000000440)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x800) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 10:20:25 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x3, &(0x7f0000002000)=@framed={{0x18}, [], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x3, 0xc3, &(0x7f0000386000)=""/195}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100)=r0, 0xfffffc61) r1 = socket(0x2, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) perf_event_open(&(0x7f0000000140)={0x2, 0x7b, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r3 = dup2(r1, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000080)=@framed={{0x18}, [], {0x95}}, &(0x7f00000000c0)='GPL\x00', 0x3}, 0x48) r4 = dup3(r0, r2, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) 10:20:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2, 0xc8bffc39d8d56989, 0x4, 0xfffffffffffff4b5, 0x0, 0x4}, 0x20) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000), &(0x7f0000000040)=0xc) close(r2) close(r1) 10:20:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x21, &(0x7f0000000500), &(0x7f0000000540)=0x8) close(r2) close(r1) 10:20:25 executing program 1: unshare(0x2000400) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000002600)=[{&(0x7f00000001c0)="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"}, {&(0x7f00000011c0)="4629c63115184192e1c0023bffc29dbbac5313c97a0c6dd5660551b8e4d0456c6b64809f04642c89d3b0fd5c5f14b7f91ed4c114da4bfb62df80709e38b532eb0b3d9977ce72aedeeabfc0cd9e09c62f5afcfb2641529b96cee7c6c22f03800d5b4a7a3b0f763ce9482f78460f592adfbbb6c296d305d06dfbcc581fc0c4bddf02ba9cb217044d79bb3402344a1ada5ef246ad94660281b9395ce260f371ac26bebb29e27fd538cfaa8dfc3c7ff2b2e87bf79ca74a62a1899b36c0cf6d2b2b3ece3ca8551a46065c05245afcd93f86fe4552c4c0c5ee4d25ca956807a589c270", 0xfffffffffffffd9d}, {&(0x7f0000000080)="1751d224f9bf514b2e964e27082cda0af74ef2461bf0f9fe839e93fa90da44b4e931c5c2641de18155c63e01de8e81adf51ebfa7527b72dea5b543de07068823eecb4fd6e60fa1a35871ac759d6155ab8b7c8c53d5c631c0dfe6fc2eec277ff7089686d50e6962a6e19296b36522b477aef66a"}, {&(0x7f00000012c0)="a3fc50d02561723c151a88b798085b269235c33be33a2a3e8cc38fb19077afc9ace9d287f45c99fb742595c3f85b85a8b92b7059a153bad6b536f1e950cfbf6f618d902305011214d0f4e460430d9de56ac4167d61d7cf8987f8e5aff06dec818dc6f331ef1d5ee7ba03ccfdd3d650e0dd92e3d33759b86a116e9a1b9f820c9b99ce7eea50897f50c5cf96c8a43ee536824593e53f"}, {&(0x7f0000003780)="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"}, {&(0x7f0000004780)="c7b6ed96db25b793530cfca7c82372f0f521bc90a43d1857cb9faee19569f6f021d5a9b3"}, {&(0x7f0000002380)="cbb7a67c345f663f297bc45fd38a55f70e19bd76da5d5f7d273182216c068533ce14168930d5fbfbaaa44dd65e773df43889c9a55deded2f2f681affd57085e0f1fdd279f746860cbad53607491ce61976f2966fd7fec81d2c307a962c09c175f3c60e56496f376dc82daf3ca155d8f34eed98df08ac44bc1327dc655a317f032920352ef55fa6fc64fcb00bb54a5a03c7"}, {&(0x7f0000002440)="70a81a2eee2a5750c11a8bdb4c64d1a7c533beefdabe4993e973e6912ddb34867c98e390d59924dd0680c43586cb95d131f1381bc6c2aeed3e54cc2affcfe850964c67fbe9cc471c2b67f23dcb2c78fe6dc8f3a96d075f9ad7c1147cac8f8f18319fbc4a11f20aff7e66ff0b32348810f216db08aca8cc69dfa4b288694ba376d6c011630e4dc53a73814602079cd12041f4fd72f4ce33b502c8f0c0279b229ac98c733bb90d40d0d977863f1848c6e62af2499a342261681a21fb9a416903ba61f2d4fcadfd9fe3ed3fbf9a"}, {&(0x7f00000047c0)="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", 0x6}], 0x10000000000001be, 0x0) r1 = accept$packet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000040)=0x14) write$binfmt_misc(r1, &(0x7f0000001380)={'syz0', "7fa778560c9b8b2975ba200620cb00a4141a51a65fa5794bb271340babb035bf7de4b60bbbd984dae6d9d79ace526ad24477394d4f33bce20494f2f14cd6bcb2acb597788a3c9edb4eb59875f9cef6f2c2e1264d6498751be0a967fbfcc3d69485bfe6fe04635b9f6e56423d7eb15917f54b690224457c5d2bfd64b822345754b950edc646338801c6bc2fa5ef5a0a88602b6d70b9f1024f18da4fae0f0b31d835f2cc14d27fad67"}, 0xac) fcntl$setsig(r0, 0xa, 0x2f) 10:20:25 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x140, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x2, 0x2b8, [0x0, 0x20001500, 0x20001530, 0x20001560], 0x0, &(0x7f0000000080), &(0x7f0000001500)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000000b0000001000000088ca65727370616e30000000000000000000766574683000000000000000000000006272696467655f736c6176655f30000074756e6c300000000000000000000000aaaaaaaaaa19ffff0000ff00aaaaaaaaaa0e0000ffff00ff00007000000070000000b80000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a3100000000000000000000000008040000000000008000000000000000130000001000000080f369666230000000000000000000000000677265300000000000000000000000007665746830000000000000000000000073697430000000000000000000000000ffffffffffffff00ffffff008465c4cea584ff00ff0000ff0000a0000000f000000040010000706b747479706500000000000000000000000000000000000000000000000000080000000000000002000000000000006c6f6700000000000000000000cb000000000000000000000000000000000000280000000000000004bab6545b132ae096f1daa937ce60e144160a010000001ac1db2f83ac4fe400020000000000000049444c4554494d4552000000000000000000000000000000000000000000000028000000000010000073797a310000000000000000000000000000000000000000000000000800000000000000000000"]}, 0x330) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="d179f20600000000001c14b1048c5b1bd2e7fcd330451c64b8614fcff9671a5cf54ab025", 0x24) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000001480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x15, &(0x7f0000000000)=0x4, 0x4) r4 = dup2(r3, r2) sendto$ax25(r4, &(0x7f00000014c0)="8e", 0x1, 0x0, 0x0, 0xfffffffffffffe99) 10:20:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x2400000000000) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$getregs(0xc, r2, 0xffffffffffffffc9, &(0x7f00000000c0)=""/115) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x0, 0x0, &(0x7f0000000040)}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x284002, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="da7501fe0dd4151d7ff5e53ad441ceeec07a9b6d0300ffff010000000000"], &(0x7f0000000280)=0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f00000002c0)=[@decrefs={0x40106309}], 0x0, 0x0, &(0x7f0000000400)}) accept4$nfc_llcp(r0, &(0x7f0000000140), &(0x7f00000001c0)=0x60, 0x80000) 10:20:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) [ 108.858495] binder: 7299:7300 BC_ACQUIRE_DONE node 1 has no pending acquire request 10:20:25 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x100000006, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1) 10:20:25 executing program 0: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80803, 0x1) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000), &(0x7f0000001380)=0x4) 10:20:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9}, 0xb) sendto$inet(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) recvfrom$inet(r0, &(0x7f0000000100), 0xffffffffffffffe8, 0x22, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x709000) [ 108.927829] binder: BINDER_SET_CONTEXT_MGR already set [ 108.934018] binder: 7299:7300 ioctl 40046207 0 returned -16 [ 108.967107] binder: 7299:7300 BC_ACQUIRE_DONE u0000000000000000 no match 10:20:25 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0xa, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:20:25 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:25 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setparam(0x0, &(0x7f0000000100)) 10:20:25 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r3, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000040)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r3, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 109.142000] binder: release 7353:7354 transaction 3 out, still active [ 109.148909] binder: unexpected work type, 4, not freed [ 109.154338] binder: undelivered TRANSACTION_COMPLETE [ 109.161270] binder: 7353:7354 transaction failed 29189/-22, size 0-0 line 2852 [ 109.190135] binder: BINDER_SET_CONTEXT_MGR already set [ 109.203462] binder: 7353:7356 ioctl 40046207 0 returned -16 [ 109.218808] binder_alloc: 7353: binder_alloc_buf, no vma [ 109.224785] binder: 7353:7354 transaction failed 29189/-3, size 24-8 line 2967 [ 109.233822] binder: undelivered TRANSACTION_ERROR: 29189 [ 109.239517] binder: 7353:7354 got transaction to invalid handle [ 109.245818] binder: 7353:7354 transaction failed 29201/-22, size 0-0 line 2852 [ 109.261434] binder: undelivered TRANSACTION_ERROR: 29201 [ 109.267168] binder: undelivered TRANSACTION_ERROR: 29189 [ 109.272752] binder: send failed reply for transaction 3, target dead 10:20:33 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:33 executing program 6: sync() clone(0x88080000, &(0x7f0000000140), &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000440)) 10:20:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@rr={0xffffff94, 0x3}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)) 10:20:33 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r3, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000040)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r3, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:20:33 executing program 7: pause() mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='.', &(0x7f00000001c0)='loefs\x00', 0x9004, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000200)) preadv(r0, &(0x7f0000000440)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x800) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 10:20:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet6(0xa, 0x803, 0x100000001) sendmmsg(r1, &(0x7f00000038c0)=[{{&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f0000000500), 0x0, &(0x7f00000000c0)}}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001300)={&(0x7f00000000c0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001280)=""/85, 0x55}, 0xfc) 10:20:33 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) socket$inet6_sctp(0xa, 0x0, 0x84) rt_sigsuspend(&(0x7f00000000c0), 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000380)={0xfffffffffffffff7, {{0xa, 0x4e23, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0x935f00000000}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000240), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 10:20:33 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0xa, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) [ 116.981875] binder: release 7374:7376 transaction 10 out, still active [ 116.988869] binder: unexpected work type, 4, not freed [ 116.994663] binder: undelivered TRANSACTION_COMPLETE [ 117.001396] binder: 7374:7376 transaction failed 29189/-22, size 0-0 line 2852 10:20:33 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:33 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0xa, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:20:33 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x11, &(0x7f0000000100)="d8c466ced605ffffffffffffff5c4c6b69"}) 10:20:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)=0x3) ioctl$TCXONC(r2, 0x540b, 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) 10:20:33 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r3, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000040)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r3, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 117.106927] binder: undelivered TRANSACTION_ERROR: 29189 [ 117.112550] binder: send failed reply for transaction 10, target dead 10:20:33 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r3 = gettid() write$cgroup_int(r2, &(0x7f0000000180), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r1) 10:20:33 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0xa, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:20:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000020ff0)=[{&(0x7f0000001800)="2f0000001c000767ffffff000d0000000200000001000000ec0002c91300010023000000000000005867000000050b", 0x2f}], 0x1}, 0x0) [ 117.194396] binder: release 7406:7407 transaction 15 out, still active [ 117.201225] binder: unexpected work type, 4, not freed [ 117.206550] binder: undelivered TRANSACTION_COMPLETE [ 117.213288] binder: 7406:7407 transaction failed 29189/-22, size 0-0 line 2852 10:20:33 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r3, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000040)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r3, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:20:33 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0xa, 0x3, 0x7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) [ 117.300997] binder: undelivered TRANSACTION_ERROR: 29189 [ 117.306639] binder: send failed reply for transaction 15, target dead [ 117.364852] binder: release 7426:7427 transaction 20 out, still active [ 117.371690] binder: unexpected work type, 4, not freed [ 117.377048] binder: undelivered TRANSACTION_COMPLETE [ 117.382629] binder: 7426:7427 transaction failed 29189/-22, size 0-0 line 2852 [ 117.450489] binder: undelivered TRANSACTION_ERROR: 29189 [ 117.456142] binder: send failed reply for transaction 20, target dead [ 117.833517] print_req_error: I/O error, dev loop0, sector 0 [ 118.000606] syz-executor4 (7438) used greatest stack depth: 15768 bytes left 10:20:34 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0x2000000011, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000140)={'bridge_slave_1\x00', @ifru_flags=0x1}) 10:20:34 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:20:34 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r3, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000040)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:20:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000000000000002000900080000000000000000000000030006000000000002000000e0000054d81458186fe8b90002000100000000000000000d00000000030005000000400002000000e00000010000000000000000"], 0x60}, 0x1}, 0x0) 10:20:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f760070") sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000ac0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x4000000000013, 0x301, 0x0, 0x0, {0x5}, [@generic="88"]}, 0x18}, 0x1}, 0x0) 10:20:34 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x200000008912, &(0x7f0000000000)="025cc83d6d345f8f760070") bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xfffffdf7, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) shutdown(r2, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000)) 10:20:34 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e20}, 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x5084f74d, {0x2, 0x4e22, @rand_addr}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14}}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x0, 0x6, 0x0, 0x40, 0xfffffffffffffffd, 0x0, 0xcf39, 0x80000001, 0x4}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000180)=""/193, &(0x7f0000000280)=0xc1) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) syz_open_pts(r2, 0x2000) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000480)="7daa82ba42b49fe0f8dace1e99a63e7330199736360e2d39fb356928ca980ede1713bb42469a3e3c01364a6c24397a393897627952cd", 0x36, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r3) r5 = add_key(&(0x7f00000004c0)='asymmetric\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000540)="8e8043e6c81d81d58d21133ece0fc1fc3e0b551f8d0fd4b577b01c2a52be54b79cf4ef85a2c3821c9b5dc3441b3ca53516815f1c9d9e8a31de3f0c15e85f511f8de4c4356e53d5348de2cd27292b0fb39395", 0x52, 0xfffffffffffffffd) keyctl$unlink(0x9, r4, r5) fcntl$dupfd(r1, 0x406, r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000001700), 0x10) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x4e24, 0xffffffffffffff00, @dev={0xfe, 0x80, [], 0xb}, 0x8001}, 0x1c) r6 = geteuid() r7 = getuid() setsockopt$inet_opts(r0, 0x0, 0x3, &(0x7f0000001740)="06ab96fae6fb7c2da152195dd0f25851dd6109b58d5fb1c2dbad8078d95d99a11800325eba904cc2cc681ec1ddcba758ee7a7f64a8ac0da16e3ec927c77075b51bfd3d83ebf22a13c3e8d9cbe82284d169ddf2bd5eedd714efda5b1617268c8211fa40dbb33892fecbf9a3e571ad982f5da7aaadd6b5f1d8fc045cf249295fec16a5b4bca87574b19ae711e94ae4fb7e602378f5595712ed5d2330b7e8affd294889f339a650846f964613ecda4b1396ccb2768320e93ea632f893ffb85ed02df8ca6cc95eb3c834440480139c86733355dfab77cc2440be45e57d947c663d6ac38101253be0525a92097eb83235c88d11ae15c6ca2421146c9c26b2e2fc2e36c52a9af12fc7d404b87276718e9143ab1af81c1ef6906fed2e4491343b101e56e412a1e63a617bd31940a46bfba205ef73860dcfeb3fce82fe18b91dcc953cf492f729dc3700f46a37cf1ff2a74687ca2aa6574fd63ae7f8f72daf70026bcb21d2b51b10fd05f955087fbff537640bd6822534e26d0e3adddeda654ad79d95a2710aba1568f83da7a8ca7ef5ed468d1bf65778938bdef1351825cb4028643fc9c24c634cc07288062abbdf572b9dd021c6d2d63a2fd4981e3c36554114d6b1f4b32233ab65359ec169bf59f60f84b86cad4aa4fcc620fd26eeacf96a3111fb87132c20ead3a2bab27dd4e722d3ba0715cc82e2212c49afddf5116cf4bf794a04bd078beb0dc1b67d0839bfaa8d4b08259ea9a6f6f110b2de3bcca8846e627026a51638df554210d9960100676480243c6b25102f73e8c925d33ea7b7219548b099c9a2f71b0fc7f2473c1b9537ad0fd48e7ad316db0c11b9d2faaffd62217e8d76c0a13d4a5268894b118a7f635abda883dc6aa970afc7d40288f79853d10523d6b583ee73b9d00746fd9b42157ef5841cf06e63c2769aace672f2456563fba81834da6386b6f2b51df1f1b363ac36a9a6b509c13a988777e185d1f67db820e11c07ad8a72c1d26317e01cc7efac060e9c5dd00a61560d9ac5c5b2a21f6f70cf1162074d723bd2970d0096434e2d905cab8c217941e68f18d5ae8ccfd1d1e34f9fbfbc8871b1b8452308fd4640d21016b7338bacd44b67e9759b3877095d7801f00b7204aaba45f7e2bbe0440be296c606518e0404960055bf14957dcda1ebe8bd6d4b4b10c6435c2f51f7d9ece9235a5fae906c1b3c24338e6deffd9165e4d4ff296c03ddaf11ca2b486b3d8fa6cc998592de97ceba4096cddc45c68f82b1a1bb24c2a50aec83e114a7f3f33b59c079aae4846f2d423cce1f001a68d75272887c45cca663b7e0d27b0564998cec2e254f7083b09e6dafeae2cc62f41f2fcd085ec2c607c733ed8ff6a07b095a888ea20750ea1a98ad9fb13d7c2af365854e7718567338039ffeb66544bb9fe8ad8a67268af6932c6370ebbdd840bea88ef653a80ed9e2ecc9ecbad3b405b76da2f2aa2176f9eb5c0ad0f57c7949111df1c7c339ebdef0e2730cd0a8ce9148fcc2ca264c95083925a7e034a3db2512560669aaf2263b61a7be487d29a6366937d4b7b86b9f8f7895bfa3386d9b46b65236eee061eb999d2dd2ba2c6d4e177c489a8a837da61f5d14908e4c97d4cddaa0ffcc72afbd7234d9de94d797ce44a947b4be1cc7cc54368dd4125620bc5e1588830959434ddba07ef534830b3b955116e6260102505ba7b27570b3cc2a02c6bb0a7aa4e5f0aece0306f6fafb6d4cc64eddd751e5c96b36b68f08ef18ed39cfda60ac65578b3f5dd468b4e5aed9bf3f715b0a6b6786ba35af9d4be428578a2102e356a29b01ee7c4a1f198edcaf8ca46ade379d08b2d0137a7440ce3fa4aa826f8d840fb1cf006cac2f6de8d5984139be23ff632109f53f47f00dd2965a70b1b76d91db8854e27a75f83fee34391f743fe663143713a07c4736d61e2bb575083a1b245677272801294d05c7416be28689624da513ed976ee995bb2fc7a6c621dac19c7a8ef0abc918598771077719d8bd37c5d3c33dc276cad93453eb2d4c114b329d7b89121764fcd13041a818954bfeabdd6908d3b9f6dda329c3f0fa3827b7faba262a6e533957c43f9bfc3868916d88a3ff37c4877c89439dc4d74133dc48ff7e9375a86e752339711d970ce074289ad95749dcfa6d9f1037d3e5c8429691e4e386b0342c1dec906fc6ea8cf1160d3009a5121fb28ceaf909fb5a3fa3acd338e7965fceb998466704376ebbad050bfe308b5f9bea99194ce0aa64ff8ba6be0d9b18ba9442f8de45a6731651fa595e41d5b8667fe70fdee5e3fcc775f8c70336390b2310f68d4634f0aad2316de3aa2dc646cd7112850bf94382418b7d007850268790f2de79e1f66563fe59eec2e3a4e8e90f9629d171f88e2b4d2d896fdf27e2b7faff9f693512575ef9219684e502ea081b198aac24a00a9dddeecfe882ec8b3f54a170e7c897cf9611087781c2417e38cc4acc68c9e610d670c91309913afa53bda9f8615b1d1b34931bea7a90071c455fc9defc49358f92d9f62169f731f41ca4247c7963d494420e7b1a587cb8e5e5d70cdcdf935d433cf1ed53ad2188d5ef95c0eeb693e1f40468a606f289ab89cc5fca056f274f571c25a78a8765b76388179ff9bf02cd328e84243ffd02c878029e74caf2962a2acecba172fc3db4e471b954fb322ef773c0ab541962a53ad342bdf42470018702304e7db3dd712e3c7715cddebfb578e1191a83c43b2477b447908632256aefc8fcbe6f0ba6307480713df2119ec9b0e7c2656ca2c956423c19cb9b7ce69f0b3083146f2ad19f0a586230431ab4fa2a674b09c075584ad0929f2cec105a7c83c6973dd72952435ebc0c297813e4c15158184e89a2d040560dbe907f20c23b8f710661df2c35ad2e82a658772edbcd7a7738aa6e411f14d59bfdef5e1b5a1c8c97843d47a3d15337df10542b4533a3d2f840755a7fc035c4870cb31d3d77f930a5cb459b824ef2083fff74cd4028a9996cef29061cb2223f0fac65120c99cf39a11857c6bad1e1e54f2937cb92b78206f0155bbdb7802d465af7906ce1e62c37f2ceff4f00ed9b8cd03210768c6bd805be71ecfc82bedba2ba9c130067f70b95234618a6298248bf906edcd37f106b1062df4db8c869e8052de6f02501ef84acadae385d34a5ff8f4e5f2ac128c21b90b503b48153d4ff655025d442c825ae3eaca9d786c0eda9715723910a66f150e2e7c5f02b9a0cf72b47cca3534985dd507ca546d8f882f7230e07bd2fe855d593ed6a28f864123898369ebfe30d41a3ac1855277a56c40ca014ef9e6045e4f1ec23a98cb4c96513d170ac5a20930e1ab4a96909886310fa301744b5ab7f9895156539e6301613560e4e9ec953ca8a5e392b45e54a6f13e4175bb3d1e28b6f6d637cb093711f3789c7ca263613ab2514c643e202af6ad8080235efb87f2274c7203c5b7505418998255830fd16e6b4ba3022e3197684e8763f2ad13b0cbf69c53d24a76a58a32c4ac0c22fe3a7c5163a96de2e80c0b5051ecc77e73aec572fe7f86c590252c0d9e0d2d20b544f322a491ec10480685fc4023bdd66f3b2027d9d9057c72c9bc1e5655db9e8a9c32fd0e119dea534fcd2cb81779c84bfb4f21235c412e212e8a14ec5333cd9a23a168861061601da52c9031c91fb66e2d9981e7de32321159cd3a1949e4040dbaebac168b8836181b5070cc3cfde99246e04556072ccf8f2ac59a46608efa8c4d66eba28061bc7191366c341d9b5a616f72f9704d571d6b4276a84e87f144b11ed3ca8fc05e8b9f83742726f69d81e517b474ff80d06b83d826f9f9d900ee90df5f71ca56dec81f7f8543391d724cdfe3d3e904e26204be93529a62785eb90e347a58fa367557c6e2529851199eafafa755e481c2bac3aeb3841e24c78c407531cd28367d9c76ca8033f5b66b105e282e1ba0b30088fad0103263a66bdd8f0665baa0e13c1d76f6d561e0aa5f5cc95bb29d49be044f92c5dfd65bad1ae5e8da9c1a476bee2734b3f478da0de1393679bcbfc31191709cb832d27c8696cb7cfa9aaff465c298cfaa7d68a7c13ebc1d24a41a00ba44f7d748c1cc2fe380b9c81ec6df3e2a5dc1813d0ea2e50c7740fadd7ad2c444d157144bf7d269e5c7877748a3a4aaa6f1d2a98510aec7725fd6fb2ac57d12d9520ae746ec19c5644df15323fe58a6103a2761040a0926ad0b4d5c4948d8e8c310ba6d3b20d0caa42e076ee21c8c89cc97a6c059658490dbe8239bd726fb713f31f17e9ed8d5db34ddbc0200da69b720f5f0eafe955104ae582687c8776909aa4a3353d71e98dd881bfe103f96995743c53eba92485eb9d79918e13fd25c46f4b386941c8118268ca6724af3c813f0f32bf7279ed130283874895987a01f18b6f2b3b769e00206e73b01fe7b6cdf64650da1b8a33e2f2290447d3aa82ab289dd6b3f0b89669bbf0d9ccd36b967a11812483f5b1715fe74375d5905c36de7f28a7b8be2bfb7239f384044eb2e7ee358e4a64174c978981422f57df594e2259c78e933e403524ac8015653d4a61671939e519812f2a75cd6026227939a1443aead4d09a68bd9944f873bf5d999b0347b6934dd2bfe618d14d83f7868de55060cd723b50202d00dd328dd2ce4baaae17b418dbd90f203000cc1c25fa119c55f5937f16184b3159f5addaf46b76727e92360790252c35c61d1fb0a58ddf4137f9e49b5c9fd4df4d2c12236521715ba3b568d6a1b5d867f1979302b4621f259bca5c3bdef95db12ff64ffc4b50e9b44d8558653797e479dd5b871f7993a1c970d8264ee0881d8d5a1d59e6dc3839062cb93c5ead235e0fb47360e6a6618f946a16f1c61eaf53aed619b8f1d3623a1dda553e0b1a04fe7289121707186be97de3204fa5542f9a79be52ebafe72689044d68b6f11a8ee616c0a0bf6cd737888c0272bd89628e0e4bec74066cc2a466a79426e0c7ede36a52ecea0c6d826d3446c84795cc0492923c0cb72dc6fb6c10c730fbcfea9dd3a22b1977022ffc857aa27cdbadd4c75048d1bd8645ac325839f727b7f835f62658ecc3c4c562b0b90003010ac441ad63d73a41715fff2693aea709d4c35e0861352d285bea955c2394e112b6a888ee8ba266c4a5e46fc2d56fc5c00dd9bc4a8de3b3c279dbd164c8d75f45e729fc9a7409ce07b6dc46007c8c0b5fe5157a3989aca279f897eb75f0365fcb9c0575c7efec70911d3ec80b559e11d37a48b138979d66b15aa001876cdd3b0e65c5694791a2fe93f786c8260021b67329702ac1de637d6be857328292a9342deb3f6ae2d324507f007a8b3f43cd029d8397407e14ff6d3330e9dbfc1eda4527bdcd998618dedc8ce06f10bb3454237c5691fae350291cbe4fe784a554ba3221f8896329de09c6d7998d676c47e6e1bcb5c1c655f77abe9e1eac67266cf97e31118bc9cf5ee4f231bc3785bf4a55034bb79e11146d4af00b8ff55685b379ff07d647feaf288f360a5ae9bc63a8ce42f9c6cf8361feacd36691c2096ad471c4bb538defd495be3ca87054d03dda3b56f17ceeb921c6a9cfeb266682d3e0bdc404438171190e68face8c1bfc0ce74bd9143372a72aa057de08241ff32a2a7a39db30b626ab9649cc5c0156ec5270212ac066cafc002b0b805a1a16005bc8c9928f9a7850b2de6cbe9ac5cf346bbc98d5ee6949ed8e41e2d9c3339620edcfd738198f49b5f0d1c3d586ec22bd3d373bb49b65c8e89d858b68efa3e7877ba4b23843cbfbe62a7ecae76ea9ffceab2e58089bd7e9a4f10ff4c9679705659ff5d3", 0x1000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0xe8) setresuid(r6, r7, r9) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000640)={r8, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000700)=0x200, &(0x7f0000000740)=0x4) listxattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=""/35, 0x23) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000780), &(0x7f00000007c0)=0x4) [ 118.537577] binder_alloc: 7460: binder_alloc_buf, no vma [ 118.543230] binder: 7460:7462 transaction failed 29189/-3, size 0-0 line 2967 [ 118.559015] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 10:20:34 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:20:34 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:20:34 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r3, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000040)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 118.606848] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.613704] binder: send failed reply for transaction 25 to 7460:7462 10:20:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000580)=[{0x48000015, 0x0, 0x0, 0x869e}, {0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 10:20:34 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) [ 118.660243] binder: undelivered TRANSACTION_COMPLETE [ 118.665494] binder: undelivered TRANSACTION_ERROR: 29189 10:20:35 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) [ 118.731549] binder_alloc: 7487: binder_alloc_buf, no vma [ 118.732116] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 118.737161] binder: 7487:7495 transaction failed 29189/-3, size 0-0 line 2967 10:20:35 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) [ 118.793686] audit: type=1326 audit(1528453235.038:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7494 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4559f9 code=0xffff0000 [ 118.831715] IPVS: length: 193 != 8 10:20:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:35 executing program 5: socket$inet6(0xa, 0x1, 0x0) socket(0xa, 0x3, 0x7) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:20:35 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) [ 118.917609] binder: undelivered TRANSACTION_ERROR: 29189 [ 118.923305] binder: send failed reply for transaction 30 to 7487:7495 [ 118.974383] binder: undelivered TRANSACTION_COMPLETE [ 118.979637] binder: undelivered TRANSACTION_ERROR: 29189 [ 119.533058] audit: type=1326 audit(1528453235.777:4): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7494 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4559f9 code=0xffff0000 10:20:35 executing program 4: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r3, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000040)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:20:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) 10:20:35 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r3, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000040)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:20:35 executing program 5: socket$inet6(0xa, 0x1, 0x0) socket(0xa, 0x3, 0x7) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:20:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000002c0)="025cc83d6d345f8f760070") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x400101002, 0x0) signalfd(r1, &(0x7f0000000000), 0x8) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000006c0)=""/246) write$binfmt_elf64(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 10:20:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:35 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x7c, &(0x7f0000000080), 0x7) socketpair(0x8, 0x4, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$ipx(r1, &(0x7f0000000040)={0x4, 0x6, 0x1, "49be29901fa0", 0x7}, 0x10) 10:20:35 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) [ 119.685605] binder_alloc: 7553: binder_alloc_buf, no vma [ 119.689649] binder: BINDER_SET_CONTEXT_MGR already set [ 119.691182] binder: 7553:7554 transaction failed 29189/-3, size 0-0 line 2967 10:20:35 executing program 5: socket$inet6(0xa, 0x1, 0x0) socket(0xa, 0x3, 0x7) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:20:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:35 executing program 6: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000007300)='/dev/qat_adf_ctl\x00', 0x200, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000007340), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000007380)=""/1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth1\x00', &(0x7f0000001140)=ANY=[@ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']}) socketpair(0x3387dfa12ecd2705, 0x80800, 0x1fb, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000040)={0x11, 0xf6, &(0x7f0000000100)="55ef522deb94bc8efcdd84adc12d3338d2b1fe2acd4437c08a93b1f788befdbf446d82d3c12113c3b6061a0dfc3c39d0ccab3df7553ecea319dd764080ed473c23edc5906454205b453a338506b0ec4706ed6758b88ca4638da51675cf8d754e9dce438014a6b63e29e148f726a5d54a0ce8c6b10504014bdf2d66b59084b45a1443c29f5e5103c9469b11444732b36d2eb58c7a096d73ae4afe94b4a9e47753f8ce88fa7ea3cc758d31a3e748866092de2eb78da700cfac78ae6321576b31e16d7d0d90fbba249feb8effe7e40753b84196030cfef1a995ea12e4818fd3709daea6c1a2cc3794b8c9098c4760b38b1ac6ef1a94c1dc"}) recvmmsg(r2, &(0x7f0000007080)=[{{&(0x7f0000000200)=@pppol2tpv3in6, 0x80, &(0x7f0000000800)=[{&(0x7f0000000280)=""/201, 0xc9}, {&(0x7f0000000380)=""/255, 0xff}, {&(0x7f0000000480)=""/35, 0x23}, {&(0x7f00000004c0)=""/70, 0x46}, {&(0x7f0000000540)=""/91, 0x5b}, {&(0x7f00000005c0)=""/114, 0x72}, {&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/244, 0xf4}], 0x8, &(0x7f0000000880)=""/79, 0x4f, 0x9}, 0x7}, {{&(0x7f0000000900)=@vsock, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000980)=""/110, 0x6e}, {&(0x7f0000000a00)=""/93, 0x5d}, {&(0x7f0000000a80)=""/140, 0x8c}, {&(0x7f0000000b40)=""/11, 0xb}], 0x4, &(0x7f0000000bc0)=""/76, 0x4c, 0x9}, 0x7}, {{&(0x7f0000000c40), 0x80, &(0x7f0000000f40)=[{&(0x7f0000000cc0)=""/227, 0xe3}, {&(0x7f0000000dc0)=""/126, 0x7e}, {&(0x7f0000000e40)=""/246, 0xf6}], 0x3, &(0x7f0000000f80)=""/28, 0x1c, 0x8}, 0xe3}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000fc0)=""/70, 0x46}, {&(0x7f0000001040)=""/222, 0xde}, {&(0x7f0000002180)=""/170, 0xaa}, {&(0x7f0000002240)=""/33, 0x21}], 0x5, &(0x7f0000002300)=""/177, 0xb1, 0x4fc75489}, 0x8}, {{&(0x7f00000023c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f0000003680)=[{&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/106, 0x6a}, {&(0x7f00000034c0)=""/240, 0xf0}, {&(0x7f00000035c0)=""/86, 0x56}, {&(0x7f0000003640)=""/52, 0x34}], 0x5, 0x0, 0x0, 0x4}, 0x3bac}, {{&(0x7f0000003700)=@rc, 0x80, &(0x7f0000003840)=[{&(0x7f0000003780)=""/163, 0xa3}], 0x1, 0x0, 0x0, 0xff}, 0x600000}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/5, 0x5}, {&(0x7f00000048c0)=""/18, 0x12}], 0x3, &(0x7f0000004940)=""/191, 0xbf, 0x1bb}, 0x100000001}, {{0x0, 0x0, &(0x7f0000006dc0)=[{&(0x7f0000004a00)=""/4096, 0x1000}, {&(0x7f0000005a00)=""/90, 0x5a}, {&(0x7f0000005a80)=""/121, 0x79}, {&(0x7f0000005b00)=""/158, 0x9e}, {&(0x7f0000005bc0)=""/229, 0xe5}, {&(0x7f0000005cc0)=""/4096, 0x1000}, {&(0x7f0000006cc0)=""/43, 0x2b}, {&(0x7f0000006d00)=""/158, 0x9e}], 0x8, 0x0, 0x0, 0x9b49f9f}, 0x785293a0}, {{&(0x7f0000006e40)=@ax25, 0x80, &(0x7f0000006f80)=[{&(0x7f0000006ec0)=""/152, 0x98}], 0x1, &(0x7f0000006fc0)=""/150, 0x96, 0x7}, 0x9}], 0x9, 0x0, &(0x7f00000072c0)={0x77359400}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000080)={0x18}) r4 = getpgid(0x0) syz_open_procfs(r4, &(0x7f0000007340)='net/ptype\x00') 10:20:35 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:20:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = accept(r0, &(0x7f0000000080)=@ethernet, &(0x7f0000000140)=0x80) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x4, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6gre0\x00'}}) ioctl(r0, 0x8912, &(0x7f0000000240)="1bd45006000000d1240970") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x3a) dup2(r5, r3) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="65dd3f2e050e00ffaac75866b9800000c00f326635000400000f300f01c86526af0f0117ddc7440f20c066350b000000440f22c0f20f1b51db", 0x39}], 0x1, 0x0, &(0x7f0000000580), 0xfffffea) [ 119.727639] binder: 7550:7551 ioctl 40046207 0 returned -16 [ 119.750617] binder: 7550:7551 got transaction to invalid handle [ 119.756811] binder: 7550:7551 transaction failed 29201/-22, size 0-0 line 2852 10:20:36 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r3, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000040)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) dup2(r3, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 119.812094] QAT: Invalid ioctl [ 119.827779] binder: undelivered TRANSACTION_ERROR: 29189 [ 119.833443] binder: send failed reply for transaction 36 to 7553:7554 [ 119.840090] binder: send failed reply for transaction 40 to 7550:7551 [ 119.855119] QAT: Invalid ioctl [ 119.888722] binder: 7576:7577 got transaction to invalid handle [ 119.894914] binder: 7576:7577 transaction failed 29201/-22, size 0-0 line 2852 [ 119.911138] binder: undelivered TRANSACTION_COMPLETE [ 119.916496] binder: undelivered TRANSACTION_ERROR: 29189 [ 119.926353] binder: undelivered TRANSACTION_COMPLETE [ 119.931558] binder: undelivered TRANSACTION_ERROR: 29189 [ 119.964775] binder: undelivered TRANSACTION_ERROR: 29201 [ 119.989819] binder: undelivered TRANSACTION_ERROR: 29201 10:20:36 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0xa, 0x3, 0x7) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:20:36 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:20:36 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f0000000080)=""/200, 0xc8, 0x2163, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x200, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000200)={0x7, 0x4, 0x81, 0x1, 0x4, 0x8}) 10:20:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:36 executing program 6: mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x0) mq_getsetattr(r0, &(0x7f0000000040)={0xffffffffffff6fa3, 0x0, 0x9, 0x3, 0x1f, 0x3e68, 0x0, 0x8000}, &(0x7f0000000080)) 10:20:36 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r3, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000040)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) dup2(r3, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:20:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) 10:20:36 executing program 1: r0 = socket$inet6(0xa, 0x41000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000080)={{0x3b, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e20, 0x5, 'lc\x00', 0xd, 0x2, 0xd}, {@broadcast=0xffffffff, 0x4e24, 0x10000, 0x0, 0x7f, 0xe59}}, 0x44) lseek(r1, 0x5c689bef, 0x0) getdents64(r1, &(0x7f00000001c0)=""/54, 0x36) 10:20:37 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000080)="1f0000000103ff00fd010000000000200a0501000800010003f2511a10df00", 0x1f) recvfrom$unix(r0, &(0x7f00000001c0)=""/215, 0xd7, 0x43, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) fdatasync(r0) 10:20:37 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0xa, 0x3, 0x7) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:20:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) [ 120.770865] binder: 7598:7600 got transaction to invalid handle [ 120.777078] binder: 7598:7600 transaction failed 29201/-22, size 0-0 line 2852 10:20:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={"62726904000000796c6176655f30e700", 0x0}) socket$inet6(0xa, 0xa, 0x10000) pkey_free(0xffffffffffffffff) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$KDDISABIO(r3, 0x4b37) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001e00130300000000000000000700000024fe9d2442b272c5", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 10:20:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3}}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) close(0xffffffffffffffff) close(r1) [ 120.863060] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. 10:20:37 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r3, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000040)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) dup2(r3, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 120.923361] binder: undelivered TRANSACTION_ERROR: 29201 10:20:37 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0xa, 0x3, 0x7) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:20:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) [ 120.997320] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 121.041654] binder: 7629:7630 got transaction to invalid handle [ 121.047844] binder: 7629:7630 transaction failed 29201/-22, size 0-0 line 2852 10:20:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:20:37 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) 10:20:37 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0xa, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:20:37 executing program 4: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)="ebe74faaf0e63b4a3a1e8a683378932f6baada44203ac9ecbbf27ddb3fd3621a872b56e4ab50c62f108e2d66031ac67be766817f79b2dc6abbb362596d52de0a907f319c964859b6f29da330435fea42ad373221b525ddacbc2a5df0f7744872ed3e02f397163132cdbc5d301ec557eb290dee6b7ac780485cf58e35e46090fa79f734f68130df7a4b8563f3d33423f58b90f4cbc4185388594a5fbeb95cd6b5b42d58807ce0f0899f1fda76ba604f6e644573572d053a82140085851508385eb785cea13dd45bf1da8be86682a695d1bd04e9973a") 10:20:37 executing program 1: r0 = socket(0x10, 0x2, 0x0) io_setup(0x0, &(0x7f0000000000)=0x0) r2 = syz_open_dev$midi(&(0x7f00000003c0)='/dev/midi#\x00', 0x1ff, 0x20400) io_cancel(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x100000000, r0, &(0x7f0000000380), 0x0, 0x100000000, 0x0, 0x1, r2}, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x1, 0x0) r5 = geteuid() r6 = getpid() stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in=@broadcast, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000b40)={&(0x7f0000000340)={0x10}, 0xfffffffffffffc6b, &(0x7f0000000b00)={&(0x7f0000000b80)=@bridge_getlink={0x0, 0x12, 0x4, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, r3, 0x860, 0x101}, [@IFLA_AF_SPEC={0x0, 0x1a, [{0x0, 0x7}]}, @IFLA_LINK={0x0, 0x5, 0x100000000}, @IFLA_LINKINFO={0x0, 0x12, [@IFLA_INFO_KIND={0x0, 0x1, "6e6f64657673656c696e7578a6656d302d2f40657468301e73656375726974797472757374656476626f786e657431b35c7073656c696e757800"}, @IFLA_INFO_DATA={0x0, 0x2, "d428cc8329fe4d35e806e532d7e72b9c3aff84ccd015b67d0c357bef0b792c18bd66dde31be9b71f2be5689cef80226ec98a6cda1f1325528bb0d5276c00856f06cc9e0ce7c0035c7a0f353032921749b4954724760c8280dfcb15f8061c18bb93350b99d8f45fa307b3860a1f284bdc2061704252724371a6446bac48eb82b30f091764cad57a363f21aef98f9355b76afc85ed746652a7785b7ccdc79da511c6d10b6003303fb878f5687035d8f36e7b18794f4f08f4"}, @IFLA_INFO_DATA={0x0, 0x2, "ac23b35b1bfeffdcd6705d1520feddc0682fff823aa939a34fe9b29fe1ebfa9dd6639e7dbd5d3f544ba87cd103347c15a921fc47105b663f2b42bbd9ec142e563b8de66d0865049b7e83c227f20c2d9d0a32b9548db0e3429885742c4e661037b4f53d09bf618f0713574b7e7ce993e1d2cebe9b4baf66"}, @IFLA_INFO_SLAVE_KIND={0x0, 0x4, '{.bdev-)\x00'}, @IFLA_INFO_DATA={0x0, 0x2, "88fb5d4d4b16c4419817d3e0b8fcfaadea"}, @IFLA_INFO_SLAVE_KIND={0x0, 0x4, 'vboxnet0@ppp1GPLGPL%*\x00'}]}, @IFLA_IFALIASn={0x0, 0x14}, @IFLA_VF_PORTS={0x0, 0x18, [{0x0, 0x1, [@typed={0x0, 0x3f, @uid=r4}, @nested={0x0, 0x88, [@typed={0x0, 0x95, @str='$eth0security\x00'}]}, @generic="3fc2b887be09fcbc68", @generic="e11011da6dbdb4fb6504a895ba3f686466fde6c3acbf570b1fc21e9a21a6b685fbdfa1d3e489c7723cefa6a7095b1cb43d4a3160d75ce47ff60e4e7021021ef81742254cf087665b7754d91e71cf0633dbf538b84dc3eabcf5c8714f1a0062ce957aa0ad0ab2675cc34c7e7c834078125b1e158a2dae332089bb11a44f55362cc0c624b621d8845d6218d69ccbc33c13523a5f98f75d6affe81427bf5b329271d201ad04203f90c4c1152116a002e0e0c2358ddf22916b4fcfb6a90b0657369b6a53e58be0d026b4650be749f76d0cb6", @nested={0x0, 0x90, [@generic="90e79ac0df934b34c5ac4fcf288541ca753a3d9a70f3a3ff", @generic="6eda400f726f263ee55246549d75ce515fb2699fc41b98eef00a5ceefbce2ef74ed848193bfeab14ac528099d2b5d7bcd6f53c54d94255b0158f34593ee00eb4e6a2424e1f64d8e97cdaef4327a8684583264d07e8166b8e2ef03594c70901b6ab", @typed={0x0, 0x4f, @u64=0x77f5cb3d}, @generic="2ddb6991cd18b44ae7ae02500e632e6a772016dbb0d9db73c982f9dc9c5bbf462064ff572808d77f1c6104c6183c04eacb22fecafac043c49d93dceec2100634ecf93cc42a278f5ee762d81639ed638827d8b7d61ecbf4ee6e2aa5c29b4d33929fe82a055a059e94f1c7d6b0a2d1e527", @generic="936abf287462a0358abf0e0453c92a18e2f80e2aaa10765ec323b0e1813c7860889edd58858a82054a54fcd461ca1ece00f65875b09d6ec0f081897ef044de06f69bb66fbde9fe6e31587765282bae528a22888078a7159e3f3ebb45a258e7ab338c6fdaa5ba7ad8dc717536e65f66430d1715e42f06df2f264f7fe3b619cbe74d9f40caa2517c0467bb5414033a5f4ce227cdfabdf71036b91c38a40a17e36065716feb99d3ae203e", @generic="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", @generic="4e713b21884781c937bfb392691c367df2e8b57050214667f77ecf4e4ba5c3bdfca537816d330f27d4b2d9ff2876a9365b5da71f3006951a7c756a608a886e2257118703c2e6a41dca765096583431290dc17421f1d4f1d96a4a4403814b33ea9726990953d60b0a1d8eb0bbf0b849c5d0f39bc64bf933b0ea193505d38fddda40311f9a99e5f85b35d098df618487684ae9d70330dfbd336d13cabdf577294df2d6363b2e862597343da50713a1fcf609287cdb07291c275e5efe622b158ae48cab3349177e12d8501c1d0a0df0776275", @generic="fc225a16aa70a116b5cd9e996c57f1eabef8c7c70de77d24a88cfa660d3721e9f249ea796314ad71e1a6db0a60bcf3879c92ff781c642366c2c8a28a2d27ca125be6f2cc3c82899852d31ac80e1fae671d12999bb0ef759d7787196a54ffd1916cd2156f5da69cdf0ec962a8b3e9ec908d3731d6a96d66d625ed5a5477e4d0aed0a595ea34394d0970a7571f0bcc44777320ecff345fbca0b51ef2cc71b84460cb51a38b630e1d15b5c59780c94668af52c181ba3d208829c4fb112dca2c8b34ac81a5870933b4540f8a"]}]}, {0x0, 0x1, [@nested={0x0, 0x14, [@generic="f252d6b397faf4790ed69084e08c012f4530011fa863124942866bdcb371d80493b06eb90e7bea526a5de8613c4e1180893eaba4b1bee5d1a900483d19f394f99a3dc967df0d8b8a53196e11f9ecaa1becd695ef622f5098891ff7b59ff420834150f94474dfa36cf40e71"]}]}, {0x0, 0x1, [@generic="16e06db0ff0f54e0b849e7a1b7a5cb0ff1defedd4b6ad57cec4cef18c2baca2af77a2330e644bb4d7880272032a280fa4fa76849d47a3c40c9d99f765219a8ed2191722b4dbfa8c6b30558f5516ecdaae7ccb725a7254907c13c9598b987"]}, {0x0, 0x1, [@generic="074578dbef71a839b293da79783e3d0e458c5efbf2de706698b6e7dbfd2fa78012b1331d693f51304d1a509f70fe59c90c8840b345477361de666a657e78f86f749d0a9e2e218d8362ac9c8ffe1ab1eb36e94ae57956ae0f8d7f9e8d9d8b0e0a673f4b934eac0aed0342e0bd721ea95febc2330dfba8bdd4d9df057186065eb68fb4f3b5d2e3c1c581a094a82e294f23007892e56b58cd74904914ddfd531fe66c658429018bd6b60c8d84c00254"]}, {0x0, 0x1, [@typed={0x0, 0x87, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @nested={0x0, 0x32}, @nested={0x0, 0x34, [@typed={0x0, 0x63, @str='%/)bdevvmnet1lo\x00'}, @generic="543bced7edd091c5613ee71eab4f34801e8a406f3369b52959a7325537d3f4a1258e5fe230ee4339a585a84ad71fdb1d1d0eee07aedcca01f3d0e7be846a957ea6000b87954e0fff00f3af3bd3a94c633ab3df5fbf118bead5ff53699ade359824928fd60fe665ee4eb44f28f30d37c7a1fb80caafbfbf5d624e0058cabd1437ce6351795d7b383e", @typed={0x0, 0x93, @binary="0c3a954f4d66f43325f2f9b08d434ceea94bf29755068120aa5d6f80242021f5f8b59b53df6cfc86b601e7cf542574001453f5339e6ec9d2d283deb9cc910ee64856df49cb8323ee6349d6edd2fbab8a70608088461ce2cc34e39e7eb112125a9de97b8d582910fecc89d5f8bace84048247ed42c25ee4ad294cec7e38544a22b7a51a786619e4b32d9d2e325e6af516ec20b6a5411c62fc802f4d17d20bd31a2fa86e6a59d827294426c64466f2892a4778b66a7746ea90ab"}, @generic="aaf3c0b44e495468", @typed={0x0, 0x5b, @uid=r5}, @typed={0x0, 0x47, @pid=r6}, @generic="292ec866301c7d5300f773a820265813492afd87723e27e80181bbb8afab8658ea245767206edf87b0293f007f9c74b6b8cc73ac1e626e4d97e27a0f37ce5543f2957f3a5c49a6696e069a4ca6c529d37efa9a11c40c4e0fa0b9c2ac1e41f8767f2b3bf17be3c97cff9e0a8e052ab929d1f5aaf5c2ff66a2c6b17d6d32250228da"]}]}, {0x0, 0x1, [@nested={0x0, 0xe, [@generic="5d0bd76d060d52eb6f425e3ef7858f59fdfacf471fe702a56cdadc61b6cf580029608262e734efdea5c2feda4ecb435af8c18e21a729ae284b70c8fc58250c9e0ae1db64842dbdece650538bd063237bca2c9cec12209cbc2e4f4378cbad85df0eb5a7dc700dcc1a3b948e"]}]}, {0x0, 0x1, [@nested={0x0, 0x44, [@generic="b1cb3d7f9f6c8bf2c69d2a7305e7424d398c4207a64f73211929fb08af681df1e428f4891609c8afac7a0826f801b383a8936610e8518c6a717409216651e1b6", @generic="6df16175251c0a931a898d7224eaa2ea39b55a0c032777d4d6c45826fcdab26019173ee55cda7d5ee8f2e0c479523e76b8aa442454781f1e051a9def738ca9eeb45bc960c97b08a9fa706e64052bbf1839f0334ebe3d78d4f3bc0f39bac467d33e0cd8858d9c689819f16be05e396beb47fe26374af5e4a6504b7dc6cc78beaa64bf2cc4e23ede70eddc0d4da7fc83db57f50f882c630aeb6350b792e5a01ed78f53ab10be8d8b819a3c6d893a67a38e9b82539f5775cf8b909eaafa4d99fe83df3d2c48c3ebc52ab165ed58f412bc9e57af47dbf64c9fc553b82bae86", @generic="6c4f1f06de9860138bb45663259bd8e8a9d7605e30", @generic="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", @typed={0x0, 0x2c}, @typed={0x0, 0x5e, @u32=0x9}, @generic="815f621b145b3037af8a98d6b671f14cd812426e59e293656d27a25a510b2a7c74606921090133f3500378c73fbefeebd12648f1256cc2a78aa74e210529c121fc252e86f9654a44fca32b1aa56949d1a939cbb55a2e027264e1e1d3cb9eb482efd833f283fa7ec444e4bf01b5"]}]}, {0x0, 0x1, [@nested={0x0, 0x67, [@typed={0x0, 0x41, @ipv4=@multicast1=0xe0000001}, @typed={0x0, 0x73, @binary="425e56b5d6bca074f9930cf22a43a863d16402a9395fb51074d24c87d84a0da8a574bd245d448dc7a097ba2081439d9b4816017135677fc1a1161c76697e5efd43d22c1c5afe948a9d1eb8e79b272af5932510c2d8d7982752abe8ef9986070fc6d50d5e0ace5086130b6913db1f9b0149aaa06bc6fc46cc4a776ce802bf85e1cb6a9d51aaf5977f"}, @typed={0x0, 0x3b, @uid=r7}, @typed={0x0, 0x96, @fd=r0}, @typed={0x0, 0x62, @binary="0038c3dc4a0a45dc096b1f3b693e2e1af5db04a9aa7414d22b600e3dac3fdc8a3cd50c92be5e15aca9"}, @typed={0x0, 0x39, @binary="cdfd8d244c7a8ae01d2de367d669489e3f4049cf20cbc1d2c5003f7bb16a8f00824ddef87f9db45fb54f399b7de66e5c71cae6761275f16291fe2511460ba603dadf34a314092fc4e87921d44a32d44999d91e8aa671a3f063b22827018fb88db9b4527479a54362cf2521f27daccdeefca2a1ea2ddae5f4ab0a92880f879d8f1b99fef483996dff817f53ea856b8897fa9fefa0e7ae6f2bf530155806b1ff338bb2340d58ad4895ea2f22b71915fe02c94517c6be43aa13ca41f8004eb307ea3e437ac5e2a811f2d1eb31befa5ddacb9b8ef76e83baf54011fedd"}, @typed={0x0, 0x4f, @fd=r0}]}, @nested={0x0, 0x88, [@generic="40bb3e745bca7561f346fdde9670581b03646a6489fc0915558a4557502d67ae2d4dad7d3020a6aaa79568336f65883bf58d8e695d6c4f6181da2cb0fda77c65f1e5e8f85b597b5340e7304005aa959cd1407863c672e0f8dde5bf28f2b31226260f88f408cd39228a9c0ed7d5f4166c3a412763e6fdb40133a83d8b67ee0cea32b62b468949ff2d7abf0a24a4d35f425f276ef2e6d64d3aebe1eb9f3955f9b405f76cba865aca61932be045bb57e37c6788452a4c7673b3f44fc700a5c11ab4cef9c3650b54ae81b55ce72b1f2344ab505b6263fb666822f6e2d818ac171a12ed3554f9e16b7238cdc132e729a5", @generic="97c65f54ec1e79ae6f3b7ee3055a9d0b4d364ccd5c72f4fc97600868d5c90e6d21f040714cd53cd59b18c1efe0a42977481fdb793ca09cc2c679379340a61983b80f03855a21df6e84df73794b6ff45a30f7cc9777622b652b84a1c4d0d3dd742f9128d5e6955060d3a58e55b2541773d05c4dc980765f14b9c18c2680d85fa0b0efa521ec350f8cd23b4e181fc43637fc14ec642679656bc2a9c0d946e78b88e716e196c3e47d14e81b7bee8a4972b75089fff10be7944592e5c67e6df90ebd34bb5533a82e149467747a1fd9e28aed0b78a8dc759d7543acdc81b4f7369359115c938b2d462b2d824ae4cec00e7185364f0d6d", @typed={0x0, 0x90, @pid=r8}, @typed={0x0, 0x77, @u64=0x62d3}, @typed={0x0, 0x36, @uid=r9}, @generic="81694d24efdd86570469a687d2893bf0c7aafa9bf99c9215c58aae2ad379f92001630747704bfb1ed1d08b71b33a15518005922d21d042b0753bbf1499b2a3edf34a4889975db13cffadce587bde34e54ad396cce95a1111ba8d2f05ac4e2e20c6c897dca4f506aab4a15ab9c4c5657159b387fa409872a76856acd97071e0723a111625644429212684261ab22fb35071d104c57904bbd77a91941f1d4528c4236dcab9b0a33e4a6e35451ccb156f5fa69176d01e8138446fc1e2", @generic="58e5dc8a5bc1ea38a7eeb72d026d98f32836e3bac7da599533ab4aac5f11951915bb314397e823849b13846b94aecd3c8f1031031e3973f2ae48894bcbe0ac0eb9ee762971c9e9f125b94e922bece4b47b3021ea8c4306c8f5336e1f7c93bc26831d5c39e3c85c2b84bbbb22d2a3c199d94d0d20ddb6b7accade232b6d96bfea86e3aef3", @typed={0x0, 0x40, @ipv6=@local={0xfe, 0x80, [], 0xaa}}, @typed={0x0, 0x7f}]}, @generic="ae22eb6f58926391a45160a6b2bebc51b47be7a7056084687ff62395b5eabb92fce9bcdeec26c53937773b3320080299b558d06277f809d37ed47b9b9aea0f7d7dd1e830197e3b91e15852f135d00deb4ab0587d578becf1566a326c7c18e002d3851ff7e293c841118a574d6a506165eea9c1076faa06b49579019fb9be22f21942cb4f0c6c3e5bb21943ba1d46506f496360572b5098febaec66f582ba45e56c85cf7962e650736340bfdf25f208a2451cbc559e4c33d6f3", @typed={0x0, 0x6f, @u32=0xc148}, @typed={0x0, 0x3b}, @nested={0x0, 0x13, [@typed={0x0, 0x69, @u32=0xfff}, @generic="eba20c02d3c27f03885fac262a21c79c456b45747f86ec75faaa06240bc22aa9cfdc8b80581d8768f52479572f008a7a2cb7dc5317832f18505ba33950819548f0ff0d12027bea00bc6875ae73364fccd2acf08cffa159f9d4aa45d22ca2d417781ff4c75067b41a738f4c4b6f87589d83fe2eb1134734224c9296a5f7c5ec31427e515c860d1a377b066fa9683630bedb30d3a000c0e66cb4d328db19a01b52e9717264ea4791c8112816d644ae63d8626e1592b72e1908"]}, @generic="6df03283c19729a58bfdfca097e31e94e32522282aa94aee7ecf777e3fd7f4228e217bca9ca44b6aa6a385eabbca0b2306543e8c514205ad2e40ea9a550cb9c8dc7869b033059894866cd68cb8fa13a3fd47c1178bc7a590822c448c68f5ae19fbb9550dab51c19c665e0bcaf23df0dd75438856e7d052fae8ba3ce5e4947ae0347902a44c140505e973f53ae7c51a3ac765be18543377e2bb05fc09af839513fbedbe638656c5c1295585be7ea8f44c627603e875b231cd17b2c0bf477d05349eac163a165ad5b2a998ba4c95a7b4118cc98d7bd6ecd47a3a1865f940fcb43ee6e59b", @nested={0x0, 0x3a, [@typed={0x0, 0x60}]}, @typed={0x0, 0x90, @u64=0xffffffffffffffff}]}, {0x0, 0x1, [@typed={0x0, 0x63, @str='cgroup\x00'}, @generic="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", @typed={0x0, 0x4b, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @typed={0x0, 0x79, @u64=0x6}]}]}, @IFLA_MASTER={0x0, 0xa, 0x4a23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 10:20:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:37 executing program 6: futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f00000000c0), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {r0, r1/1000+30000}}) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000000, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000040)) modify_ldt$write(0x1, &(0x7f00000001c0)={0x13a0, 0x20001000, 0xffffffff, 0x8, 0x3ff, 0x100, 0x8, 0x47, 0x7, 0x1}, 0x10) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000080)={0x5d, 0xfff}) 10:20:37 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r3, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000040)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r3, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 121.178352] device bridge_slave_1 left promiscuous mode [ 121.183919] binder: undelivered TRANSACTION_ERROR: 29201 [ 121.184635] bridge0: port 2(bridge_slave_1) entered disabled state 10:20:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:20:37 executing program 1: r0 = mq_open(&(0x7f00000deffd)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x2}) r1 = socket$kcm(0x29, 0x7, 0x0) poll(&(0x7f0000000600)=[{r0, 0x8000}, {r1, 0x2020}, {r1, 0x41}], 0x3, 0x1000) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)) ioctl$TCXONC(r4, 0x540a, 0x1) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x4100, 0x0) unshare(0x400) getsockname(r1, &(0x7f0000000640)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, &(0x7f0000000000)=0x80) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x100, 0x9}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000008c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="560000008913488669c767b81958447ddcc712afeea04fcf179bb22d50450519d01f9f75fcfc9071c08cfe30996480ed675a187f0552df166cbba78a924576b55e00b9ebc73ec39b0575d8d6a7270000866f6f817d1e46b09800ed0f00000000000000000000dbd35f74c2457b7856644e454f6518c778e074589279b85b4566554e7626d519f31cff254fe0fd187af7ac56f29ea4cda7db4e4ba4464a45eed29b73505fbb27d448b9d88cebeee45879"], &(0x7f0000000380)=0x2) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000980)={r7, 0x1f, 0x8, 0x4, 0x8, 0x1, 0xf, 0x9, {r8, @in6={{0xa, 0x4e23, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0x80000000}}, 0x3, 0x3, 0xbdf, 0x80, 0x9db}}, &(0x7f0000000480)=0xb0) r9 = mq_open(&(0x7f0000000040)='-$\x00', 0x800, 0xc9, &(0x7f0000000080)={0x1, 0x8001, 0x1, 0x0, 0xae, 0x5, 0xffffffff, 0x3}) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rtc\x00', 0x40000, 0x0) ioctl$sock_ifreq(r6, 0x8994, &(0x7f00000001c0)={'bond_slave_0\x00', @ifru_mtu=0x1}) r11 = socket$inet6(0xa, 0x8000000000000005, 0x0) ioctl(r11, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") getpgrp(0xffffffffffffffff) fcntl$getownex(r11, 0x10, &(0x7f0000000340)={0x0, 0x0}) r13 = syz_open_procfs(r12, &(0x7f0000000300)='attr/current\x00') pwritev(r13, &(0x7f0000001540)=[{&(0x7f0000000240)="b1", 0x1}], 0x1, 0x0) ioctl$PIO_UNIMAPCLR(r10, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0xbb4}) mq_timedsend(r0, &(0x7f0000000840), 0x0, 0x0, &(0x7f0000000880)={0x77359400}) sendto$inet(r5, &(0x7f0000000500)="80968edea45613ff2fe4d22b69ff608dc4fcc4942a64d38497841986519ca984eaec35afb7e04b951a56cdc66601c548172282df58fcf869a3441f59d2e056f697e331dad62f2fd0f38c094530fd2ec2bc49961bc8f79f8dade4d22b56244f3bd50b7ff7b71b7b7ebc90ac48827f057f1bdf77ae958915901e5c24250409036446574795db678cb11919bdbcd70f8571cfbb137aadce1089f68d10f7abdfe190785c0fd83fb6e847a3198c9b53a66261a341959b586c69438af8c4f6cf3b907a4edd74b7eb06bd84da2aa1ffcb309aab58d70f1eefce4ddeabbf99893ac5da2eda707b4f", 0xe4, 0x0, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000280)=r5) mq_timedreceive(r9, &(0x7f00000007c0)=""/131, 0x10c, 0x20200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f0000000700)={0x9, 0x7fffffff, 0x3, 'queue0\x00', 0xdea}) setsockopt$IP_VS_SO_SET_DEL(r10, 0x0, 0x484, &(0x7f0000000100)={0x67, @multicast2=0xe0000002, 0x4e24, 0x3, 'ovf\x00', 0x1, 0x6800000000000000, 0x56}, 0x2c) 10:20:37 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0xa, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:20:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x7fd, 0x413fff) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000b00)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000e40)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000e80)={@loopback, @loopback, 0x0}, &(0x7f0000000ec0)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000f40)=0x14, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001240)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001280)={0x0, @empty, @dev}, &(0x7f00000012c0)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001300)={'gretap0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001400)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000001500)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @loopback, @local}, &(0x7f0000000040)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000015c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001600)={'dummy0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000001640)={@multicast2, @loopback, 0x0}, &(0x7f0000001680)=0xc) accept$packet(0xffffffffffffffff, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000032c0)={0x0, @rand_addr, @dev}, &(0x7f0000003300)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000003340)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003380)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000003480)=0xe8) accept4$packet(0xffffffffffffff9c, &(0x7f0000003b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000003bc0)=0x14, 0x80800) accept4$packet(0xffffffffffffff9c, &(0x7f0000003c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000003c40)=0x14, 0x800) accept$packet(0xffffffffffffff9c, &(0x7f0000003c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000003cc0)=0x14) accept$packet(0xffffffffffffffff, &(0x7f0000004040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004080)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000004940)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x21002000}, 0xc, &(0x7f0000004900)={&(0x7f00000040c0)=ANY=[@ANYBLOB="14080000", @ANYRES16=r2, @ANYBLOB="080229bd7000fddbdf250300000008000100", @ANYRES32=r3, @ANYBLOB="c00002003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r4, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000037000000000000000000000000000000c7fdbfebc338e6a803000000080004000107000008000600", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="80000200400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400a490000008000600", @ANYRES32=r7, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="3401020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040000000100080007000000000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b7570000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004008100000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000100010008000100", @ANYRES32=r11, @ANYBLOB="2801020040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f6164636173740000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000600000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004007c0a000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000800000008000100", @ANYRES32=r13, @ANYBLOB="1402020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r14, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000200000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000900000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000300000064000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000034000400080077070200000001009005e6050000d508011704000000000003050008000008000007ffff0000e7d70986ffffffff40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400ff07000008000600", @ANYRES32=r16, @ANYBLOB="40000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000008000100", @ANYRES32=r17, @ANYBLOB="f000020038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000104000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r18, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r19, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r20, @ANYBLOB="08000100", @ANYRES32=r21, @ANYBLOB="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"], 0x814}, 0x1, 0x0, 0x0, 0x44000}, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0xfffffffffffffe4a) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) r22 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r22, 0x1000000000016) [ 121.275776] device bridge_slave_0 left promiscuous mode [ 121.281413] bridge0: port 1(bridge_slave_0) entered disabled state 10:20:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:20:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x9, 0x0, 0x81, 0x6, 0x1, 0x7fff, 0x0, 0x79, 0x1, 0x7fffffff}, 0xb) 10:20:37 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0xa, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:20:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) [ 121.506536] team0 (unregistering): Port device team_slave_1 removed [ 121.520573] IPVS: ftp: loaded support on port[0] = 21 [ 121.545768] team0 (unregistering): Port device team_slave_0 removed 10:20:37 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0xa, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) [ 121.565638] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 121.585403] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 121.633101] bond0 (unregistering): Released all slaves [ 121.656740] binder: 7666:7667 transaction failed 29189/-22, size 24-8 line 2852 [ 121.677802] binder: undelivered TRANSACTION_ERROR: 29189 [ 121.684492] binder: 7666:7667 got transaction to invalid handle [ 121.690690] binder: 7666:7667 transaction failed 29201/-22, size 0-0 line 2852 [ 121.754827] binder: undelivered TRANSACTION_ERROR: 29201 [ 122.425553] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.432063] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.439676] device bridge_slave_0 entered promiscuous mode [ 122.481855] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.488424] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.497668] device bridge_slave_1 entered promiscuous mode [ 122.551762] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 122.588801] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 122.699270] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 122.740703] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 122.911606] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 122.918718] team0: Port device team_slave_0 added [ 122.945840] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 122.952958] team0: Port device team_slave_1 added [ 122.986922] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 122.993866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.009259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.041634] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 123.048620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.057834] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.087508] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 123.094727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.103419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.142947] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 123.150305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.160644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.388262] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.394652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.401296] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.407667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.414884] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 123.936143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.265645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.348910] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 124.432369] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 124.438560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.446223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.523023] 8021q: adding VLAN 0 to HW filter on device team0 10:20:42 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) ptrace$peekuser(0x3, r1, 0x4) r2 = shmget(0x1, 0x4000, 0x101, &(0x7f0000ffb000/0x4000)=nil) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x4000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000040)) 10:20:42 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0xa, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:20:42 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:20:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:42 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x80000) linkat(r1, &(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x1000) unshare(0x10030100) setns(r0, 0x2000000) 10:20:42 executing program 6: socketpair(0x5, 0x80005, 0xd9a, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000140)=@rc={0x1f, {0x1, 0x1ff, 0xffffffffffff7fff, 0x5, 0x2, 0xfffffffffffffff8}, 0x18000000000000}, 0x80, &(0x7f0000001780)=[{&(0x7f00000001c0)="293ef676fb4a1ce61df934c72c12b5121c490893b65bffa28324e31412c8b322f27e55b8aafcc55107976477b9aa58ea4b1ffd2b3d8cf28e70179ced02e29b64c70d511856947acf26b00610127d36b639d5ded9cb57ee0256477fc0c4c3ebb164cad3b00eb8fc672eae0ab371e77c773734347dc69db4c88655edef63906bf0735fef6d104036aa30a3a78865b445075a8469390c0342f4ca6fc8930c0dfdd42c663a60d428ff677c5788ddd2870207fc6539469c9879dbfdf5e47b4e97c549f50095d1d69f6803181ec480a235a50cfefc25245b7929", 0xd7}, {&(0x7f00000003c0)="500e5bef7239a45a5114a0cda0f2c24aad7e8b4c374acdf46d1d44f6e9921aa75d745e37660acf6025ac537f60f07e136486f024fb10d1eff5f5042980fba5b237de8da3f8c06713722abb0aa1eb9573e5ef2bf985c830b7d5251896e9e3f3d9deb2f6885aaf6f2ae21305d2b7c53d6ebb1e40e2803ce290f805bd6c92ab5361182c781060996ed801dfa097da46ebb7645d89763f1900672cfa79ab2a08d480d0fa35facd88f0738961e0dd0166274e23f1ea13299ccf7305bdee24f32caa6822b137ac9ffc5b305d07812f5e4dbe49031febfa8b5ef117241942e474b82d8c827d122e7f2077becf7e87904cf4e215c8281d2ca0f11b33", 0xf8}, {&(0x7f00000004c0)="e41365a973a7aeed18f707ed393b6f6e6c91fcdb95a8d340ecbbecd8cc43b4923c6ecb3ac1ac65d254fda5b44efa875c675388c6eab1853f345d6947f4c3962ee47d1678f9b7262f4b62b613b67695caa1847455a55b7db45e6d3e97b8e9527db0dd83e801b86452cb1029e29482f9cb44ac1d93277dcf77b16e1744abb58a94beec06db784591aa461e80576521866e01078979c94d95df598ac672b6b7e09596fb967dca0f9b796f5229620b7ebde5a475707b10", 0xb5}, {&(0x7f0000000580)="48b3e053b8d40f71a59f6ccf8fd63eea10f3ccae8d64ddc51d13829fc3535b6f32c4d0e25536310f37d2d81d60a305c9c4e3afe53cc2bcead427fae0dce6dc9635effaabf757abf34d452544157a3803b88bad9890657b22e8c5254a0fda164f3653cd3c0e48bea4a87b70d3f0a50470664cf9b8c104327d1566656d32b6183443a4dbffacb0b434cef9ffcd63c4df96008ecb22b23df558680483e51991187ba7d28007c311b29bb9261bae004df569d8a3d0a6e2f209fef24b51cf4532af36f09f035af7d602a03ec22e3f373a84f22eae1778e6a5d062dd141fdd85eeddcc82ce412f52", 0xe5}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="85ea9e6a938e225a329338131cad0e81cfa27a7ae356c806f4aea7a832183f3f2dd71204eb99e18e157f3b147380d3031e6bc077aa1b87bd2739c00d8349a5058c5b000840db5a6acd0c1b0077823ffbfbf82e423f298ec784b55a14fe5aedaa18198e9390e3fc72707601f4b2ba7028ba1ece812995e9f896a32a3924456248f2cc2988b8cee48c0b234634dab83d3f37b5134a95ca993e755283c27aa6bad3e812cd427e903c546511c0f43ba637bd58b52e40890208249d72347373e91a779a939cd1a9f9cfa625e8bc28d78c4758514e0637ade1b8bf5228ccb42d76", 0xde}], 0x6, &(0x7f0000001b40)=ANY=[], 0x0, 0x1}, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@ipv4_getroute={0x1c, 0x1a, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3100}}, 0x1c}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={r1, r1}) eventfd2(0x8, 0x1) 10:20:42 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r3, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000040)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r3, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:20:42 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) [ 125.981307] binder: 7976:7978 transaction failed 29189/-22, size 24-8 line 2852 10:20:42 executing program 4: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='/\x00') open$dir(&(0x7f0000000280)='./file0\x00', 0x30000, 0x180) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200000, 0x4) symlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='user.syz\x00', &(0x7f0000000180)=""/198, 0xc6) 10:20:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:42 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:20:42 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0xa, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:20:42 executing program 1: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x80, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x9) setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000080)=0x400, 0x4) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000000)={0xfffffffffffffffe, 0x401}) [ 126.029495] binder: undelivered TRANSACTION_ERROR: 29189 [ 126.035379] binder: 7976:7978 got transaction to invalid handle [ 126.041620] binder: 7976:7978 transaction failed 29201/-22, size 0-0 line 2852 10:20:42 executing program 6: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)={0x303, 0x33}, 0x4) setsockopt(r0, 0x400000000114, 0x6, &(0x7f0000000000), 0x1b9) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000000)=0xffff, 0x4) socket$unix(0x1, 0x2, 0x0) 10:20:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) [ 126.268317] binder: undelivered TRANSACTION_ERROR: 29201 10:20:42 executing program 4: r0 = socket$inet6(0xa, 0x1, 0xff) ioctl(r0, 0x8912, &(0x7f0000000140)="295ed277a4200100360070") r1 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = request_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000100)='/dev/dsp\x00', 0xfffffffffffffffa) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)='/dev/dsp\x00') r3 = socket$inet_sctp(0x2, 0x5, 0x84) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x2000, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x4}, 0x68) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400200, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000040)=0x1, 0x4) listen(r1, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000200)={0x5}, 0x1) setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r5, &(0x7f000000cfe4)={0xa, 0x4e20, 0x807}, 0x1c) 10:20:42 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) 10:20:42 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:20:42 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x8004, 0x800000000001a, 0x0, 0xffffffffffffffff}) dup3(r0, r1, 0x0) 10:20:42 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r3, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000040)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r3, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:20:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:42 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)="295ed277a4200100360070") socket(0xa, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:20:42 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x13c}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0xffffffffffff5d2c, 0x8, 0x8205, 0x1, 0x80000000, 0x9, 0x9, 0x9, r1}, &(0x7f0000000240)=0x20) r2 = open(&(0x7f0000000280)='./file0/file0\x00', 0x101800, 0x8) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000002c0)={'syzkaller1\x00', 0x600}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x1ff) mount(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x3000000, &(0x7f0000000140)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0x4) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000600)='team\x00') getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000640)={@dev, @empty, 0x0}, &(0x7f0000000680)=0xc) getsockname$packet(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000700)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'veth0_to_bond\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@rand_addr, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000880)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@remote}}, &(0x7f00000009c0)=0xe8) getsockname$packet(r2, &(0x7f0000000a00)={0x0, 0x0, 0x0}, &(0x7f0000000a40)=0x14) recvmmsg(r2, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000c40)=""/27, 0x1b}], 0x1, &(0x7f0000000cc0)=""/184, 0xb8, 0xfffffffffffffff8}, 0x2}, {{&(0x7f0000000d80)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000e00)=""/153, 0x99}], 0x1, &(0x7f0000000f00)=""/195, 0xc3, 0x1}, 0x7}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000002000)=""/67, 0x43}, {&(0x7f0000002080)=""/229, 0xe5}, {&(0x7f0000002180)=""/145, 0x91}], 0x4, &(0x7f0000002280)=""/40, 0x28, 0xffffffffffffffff}, 0x2}, {{&(0x7f00000022c0)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000003500)=[{&(0x7f0000002340)=""/227, 0xe3}, {&(0x7f0000002440)=""/114, 0x72}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)}], 0x4, &(0x7f0000003540)=""/176, 0xb0, 0x3}, 0xe695}], 0x4, 0x2100, &(0x7f0000003700)={0x0, 0x1c9c380}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000003800)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000003840)={@remote, 0x0}, &(0x7f0000003880)=0x14) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000038c0)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f00000039c0)=0xe8) accept$packet(r2, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000003b00)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003e00)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000003f00)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003f40)={{{@in=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xe8) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000004080)={0x0, @multicast1, @loopback}, &(0x7f00000040c0)=0xc) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000004100)={@empty, 0x0}, &(0x7f0000004140)=0x14) accept4$packet(r0, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000041c0)=0x14, 0x80800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000004200)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000004300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000044c0)={'team0\x00', 0x0}) accept4(r0, &(0x7f0000004880)=@xdp={0x0, 0x0, 0x0}, &(0x7f0000004900)=0x80, 0x80000) accept4$packet(r2, &(0x7f0000004940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004980)=0x14, 0x800) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000049c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000004ac0)=0xe8) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000005280)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80040}, 0xc, &(0x7f0000005240)={&(0x7f0000004b00)={0x73c, r3, 0xc00, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0xb4, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0xf4, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r8}}, {0x8, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r9}, {0xd8, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x34, 0x4, [{0x81, 0xd, 0x3ff}, {0x8000, 0xa5, 0x80000001, 0xec}, {0x8, 0x401, 0x9, 0x80}, {0x3, 0xd5, 0x3, 0xdf3}, {0x30000000000000, 0x2, 0x9, 0x1}, {0x1000, 0x2, 0x0, 0xfff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7d}}}]}}, {{0x8, 0x1, r10}, {0x1e8, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xa25}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r13}}, {0x8, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r16}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r18}, {0x7c, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x7c4c}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r20}, {0x214, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xb3d}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x1}}, {0x8, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r21}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0xc, 0x4, [{0x7, 0x7, 0x1, 0x1d86}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r22}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r24}}}]}}]}, 0x73c}, 0x1}, 0x20000000) symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00') lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r2, &(0x7f00000003c0)='./file0/file0\x00', r25, r26, 0x1400) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', r27}) syz_fuse_mount(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 126.353227] device bridge_slave_1 left promiscuous mode [ 126.358961] bridge0: port 2(bridge_slave_1) entered disabled state 10:20:42 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)="295ed277a4200100360070") socket(0xa, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) [ 126.421292] device bridge_slave_0 left promiscuous mode [ 126.427085] bridge0: port 1(bridge_slave_0) entered disabled state 10:20:42 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)) r0 = getpid() capset(&(0x7f0000581ff8)={0x19980330, r0}, &(0x7f0000000240)) seccomp(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{}]}) 10:20:42 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)="295ed277a4200100360070") socket(0xa, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:20:42 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000006000)=""/4096, 0xd6) r2 = msgget(0x2, 0x0) r3 = dup(r1) getsockname$netrom(r3, &(0x7f0000000540), &(0x7f0000000580)=0x10) r4 = open(&(0x7f0000000340)='./file0\x00', 0x200000, 0x1) mkdir(&(0x7f0000000680)='./file0\x00', 0x130) sendmsg$nl_crypto(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x5000040}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=@get={0x100, 0x13, 0x400, 0x70bd25, 0x25dfdbfb, {{'cbcmac(aes-fixed-time)\x00'}, [], [], 0x2400, 0x2000}, [{0x8, 0x1, 0x3}, {0x8, 0x1, 0xb9be}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x5}]}, 0x100}, 0x1, 0x0, 0x0, 0x800}, 0x4000) msgrcv(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x102, 0x1, 0x3000) read(r3, &(0x7f00000005c0)=""/142, 0x8e) pselect6(0x40, &(0x7f00000001c0)={0x6, 0x100000000, 0x8, 0x800, 0xffff, 0xffffffff00000001, 0x5aba, 0xffffffff7fffffff}, &(0x7f0000000200)={0x328, 0x7ff, 0x6a, 0x2, 0x100000000, 0xa80, 0x100, 0x1}, &(0x7f0000000240)={0x7c, 0xffff, 0x4, 0x6, 0xa8, 0x7, 0x5, 0xfffffffffffffffa}, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={&(0x7f00000002c0)={0xfff}, 0x8}) [ 126.588756] team0 (unregistering): Port device team_slave_1 removed [ 126.601364] team0 (unregistering): Port device team_slave_0 removed [ 126.637024] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 126.668159] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 126.709947] bond0 (unregistering): Released all slaves [ 126.735217] binder: 8030:8031 transaction failed 29189/-22, size 24-8 line 2852 [ 126.751840] binder: undelivered TRANSACTION_ERROR: 29189 [ 126.759165] binder: 8030:8031 got transaction to invalid handle [ 126.765521] binder: 8030:8031 transaction failed 29201/-22, size 0-0 line 2852 [ 126.787703] IPVS: ftp: loaded support on port[0] = 21 [ 126.855665] binder: undelivered TRANSACTION_ERROR: 29201 [ 127.431978] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.438422] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.446988] device bridge_slave_0 entered promiscuous mode [ 127.485914] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.492342] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.500388] device bridge_slave_1 entered promiscuous mode [ 127.540427] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 127.578366] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 127.690248] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 127.730650] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 127.895302] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 127.902823] team0: Port device team_slave_0 added [ 127.940543] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 127.947935] team0: Port device team_slave_1 added [ 127.982201] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.021469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.064307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.092145] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 128.099225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.107737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.327604] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.333994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.340642] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.347005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.354312] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 129.120167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.177763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.261137] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 129.342994] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 129.349221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.356772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.436826] 8021q: adding VLAN 0 to HW filter on device team0 10:20:47 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x28000, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 10:20:47 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)) socket(0xa, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:20:47 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000006000)=""/4096, 0xd6) r2 = msgget(0x2, 0x0) r3 = dup(r1) getsockname$netrom(r3, &(0x7f0000000540), &(0x7f0000000580)=0x10) r4 = open(&(0x7f0000000340)='./file0\x00', 0x200000, 0x1) mkdir(&(0x7f0000000680)='./file0\x00', 0x130) sendmsg$nl_crypto(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x5000040}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=@get={0x100, 0x13, 0x400, 0x70bd25, 0x25dfdbfb, {{'cbcmac(aes-fixed-time)\x00'}, [], [], 0x2400, 0x2000}, [{0x8, 0x1, 0x3}, {0x8, 0x1, 0xb9be}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x5}]}, 0x100}, 0x1, 0x0, 0x0, 0x800}, 0x4000) msgrcv(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x102, 0x1, 0x3000) read(r3, &(0x7f00000005c0)=""/142, 0x8e) pselect6(0x40, &(0x7f00000001c0)={0x6, 0x100000000, 0x8, 0x800, 0xffff, 0xffffffff00000001, 0x5aba, 0xffffffff7fffffff}, &(0x7f0000000200)={0x328, 0x7ff, 0x6a, 0x2, 0x100000000, 0xa80, 0x100, 0x1}, &(0x7f0000000240)={0x7c, 0xffff, 0x4, 0x6, 0xa8, 0x7, 0x5, 0xfffffffffffffffa}, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={&(0x7f00000002c0)={0xfff}, 0x8}) 10:20:47 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(0xffffffffffffffff, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(0xffffffffffffffff, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:20:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) 10:20:47 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r3, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000040)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r3, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:20:47 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x13c}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0xffffffffffff5d2c, 0x8, 0x8205, 0x1, 0x80000000, 0x9, 0x9, 0x9, r1}, &(0x7f0000000240)=0x20) r2 = open(&(0x7f0000000280)='./file0/file0\x00', 0x101800, 0x8) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000002c0)={'syzkaller1\x00', 0x600}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x1ff) mount(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x3000000, &(0x7f0000000140)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0x4) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000600)='team\x00') getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000640)={@dev, @empty, 0x0}, &(0x7f0000000680)=0xc) getsockname$packet(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000700)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'veth0_to_bond\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@rand_addr, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000880)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@remote}}, &(0x7f00000009c0)=0xe8) getsockname$packet(r2, &(0x7f0000000a00)={0x0, 0x0, 0x0}, &(0x7f0000000a40)=0x14) recvmmsg(r2, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000c40)=""/27, 0x1b}], 0x1, &(0x7f0000000cc0)=""/184, 0xb8, 0xfffffffffffffff8}, 0x2}, {{&(0x7f0000000d80)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000e00)=""/153, 0x99}], 0x1, &(0x7f0000000f00)=""/195, 0xc3, 0x1}, 0x7}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000002000)=""/67, 0x43}, {&(0x7f0000002080)=""/229, 0xe5}, {&(0x7f0000002180)=""/145, 0x91}], 0x4, &(0x7f0000002280)=""/40, 0x28, 0xffffffffffffffff}, 0x2}, {{&(0x7f00000022c0)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000003500)=[{&(0x7f0000002340)=""/227, 0xe3}, {&(0x7f0000002440)=""/114, 0x72}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)}], 0x4, &(0x7f0000003540)=""/176, 0xb0, 0x3}, 0xe695}], 0x4, 0x2100, &(0x7f0000003700)={0x0, 0x1c9c380}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000003800)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000003840)={@remote, 0x0}, &(0x7f0000003880)=0x14) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000038c0)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f00000039c0)=0xe8) accept$packet(r2, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000003b00)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003e00)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000003f00)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003f40)={{{@in=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xe8) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000004080)={0x0, @multicast1, @loopback}, &(0x7f00000040c0)=0xc) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000004100)={@empty, 0x0}, &(0x7f0000004140)=0x14) accept4$packet(r0, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000041c0)=0x14, 0x80800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000004200)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000004300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000044c0)={'team0\x00', 0x0}) accept4(r0, &(0x7f0000004880)=@xdp={0x0, 0x0, 0x0}, &(0x7f0000004900)=0x80, 0x80000) accept4$packet(r2, &(0x7f0000004940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004980)=0x14, 0x800) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000049c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000004ac0)=0xe8) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000005280)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80040}, 0xc, &(0x7f0000005240)={&(0x7f0000004b00)={0x73c, r3, 0xc00, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0xb4, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0xf4, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r8}}, {0x8, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r9}, {0xd8, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x34, 0x4, [{0x81, 0xd, 0x3ff}, {0x8000, 0xa5, 0x80000001, 0xec}, {0x8, 0x401, 0x9, 0x80}, {0x3, 0xd5, 0x3, 0xdf3}, {0x30000000000000, 0x2, 0x9, 0x1}, {0x1000, 0x2, 0x0, 0xfff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7d}}}]}}, {{0x8, 0x1, r10}, {0x1e8, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xa25}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r13}}, {0x8, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r16}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r18}, {0x7c, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x7c4c}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r20}, {0x214, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xb3d}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x1}}, {0x8, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r21}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0xc, 0x4, [{0x7, 0x7, 0x1, 0x1d86}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r22}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r24}}}]}}]}, 0x73c}, 0x1}, 0x20000000) symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00') lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r2, &(0x7f00000003c0)='./file0/file0\x00', r25, r26, 0x1400) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', r27}) syz_fuse_mount(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 10:20:47 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)) socket(0xa, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:20:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a77276") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) [ 130.891247] binder: release 8334:8336 transaction 57 out, still active [ 130.898074] binder: unexpected work type, 4, not freed [ 130.903413] binder: undelivered TRANSACTION_COMPLETE [ 130.913523] binder: 8334:8336 transaction failed 29189/-22, size 0-0 line 2852 10:20:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r1 = socket$kcm(0x29, 0x200000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="0042fc2f07d82c99240970") r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/148, 0x94}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f00000006c0)}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 10:20:47 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:20:47 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x13c}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0xffffffffffff5d2c, 0x8, 0x8205, 0x1, 0x80000000, 0x9, 0x9, 0x9, r1}, &(0x7f0000000240)=0x20) r2 = open(&(0x7f0000000280)='./file0/file0\x00', 0x101800, 0x8) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000002c0)={'syzkaller1\x00', 0x600}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x1ff) mount(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x3000000, &(0x7f0000000140)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0x4) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000600)='team\x00') getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000640)={@dev, @empty, 0x0}, &(0x7f0000000680)=0xc) getsockname$packet(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000700)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'veth0_to_bond\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@rand_addr, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000880)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@remote}}, &(0x7f00000009c0)=0xe8) getsockname$packet(r2, &(0x7f0000000a00)={0x0, 0x0, 0x0}, &(0x7f0000000a40)=0x14) recvmmsg(r2, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000c40)=""/27, 0x1b}], 0x1, &(0x7f0000000cc0)=""/184, 0xb8, 0xfffffffffffffff8}, 0x2}, {{&(0x7f0000000d80)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000e00)=""/153, 0x99}], 0x1, &(0x7f0000000f00)=""/195, 0xc3, 0x1}, 0x7}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000002000)=""/67, 0x43}, {&(0x7f0000002080)=""/229, 0xe5}, {&(0x7f0000002180)=""/145, 0x91}], 0x4, &(0x7f0000002280)=""/40, 0x28, 0xffffffffffffffff}, 0x2}, {{&(0x7f00000022c0)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000003500)=[{&(0x7f0000002340)=""/227, 0xe3}, {&(0x7f0000002440)=""/114, 0x72}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)}], 0x4, &(0x7f0000003540)=""/176, 0xb0, 0x3}, 0xe695}], 0x4, 0x2100, &(0x7f0000003700)={0x0, 0x1c9c380}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000003800)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000003840)={@remote, 0x0}, &(0x7f0000003880)=0x14) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000038c0)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f00000039c0)=0xe8) accept$packet(r2, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000003b00)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003e00)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000003f00)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003f40)={{{@in=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xe8) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000004080)={0x0, @multicast1, @loopback}, &(0x7f00000040c0)=0xc) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000004100)={@empty, 0x0}, &(0x7f0000004140)=0x14) accept4$packet(r0, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000041c0)=0x14, 0x80800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000004200)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000004300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000044c0)={'team0\x00', 0x0}) accept4(r0, &(0x7f0000004880)=@xdp={0x0, 0x0, 0x0}, &(0x7f0000004900)=0x80, 0x80000) accept4$packet(r2, &(0x7f0000004940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004980)=0x14, 0x800) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000049c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000004ac0)=0xe8) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000005280)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80040}, 0xc, &(0x7f0000005240)={&(0x7f0000004b00)={0x73c, r3, 0xc00, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0xb4, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0xf4, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r8}}, {0x8, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r9}, {0xd8, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x34, 0x4, [{0x81, 0xd, 0x3ff}, {0x8000, 0xa5, 0x80000001, 0xec}, {0x8, 0x401, 0x9, 0x80}, {0x3, 0xd5, 0x3, 0xdf3}, {0x30000000000000, 0x2, 0x9, 0x1}, {0x1000, 0x2, 0x0, 0xfff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7d}}}]}}, {{0x8, 0x1, r10}, {0x1e8, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xa25}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r13}}, {0x8, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r16}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r18}, {0x7c, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x7c4c}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r20}, {0x214, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xb3d}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x1}}, {0x8, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r21}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0xc, 0x4, [{0x7, 0x7, 0x1, 0x1d86}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r22}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r24}}}]}}]}, 0x73c}, 0x1}, 0x20000000) symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00') lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r2, &(0x7f00000003c0)='./file0/file0\x00', r25, r26, 0x1400) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', r27}) syz_fuse_mount(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 10:20:47 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r3, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) socket(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r3, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 131.079605] binder: undelivered TRANSACTION_ERROR: 29189 [ 131.085257] binder: send failed reply for transaction 57, target dead 10:20:47 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)) socket(0xa, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:20:47 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r0, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r0, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:20:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a77276") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) [ 131.236267] binder: release 8361:8362 transaction 62 out, still active [ 131.243540] binder: unexpected work type, 4, not freed [ 131.248901] binder: undelivered TRANSACTION_COMPLETE [ 131.265306] binder: 8361:8362 transaction failed 29189/-22, size 0-0 line 2852 10:20:47 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', r1}) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r4 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x8, 0x105001) ioctl$TIOCGETD(r4, 0x5424, &(0x7f00000002c0)) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000380)=""/214, 0x10000, 0x800, 0x1f}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000013000502000000000000000000000000", @ANYRES32=r2, @ANYBLOB="ecf6c39f3fc266b6d86d"], 0x28}, 0x1}, 0x0) 10:20:47 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x13c}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0xffffffffffff5d2c, 0x8, 0x8205, 0x1, 0x80000000, 0x9, 0x9, 0x9, r1}, &(0x7f0000000240)=0x20) r2 = open(&(0x7f0000000280)='./file0/file0\x00', 0x101800, 0x8) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000002c0)={'syzkaller1\x00', 0x600}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x1ff) mount(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x3000000, &(0x7f0000000140)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0x4) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000600)='team\x00') getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000640)={@dev, @empty, 0x0}, &(0x7f0000000680)=0xc) getsockname$packet(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000700)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'veth0_to_bond\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in=@rand_addr, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000880)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@remote}}, &(0x7f00000009c0)=0xe8) getsockname$packet(r2, &(0x7f0000000a00)={0x0, 0x0, 0x0}, &(0x7f0000000a40)=0x14) recvmmsg(r2, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000c40)=""/27, 0x1b}], 0x1, &(0x7f0000000cc0)=""/184, 0xb8, 0xfffffffffffffff8}, 0x2}, {{&(0x7f0000000d80)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000e00)=""/153, 0x99}], 0x1, &(0x7f0000000f00)=""/195, 0xc3, 0x1}, 0x7}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000002000)=""/67, 0x43}, {&(0x7f0000002080)=""/229, 0xe5}, {&(0x7f0000002180)=""/145, 0x91}], 0x4, &(0x7f0000002280)=""/40, 0x28, 0xffffffffffffffff}, 0x2}, {{&(0x7f00000022c0)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000003500)=[{&(0x7f0000002340)=""/227, 0xe3}, {&(0x7f0000002440)=""/114, 0x72}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)}], 0x4, &(0x7f0000003540)=""/176, 0xb0, 0x3}, 0xe695}], 0x4, 0x2100, &(0x7f0000003700)={0x0, 0x1c9c380}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000003800)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000003840)={@remote, 0x0}, &(0x7f0000003880)=0x14) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000038c0)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f00000039c0)=0xe8) accept$packet(r2, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000003b00)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003e00)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000003f00)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003f40)={{{@in=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xe8) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000004080)={0x0, @multicast1, @loopback}, &(0x7f00000040c0)=0xc) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000004100)={@empty, 0x0}, &(0x7f0000004140)=0x14) accept4$packet(r0, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000041c0)=0x14, 0x80800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000004200)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000004300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000044c0)={'team0\x00', 0x0}) accept4(r0, &(0x7f0000004880)=@xdp={0x0, 0x0, 0x0}, &(0x7f0000004900)=0x80, 0x80000) accept4$packet(r2, &(0x7f0000004940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004980)=0x14, 0x800) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000049c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000004ac0)=0xe8) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000005280)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80040}, 0xc, &(0x7f0000005240)={&(0x7f0000004b00)={0x73c, r3, 0xc00, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0xb4, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0xf4, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r8}}, {0x8, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r9}, {0xd8, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x34, 0x4, [{0x81, 0xd, 0x3ff}, {0x8000, 0xa5, 0x80000001, 0xec}, {0x8, 0x401, 0x9, 0x80}, {0x3, 0xd5, 0x3, 0xdf3}, {0x30000000000000, 0x2, 0x9, 0x1}, {0x1000, 0x2, 0x0, 0xfff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7d}}}]}}, {{0x8, 0x1, r10}, {0x1e8, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xa25}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r13}}, {0x8, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r16}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r18}, {0x7c, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x7c4c}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r20}, {0x214, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xb3d}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x1}}, {0x8, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r21}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0xc, 0x4, [{0x7, 0x7, 0x1, 0x1d86}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r22}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r24}}}]}}]}, 0x73c}, 0x1}, 0x20000000) symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00') lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r2, &(0x7f00000003c0)='./file0/file0\x00', r25, r26, 0x1400) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', r27}) syz_fuse_mount(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 10:20:47 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = getpgrp(r0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0xffffffffffffffff, 0x6, 0x1, 0x10e0000000000, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$KVM_GET_CLOCK(r5, 0x8030ae7c, &(0x7f0000000240)) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r3, 0x8, r1) fcntl$setsig(r3, 0xa, 0x12) sched_getaffinity(r1, 0x8, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000001400)={&(0x7f0000001480)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in=@local={0xac, 0x14, 0x14, 0xaa}}, 0x0, @in=@multicast1=0xe0000001}]}]}, 0xfc}, 0x1}, 0x0) poll(&(0x7f0000b28fe0)=[{r4}], 0x1, 0xfffffffffffffff8) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @rand_addr}}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xe8) r8 = getegid() fchown(r4, r7, r8) dup3(r3, r4, 0x0) ioctl$TIOCNXCL(0xffffffffffffff9c, 0x540d) tkill(r2, 0x16) io_cancel(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000580)}, &(0x7f0000000640)) waitid(0x1, r1, &(0x7f0000000040), 0x2, &(0x7f0000000080)) 10:20:47 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a420") socket(0xa, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) [ 131.325258] device bridge_slave_1 left promiscuous mode [ 131.330981] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.382593] binder: undelivered TRANSACTION_ERROR: 29189 [ 131.388216] binder: send failed reply for transaction 62, target dead [ 131.425602] device bridge_slave_0 left promiscuous mode [ 131.431260] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.520169] IPVS: ftp: loaded support on port[0] = 21 [ 131.531814] team0 (unregistering): Port device team_slave_1 removed [ 131.543086] team0 (unregistering): Port device team_slave_0 removed [ 131.553592] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 131.571301] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 131.602554] bond0 (unregistering): Released all slaves [ 131.635701] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 132.547291] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.553732] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.561546] device bridge_slave_0 entered promiscuous mode [ 132.600102] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.606524] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.614380] device bridge_slave_1 entered promiscuous mode [ 132.653496] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 132.693997] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 132.808097] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 132.848451] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 133.024262] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 133.031746] team0: Port device team_slave_0 added [ 133.068479] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 133.075611] team0: Port device team_slave_1 added [ 133.109561] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 133.116524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.124520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.164758] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 133.171712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.179735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.207409] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 133.214506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.222937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.243471] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 133.250583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.259175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.495647] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.502060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.508723] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.515124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.522496] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 134.048137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.359004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.439434] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 134.517160] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 134.523339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.530530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.607729] 8021q: adding VLAN 0 to HW filter on device team0 10:20:52 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r3, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r3, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:20:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f760070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000001ff513021a2c24f90469ff659d04a672600e0000001a967ef8eab64585392d07261fb32ad205c907ef699905c6bf7141dee71a950c3cf0d506545f673e105119f0031e08c694b37372770c4826b53ddfcf780e2a7764ff8239cb4068f9edcc98826772fd292b7fb681865860b810218cafe6f3c09f5391ad741b9016427b25ae1df520a19fb28c84c9e763997c6456a3936f72844d3482ee7f74c9f6cafe7f683d8b0338396643a3af5cfc24f941b718f8381a3b779072b4395559b116ea9f4671eb52130896fe5279f"], 0x1c}, 0x1}, 0x0) 10:20:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a77276") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:20:52 executing program 4: r0 = socket$inet(0x2, 0x7, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x5c832, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x80}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r2, 0xffffffffffffffc1}, 0x8) 10:20:52 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a420") socket(0xa, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:20:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) read(r1, &(0x7f0000003380)=""/4096, 0xf) 10:20:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f000021f000), 0x0, 0x8) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x5) connect$inet(r0, &(0x7f0000d9dff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000004c00)=0x14, 0x0) sendmmsg(r0, &(0x7f000000be80)=[{{&(0x7f0000007e40)=@hci={0x1f, r2, 0x3}, 0x0, &(0x7f0000008080)=[{&(0x7f0000007ec0)="0b9ed256c5043884016f500ff3b0d05ac8cb4c414adcf229988ba1c238356b09c29b53a35ac4307b36dde633ff9a67924e4f918ba40dca3a962b8c92530288fed191a73e3973f99fa34fe6008f1ecd3739a9c009c94f13f121fdb4ea4d5ddc60c08fbf9b2fda93c87265fe548fc730e26d530d470ee98fbe869e3f44bc5dc10856a586dab3208b2a19d99d7f5dd4f91e6c5898366ea975f651438966192890d642d46235b40b00fdb9df63a5f0e10aa3032d0e50a284b97fa8a53b944dcd34f8802d14e1a22ca782d1121e14c8d00e317e22289a57"}, {&(0x7f0000007fc0)="374676f0624019e19efdb12743c97f66670d294923e72e74a5c7b12610a439aa25d61bc2226ad3313bf0d09e805ff6a6dba35da0dbf08f050237c1d0c3aad5e0c8e1562c5600c57f2c6a5f6276ec9338625d0904f283523e6693c7667d50b5ed1806cf432ba5b4b294d5c17ed17f61a5e3dcb154ad46fd37c08da3b13fa39dd9a9"}, {&(0x7f0000004c40)="aadfa5"}], 0x0, &(0x7f00000080c0)=[{0x0, 0x103, 0x100000001, "4c9e99e9cf0633a82b9525d0ba05225d5f99e50344feec5779361fda9ebadfcf3f68f8cc93c37ffdb0bcee952b53b6666a35"}, {0x0, 0x10c, 0x1, "32bd89793668d8cac436ece939135e3af05cc96e08b508876690053a98c671f5ebc2ec6ad9a252ccd5fea1af7a1328724e16465b04da4fadc823a53151bfb58004f0cdcc82b3d8305acfa76dd58792b6ae11b3c0cc11e4d630481c6f6d3c69e72db40eeeb2f15dec970861f9827e248d4a3d90ac98f795b80a01ba21808bd4fa63d596ec071ce10dd6ceab7a8ec639491e9e3acc9b6772836e97bdf3472cdf128c12af4d0c9be31b1d8e27a294bd2a1dc044a95e"}], 0x0, 0x63251afc7ac3dd2e}}, {{&(0x7f0000008200)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x0, &(0x7f0000008440)=[{&(0x7f0000008280)="129d8f75325b43a9083496356794b175f485d305f291a1864c8659564cf0e308915f334c96924d7de31d44e91434e56c62926b80cb6455273cea30e835cfa29d67fa54d0b517e0101b7170c724de872e20b536a625f77ba9d44239cdb9ce2f6d5d44d0b748fe5848dfd55b85a9488aaa1e5fb08edd55463554c649fd793020f8833724a7e68ffec9882e5ff6fa411156e9cc00c130127cd00b3b9db7acca92247101c6e0d34c497dbddeeea1ac5db32a463e2b208f898f0d64205035cd0ea2caacc065c73b7fdd4a1be3937c9b1b0cdd695cfbef75cb5ca1d2"}, {&(0x7f0000008380)="af86ab6316bf4fa0f8135f6e1958d018bcb1e9ca102f06b74d587ff740151d21c39ce706ff75dcc9014a0b042f23a34c24a40331462f13620ea29cbba620f4c7cf97c49eb56878d7126b855808039c3c476f53c026343613e5e16b54cc4f637ee9cdf1e63919a890a34158080667e0870991bed24c7c0dd1e74912decaca5eaf6cedf811d3ccba9e06ad58a0a73efa13f3d3db2c8e06424814b63556d27efeb0fa3f8818c913162c43515d52f7f2435c75512f968b2e87b402"}], 0x0, &(0x7f0000008480)=[{0x0, 0x11f, 0x9, "1a4b8f2e462cfa801bd3482cf86857e50ee510efb3c9b08d1736567c131329c23f03a236d66f677b28127c195a89896c6dd19dff9be78349689ebfb69ab7cb97e2a1e434883fca63477875fa957fe91583ccab833ffdcdca9f9bbb6d1c9ec0af51017565a3675e53487ffe942ee6cabc6b8b90031e0721bb910a4d273de930ba1c2b81e06a13660a64600628ece66fd05fcd85e816284ef6bc605b0a4f53a20c840011f76c24c3922c8bd27415"}, {0x0, 0x108, 0x4, "a9e4ab98e5ea0c8304438cbce7fe619317009e6e05589fbf91974fdeec2d975060e4b6e3bded398fdea703b339efc3e8c52e25f47a5c7e97f8a7a6848fe1222b9244f4cdfe858358691abe47bd175b0486fb07a2992f665ab72e29c31fd26813e6c9af88308cfcb0b1553e56c5e64b3872f818c154b62ca1f17f097458697fd4e8979c2196b43d0170186b3759cb5e91e2c55bbe878cb75be7dd13b2ac20d13feb95f56be976c17552365f018a8a71e1aa2a7ecae2fa993d2d493e5e"}, {0x0, 0x106, 0x6, "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"}, {0x0, 0x11c, 0x5}, {0x0, 0x0, 0xa61d, "901b37b5435b1ae40adb87240d61edc4419dfbf28651637ce18ae375b5d5b1fa7d9beafc6554cd9d79d37c3aac00814cfd237a2ab8967783082a97bf2f9408d4a6fa7bd4faaded8bf2b7631906e27dd541cc801346f02c3a8f3ca47cc3649f828ae3"}, {0x0, 0x3a, 0xffffffff, "47a42cf54b0dc86fc1323fe242e7d2231350077909b22c982b130f68e9fc2b568e5bae2e38e18773afdec890ed12330e135f0457eebafd996a453f9da5b32cc803b3b96a99e50098ad5c749df08a3e5302da189ad461e388c858391ae62cadd376d25b9eee7829"}, {0x0, 0x18b, 0x80, "c64875490633956e8e98ca9493916d9ab7e0553c75c6198783b58b7498ff4209e1a64a1411eeb4f07e16276b88b79ccdc775"}, {0xffffffffffffff9c, 0x187, 0x8e4, "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"}], 0x0, 0x4}, 0x1}, {{&(0x7f0000009880)=@nl=@kern={0x10, 0x0, 0x0, 0x10000102}, 0x0, &(0x7f0000009e80)=[{&(0x7f0000009900)="7da7b493b56439bd0254966b736c1155a86c341d1b5a8c38cb81b9b5f00eda3fe3c1175410"}, {&(0x7f0000009940)="147230429b808fe644898a7519534bc6588d4a3b1371cea5a64c53b8fc6287d74b40ee15d1f7026999e3d261452ec60a824d91bcaf3be62ee3fd45ce1fa45099cb7e9acc363f2c862db9938f66684e52a30bd66d4d0053bb565f4110393b185b284fae49a88ed88c050c56e78a94eeea39d085ad0167c879663d"}, {&(0x7f00000099c0)="e2498d543e13aa2219263a0aa8c760d288c0d33661bfde84e431d5ddae99a6d3069105029cdf6e47cf6c96ccad5f3312f97f7cd11f626aea4048b2c44f971c714de76378122b4c1357b809bb2f78f8f73cd01ab5c41683e5c8e62da795c38dd84766be999b1692b71869227030a7d661ee800991e31a3c14c5386840629edf6677e3755637c33b4f3ddd9b3dbb252463020db20c3b01d2d5a72be4b6e68837ea0e9bb6b40ad7ed6351c2cf3ead1fe74f16d170bce8e202a9f0e2d4028fe6949283bd2f57da8694e09c0a89c897955712d6986c10fafce1c737ae"}, {&(0x7f0000009ac0)="3a71778b8cef9c2bf17dc1d901463e302326ab7004250a48e0f7139b857f2e5862efa03618b488557e8e9ab42aba03abba1c3e87fd4651a37ed2ff6dc4ca04a3bcafb82c297b3901d95aa8057e186d6b66ecfc1437199e1da4297593df7a31cd4426d48cf1ee3e932282ee3da0e2e702a6520aeafbdf6d357ec04406b141c6bb294daa99ac6036a00422454b8fac12495bb6433fd1a88ccc4d8699f25d1d942a61554ed40176"}, {&(0x7f0000009b80)="8fdbb0ad439fbd32eee169e5ae00e8588cae7df0d96f6c95c3596cd119feac74a27d48e91a3c78aaa75671b9d4340c0c48738b5d1a50"}, {&(0x7f0000009bc0)="bb54d37b057a0a2dbe3c786d1c5df429abfb1bb1adde4a67225b4049d0abe4c8ac59acab227b1381822a3f7d47c695d330c4e691ded8b6f4b93cb8d54bcfece47c76dea7d28bfd5589ce0ce49288e8c83c3550e564debf0aa30f4a4aef11e8e6a9ffeb5e2b4ddf1c21189f36adf051325c4f3f1e9477cddd0cb0c7f605d2d4c3caa7fc364f5075c66c53721d22b70637da9a0d5f21e0d87764a72fefa5695c4e3fd72dec348833ab4928e25e2dec4b6f838a20335a7f97985fe3a6297c658ac0e202894ad1d6aa28abbcce685ef3e9418a946848547d47a898f9c6f1f6f5640cc90b52b6cc1278fa83d8c1d4a9e22a9c0ebc50a9a2"}, {&(0x7f0000009cc0)="718a266211d047e30d6e352eb81f93cda823db2ba3c63dc06e9c92b6c1fb0f0bee48fb513ea5859d56c88a6192942234812a5eaa7e276be8a0eed1bcafb9d4884f825500e6a92c7d7b5b67aff52c948cc0cca6a009971b0d9a0364c6f5794248e5378b78fdc7668b77afd1c7d4a39435999137efe75478da807c0112c2f7985ed91903e0d7e43c978ba3d4dacc0e31a2bf5ace8ac83c4402f7ea7518005b5a9955be80eef79d511069267ad02513aa355606ff5c"}, {&(0x7f0000009d80)="a814166b7e5e2a33852bb17e4896a6283190081e3bb649ae948070f207e92542e9d0f0acdf16c1646ff44f51214fade290c12d685e215a3692106a2a873767d4def80b5fd4f54d963948f6bbc8df73156f9e54e9b856fc09d9d4b893cf71f2bee2903fc3b2740061ac5f1b2fbccd88c15b6722c4ea67b73884459bc9f9a995de63b78b38326f10937c7bc02fa84f84ed9401acf95ba2d6ae65492acccb3f1a2321d725d2cd21832a39a0"}, {&(0x7f0000009e40)="5704ba5ad510c9efd7dfcc6f83700722b0f9955abc903673ca8275b2edfc58f5d180bf92394186d928ac353e0b1ae1045880279d"}], 0x0, &(0x7f0000009f40)=[{0x0, 0x0, 0x0, "fc12a3d69828287e6ec91dea8c58af2223cb65817f85194d9e76603504d3b4d96550494c6b938fbe1656dc8a7813a14dca1d7e44977a64ed575e594ac07b718d20bafeeff716ad9b98a8156611d93661a3c43f7265e8c79cc775be43"}, {0x0, 0x100, 0x7fb, "e38cc12ad6c9e5911f9d260c5f61de22de09ebb07ca172339c3af9ee5848a273414dfd46d70bd40bd8fd242c7bab9df1b72d32bb34802dde"}], 0x0, 0x10}, 0x6}, {{&(0x7f000000a000)=@rc={0x1f, {0x0, 0x6, 0x13e3e11d, 0x8001, 0x0, 0x7}, 0x9}, 0x0, &(0x7f000000a180)=[{&(0x7f000000a080)="e1c3b05ffbcbf71b43ac5ba599dbdb7b72b90274ef9e1af71359c1d55d1798e76f27b7a04fa72b7ad9305796d8650ac65a9c36053f29531bf56c2fff80924d3185f2029c1c3bf1a5c22ce234be962dd43ee7ae9bc82de70afdc81e664a04c93a6d461055389dc445130bbf2918d423d6edbb50aaf462802e0608c1322a687c633bcc5cab833a33f90e9811b0a871c0aa2ef4e191bcdcc37652ed17989bd1ed706510746eb32185e54797b642b7f4af027b64d9b6444f3eef69fd5d94539a45fd11643b855f3cd729394e52580e61b5cb5b262c27ab06bc3dd90550d987694e45ea5765ccf7be7d844dcf558cd97e766b0332c778649268"}], 0x0, &(0x7f000000a1c0)=[{0x0, 0x0, 0x2, "a3c2229bf1f146f2f8cf01e7ed751311807ee7bc275f3e0797c25cd16020163bb2ab0acd02d1834b8b31e5f09413a89ecf06253d3c2c27d38bfa6d86cb53f12768761f624b2a40c7395183aacbee06b94907577710016eb203c2002d1a9edc6198a73023e977417093a1"}, {0x0, 0x1ff, 0x2, "6b5e56df3db8f113d1d292dc91f6569227ebcf2ca2bf37dfff811b635c787c612f9b35ca70cd52bf47123b62dcc4f06477cd9fa4"}, {0x0, 0x110, 0x101, "ee93cc2f08514f468158fadbcaa2ddc15bb7df1316b78a321f3974575285c4d2f768be203aeb2dfeeb6b9a11ef84d9a17b0e1cc17758bbfcb1dca9c8eeaabc305c17b6af485cfc22cfee85c3f347284a23b36fc4af9012b7a59cb07ae4"}, {0x0, 0x0, 0xffffffff, "0ea4aa6368c451f535c97e91528dfeaccc9c4b950f71521ad6746e08fc0b12418f4cff8c556c3b901e903f77e9a12642564586816979709bc8bf9299a2adb2b71944d24f9353aeca579d9edca98c57ded687464b1afcd10345f0b874e460ec4a0267394045b03623840cd1681d3adaeff653fa25add1fd255613b93900b194c2d4fc3a72c026885bb11fc5c90908587bee8874fa465fa5e357af7c96da11e85920995c7f63c82162860667f006f50c9ff176bb7b0ad0aa9ef3861f5b775183e6dda274a850611dd6829fd97fcb69e00f90a7485d884272f03916e00a31dc692f6b65fe2fad36417372130b"}, {0x0, 0x1, 0x0, "df774db4c1c1f54e3d04d888a41de2b7e04e57cba44ee9ad13baab67a041caa1cfbc32ccd63de56478c35ac9195d41a8a7aff2e573ff3dd9baf3de6893c186034e659f5e56040bca0579e17872af6b696ac9a77f0fb5be32350101f9afd15b458cb46ffefcc0c80989e054481c9e475c342be04c878cffbc5127a5756d6d83c21ef1939cbb0f"}, {0x0, 0x11b, 0x5, "d9bd8527076bdec92c734b742fd88c1db24de067e66af0221fab5d7288d0388433ac6d5c6d7400ea356333852fb655cee55d472dbfe72070c309970c00263dc6df554cfd378862e65ebed804c9dd7f051ed4a4ef99bba056a2e2aa394c32d76807b685ad7aa7caee2583b34550932f063f4314b8000a"}, {0x0, 0x10b, 0xb4d, "1587b25c2b0e69efd9209e6e92b7d24dd419adcb9bec7ae346b0ec7eaa25913a9640228b4973d58e9dbf5e5f3b416f220dc740b7d2afbb0caab6be294eef69bcb067b5f3c50cd737ab5e80a29b4290a1cdd6df646abe00c7900f0a45c18bfb6c94a6d57564ba6fb81ed0a233dd5799ce8f0850b4fae1a9fda2525d697c3ee251b888eb971fbfc18961f709736033d9be84229c7b069e22f93029bc8ef66cbfc44078686ac65a438b16283ca790ce49b877672375a9e3bc533b629f4e7b8107aede746be8b7690a267c50801856fe92f95d5f21d07fff8c248f9ecbe7deac4814a929cb9d290adf2f8a86e49e909795d4c7634a"}, {0x0, 0x119, 0x5, "4a09c4a0fbb9e94ef9d8102f12275e1902b5ef32d0b7fc5aad8d2b3f7279fa1e3afb98e1dd7b610a53dd5e6a1c5c91"}], 0x0, 0xc4}, 0x1f}, {{&(0x7f000000a680)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x2, 0x4, 0x3, {0xa, 0x4e20, 0x2, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x1}}}, 0xfffffffffffffed5, &(0x7f000000a7c0)=[{&(0x7f000000a700)="8fc2fb1860cec388a6dd95738983e7b847bb68ac4b07f1bcc0814aac563169630acf2b2af42b9e898316f20cf48524962bd8fa6786e498ba8bb635c94e20cdb18664a19fbf4109892e1cce05099f0c98e316677f712cf63c0a8ae34a14f42ab139a502419d560e053f5d6970c389d36c44aed8184241ebab4fc4173937c8d4290fb1db18b3bd3252fafe0b95bffcc77d2a1732bc810094b65d09f0e511be"}], 0x100000000000034e, &(0x7f000000a800)=[{0x0, 0x117, 0x5, "393e52192f76d55f766bab44914e9e0dd3b73838805e0c"}, {0x0, 0x1, 0xfffffffffffffffd, "2e59afca7ff1988913e54f40f4df7c110a4574cf100d6afb4e9681a9ac69df3603fa3fac116b4c01d3c9af"}, {0x0, 0x10c, 0x80000001, "33808fcf5282ccecfcad3907a007e44a11655098d8be2dfec916ffa23b"}], 0x0, 0x4}, 0x80000000}, {{0x0, 0x0, &(0x7f000000b980)=[{&(0x7f000000a8c0)="3efb130c252e70e207d68874cd39cb13b7c0e2d3ea8f552b9f8a76912959458622ca6f2396326bf61d"}, {&(0x7f000000a900)="6275e6e1c8eb5d0d5953077a8c1309d1cf96727aecdc9bd2008c4a71fa2f6338a6ca6e39191ced936005d90b67a80841fed0e2180f8957b1a0339b83533cf241f064c22043b683fde2727160e76a6d1f214e0f3865b8ce597ca77aea65207b9e750ad3a9a9339bb13b00f5d4eb9bfa49"}, {&(0x7f000000a980)="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"}], 0x0, &(0x7f000000b9c0)=[{0x0, 0x129, 0x401, "7c8a55b28c35d6a558825a84b5c808b46271875b6046910311ada7cd3b2469bc76e49101b28615c89c58be651634ccfd6b5bbfbb242de8ce6734631d91465030aba5c08ca2a23c9a9d30a29aaef2d3ec5949c213d3ace86446f1fb5ad80af5008baba70470f9a5d334f0860762a3e2c272801f9a6d9f13951efb0eed88bc8413816d95329ddfb19aa09394b53ebf161f2f995a52fd3f8117de1445e17873440a78c0607987432ef2d4b7b4650440eaa6a0e44d9b1801b21c7a5f5125f10f8904aeb463e5e4ca036c3dfdbf1c45098832422b7d511c787fc6e92ddb3d1515288a32e3a92b905be08531b3376a7fd8f3f8458899eaf4ccce"}, {0x0, 0x29, 0x8, "468cd868c2258c70c58b9b9e36f67850976e7bbdb800f9fb55404b64c17914115d0724970890b8d43db1402ab40ec1f212c37ef5017556c9a4c282945ea63da7bc983cce240d610bfea6212e389d193774da1228b59e671ccfcfae4813c40d677a781db61a9db57e60ed972f1788f2487b5321d06dc2f806da851f1ed926179f545bc0e7b3969ce1e40b943294366f6f8550b9"}, {0x0, 0x1d48c4280516617, 0x80000001, "dd76670e388c42b55ea1705643680cf84d9abf2e9ec03b68a529abfbc605f389cbbf9242d2291d1c8f5bd24b8654eb4e2d5679ec3d118656bc2287d71deb3e948bbcb8c17f05f50e198ed3f94103dc9ab0f7bfb832fe7275bcbafde817c3cbb71a251f4220e06366a0a9ba56d1b0b1c0f82943a7c765c648a06a14dcefb73672dfdef230882b183b5b6672d59a2d41dd8b5d555b023e60fb685a17e0c3ccfb1646307fabd605f3c0b62f7032e5b4448e0b5317f489d934fb482bffd9cf609496c1ca8c9e5d8b43bf9f2a5463111c7870d801d47dfcaba1c62b08bad2538144692d0c55d357828b945e99eb3552a52483fb1416e5159b64041547"}, {0x0, 0x119, 0x80000001, "77b94c17b65b0e43a0893bba20f088a759fc4860386898a3f49e2f2843936f582c310e9fa8c76509eb5a00e1e5be3c189d495b070a676dbcc28917ccefab27e950d8c697330b6e2de50fb600011dd4225f6f4c6d860d545b107146fb61f0462d7120012801696b9b68c03743d3fcddc5f2ceab655bb45f745b0e2772cad2044560875ae678e9799d5d2f0fa907f2016937a388ebc2b773c03488e5b6e2c491af9fc496b9b7c4419fdf1b7378a4d7f8ff579830c95d478a1ae3bbda191549f986e3ca36cf48b12c043d87459e578798ffea8e16dc252ed677fd99dc0eb47fde"}, {0x0, 0x84, 0x4, "ab025748ad4c2f57e12d49dc904ce01b37e23bf277a663aa377660c3931cdcf4266d92fa8ce208af8dc0cd1025"}, {0x0, 0x29, 0x0, "51763e8814d05381e3ecc5c50cf2204a6ef5784b0a34b6471cc0cad20e967ec6a247add0de917679ecbd764612b40e9f80468775ba354c2ee8e495f3474342b77b7693b5b3b4797e5bef1a3f0f0636c99670d86ce7061c8b352b2dab936061ef8b39983d54ff51a9e2b6ed484c39f8218e26cd37a546250c7436561eaf149f160c903c30e58bc75d676a80ecbbe32958814cac88dc5a846edf66be223b53dc"}], 0x0, 0x810}, 0x5}], 0x40000000000007e, 0x20004bc0) [ 136.004807] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'. [ 136.033330] binder: release 8660:8662 transaction 67 out, still active [ 136.040146] binder: unexpected work type, 4, not freed [ 136.045481] binder: undelivered TRANSACTION_COMPLETE 10:20:52 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a420") socket(0xa, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:20:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) [ 136.052138] binder: 8660:8662 transaction failed 29189/-22, size 0-0 line 2852 10:20:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a7727600") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:52 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) fcntl$setown(r0, 0x8, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={r3}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r3, 0x3f, 0x1}) 10:20:52 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r3, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r3, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:20:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8040, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000140)=""/212) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x14, 0x22, 0x101}, 0x14}, 0x1}, 0x0) [ 136.192316] binder: undelivered TRANSACTION_ERROR: 29189 [ 136.197952] binder: send failed reply for transaction 67, target dead 10:20:52 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a420010036") socket(0xa, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:20:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a7727600") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:20:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) read(r1, &(0x7f0000003380)=""/4096, 0xf) [ 136.345758] binder: release 8686:8689 transaction 72 out, still active [ 136.352541] binder: unexpected work type, 4, not freed [ 136.358917] binder: undelivered TRANSACTION_COMPLETE [ 136.364424] binder: 8686:8689 transaction failed 29189/-22, size 0-0 line 2852 10:20:52 executing program 4: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x2, 0x0) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r2, 0x1, 0x5, &(0x7f0000000100)="4e0132fd834372f3b46a845885ddac442dccd44ab787b87a718295be842ab510639ed5ff7f84393576c0f6ff18752565a277ec9739368a0aa854148823f71b1316e279caefc010852d5b1a7ef89e7f993df782cb5f4fc8b9ae6f8d46a0e672390af6fcd344fa0f", 0xfffffffffffffe4b) bind$packet(r0, &(0x7f0000000240)={0x11, 0x3, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2ecffffff00000000000000"], &(0x7f0000000000)) 10:20:52 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a420010036") socket(0xa, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:20:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:20:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a7727600") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:52 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r3, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r3, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 136.461628] binder: undelivered TRANSACTION_ERROR: 29189 [ 136.467295] binder: send failed reply for transaction 72, target dead [ 136.569345] device bridge_slave_1 left promiscuous mode [ 136.574957] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.600805] binder: release 8719:8722 transaction 77 out, still active [ 136.607602] binder: unexpected work type, 4, not freed [ 136.612941] binder: undelivered TRANSACTION_COMPLETE [ 136.619900] binder: 8719:8722 transaction failed 29189/-22, size 0-0 line 2852 [ 136.645861] device bridge_slave_0 left promiscuous mode [ 136.651481] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.715089] binder: undelivered TRANSACTION_ERROR: 29189 [ 136.720704] binder: send failed reply for transaction 77, target dead [ 136.758059] IPVS: ftp: loaded support on port[0] = 21 [ 136.782275] team0 (unregistering): Port device team_slave_1 removed [ 136.792162] team0 (unregistering): Port device team_slave_0 removed [ 136.801814] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 136.820415] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 136.846894] bond0 (unregistering): Released all slaves [ 137.411365] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.417777] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.425118] device bridge_slave_0 entered promiscuous mode [ 137.462683] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.469093] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.476912] device bridge_slave_1 entered promiscuous mode [ 137.514183] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 137.552492] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 137.664911] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 137.706132] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 137.882933] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 137.890331] team0: Port device team_slave_0 added [ 137.927706] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 137.935204] team0: Port device team_slave_1 added [ 137.966876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.006305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.047854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.080150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.354397] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.360798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.367456] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.373828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.381482] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 139.169196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.241019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.326538] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 139.408907] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 139.415147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.423823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.503536] 8021q: adding VLAN 0 to HW filter on device team0 10:20:57 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 'syz0\x00', &(0x7f0000000000)=['/dev/md0\x00', '/dev/md0\x00', '/dev/md0\x00'], 0x1b}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x200000, 0x0) 10:20:57 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:20:57 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x72000) setsockopt$ax25_buf(r1, 0x101, 0x19, &(0x7f0000000200)="a0b91f9bcd27823874f7bc382bc723251fac8c9225bf5c64e28d654f9563cc7fd52ca5f452db637f31253c533cc642605b45bd9cebaa5195249c92c936f9b22cea8d4639ec5fcd902697f5ded3fe1a5b29d7eef32370cde0ddd9e4df839094cf3b44dc24f6b3085dadf3a37f255e9e3e9d73fccdb344a57ca8", 0x79) listen(r0, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000280)={0x2, 0x6, 0x4, 0xfffffffffffffff7}) r2 = socket$inet(0x10, 0x3, 0x4) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000040)={0xb5, {{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1, 0x1, [{{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}}]}, 0x110) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="4c0000001300ff09fffefd956fa283b70000000100000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) 10:20:57 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a420010036") socket(0xa, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:20:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:57 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$rds(r0, &(0x7f00000008c0)={&(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10, &(0x7f00000004c0), 0x0, &(0x7f0000000800)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000580)=""/166, 0xa6}, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/190, 0xbe}], 0x1}}, @zcopy_cookie={0x18, 0x114, 0xc}], 0x60}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40000, 0x0) accept4$netrom(r1, &(0x7f0000000040)=@full, &(0x7f00000000c0)=0x48, 0x800) 10:20:57 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r3, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r3, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:20:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) read(r1, &(0x7f0000003380)=""/4096, 0xf) 10:20:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:57 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) [ 140.977172] binder: release 8990:8991 transaction 82 out, still active [ 140.984011] binder: unexpected work type, 4, not freed [ 140.989595] binder: undelivered TRANSACTION_COMPLETE [ 140.995345] binder: 8990:8991 transaction failed 29189/-22, size 0-0 line 2852 10:20:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_create(0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000240)=0x2, 0x4) 10:20:57 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a42001003600") socket(0xa, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:20:57 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r3, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r3, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:20:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvmmsg(r0, &(0x7f0000001380)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/249, 0xf9}, {&(0x7f00000000c0)=""/28, 0x1c}, {&(0x7f0000000100)=""/108, 0x6c}], 0x3, &(0x7f00000003c0)=""/190, 0xbe, 0x9}, 0x9}, {{&(0x7f0000000200)=@xdp, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/56, 0x38}, {&(0x7f00000004c0)=""/131, 0x83}], 0x2, &(0x7f00000005c0)=""/8, 0x8, 0xfff}, 0x6a0aee85}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000600)=""/254, 0xfe}, {&(0x7f0000000700)=""/128, 0x80}], 0x2, &(0x7f00000007c0)=""/185, 0xb9, 0x8}, 0x3}, {{&(0x7f0000000880)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000900)=""/215, 0xd7}], 0x1, &(0x7f0000000a40)=""/73, 0x49, 0x8}}, {{&(0x7f0000000ac0)=@generic, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b40)=""/66, 0x42}], 0x1, &(0x7f0000000c00)=""/86, 0x56, 0x100}, 0x4}, {{&(0x7f0000000c80)=@nfc, 0x80, &(0x7f0000001200)=[{&(0x7f0000000d00)=""/28, 0x1c}, {&(0x7f0000000d40)=""/78, 0x4e}, {&(0x7f0000000dc0)=""/30, 0x1e}, {&(0x7f0000000e00)=""/6, 0x6}, {&(0x7f0000000e40)=""/184, 0xb8}, {&(0x7f0000000f00)=""/155, 0x9b}, {&(0x7f0000000fc0)=""/136, 0x88}, {&(0x7f0000001080)=""/196, 0xc4}, {&(0x7f0000001180)=""/84, 0x54}], 0x9, &(0x7f00000012c0)=""/172, 0xac, 0xff}, 0xfffffffffffffffa}], 0x6, 0x10100, &(0x7f0000001500)={0x0, 0x989680}) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000001540)=0x3, 0x4) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x4, 0x36, 0xffffffffffffffff, 0xfffffffffffffffc) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xff0f}, &(0x7f0000000180)=0x14) close(r3) close(r2) [ 141.106339] binder: undelivered TRANSACTION_ERROR: 29189 [ 141.112187] binder: send failed reply for transaction 82, target dead [ 141.214113] binder: release 9018:9024 transaction 87 out, still active [ 141.221088] binder: unexpected work type, 4, not freed [ 141.226430] binder: undelivered TRANSACTION_COMPLETE [ 141.238145] binder: 9018:9024 transaction failed 29189/-22, size 0-0 line 2852 [ 141.309380] binder: undelivered TRANSACTION_ERROR: 29189 [ 141.314987] binder: send failed reply for transaction 87, target dead [ 141.361341] device bridge_slave_1 left promiscuous mode [ 141.366931] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.383765] device bridge_slave_0 left promiscuous mode [ 141.389335] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.422815] team0 (unregistering): Port device team_slave_1 removed [ 141.433149] team0 (unregistering): Port device team_slave_0 removed [ 141.444695] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 141.459838] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 141.487574] bond0 (unregistering): Released all slaves 10:20:58 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) r3 = getpgrp(0x0) kcmp(r2, r3, 0x5, r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={[], 0x0, 0x10001, 0x3}) 10:20:58 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:20:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(0xffffffffffffffff, &(0x7f0000003380)=""/4096, 0xf) 10:20:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:20:58 executing program 6: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224-ssse3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="c07019a2c16bed7d9ff71095dae7ca63a683589f8fd3e951e1d41ea07d57844fbac8a51721e110ac50a096e2617df1250e77a0e1061ae4401c653a4d862fdecb72", 0x41) 10:20:58 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r3, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r3, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:20:58 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x677, 0x4000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e22, 0x40, @loopback={0x0, 0x1}, 0x2}}, 0x8000, 0x9, 0xfff, "fe9a0a761b3f2307790c6e1b86ec2b59032802379788fa71de3cacf18eb0f071371299fb9558df3094cf0f593e088a4fdbd7dc390a65debd9df499b73e442a481cd2ebdd5dcdadbee136e2bca1c047d4"}, 0xd8) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00', 0x4) fallocate(r1, 0x0, 0x0, 0x856c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e23, 0x4, @empty, 0x28ab3818}}, 0x8, 0x6, 0x9, "90e53f476093b6e26383c68ab18de5cd5fc0c7281e62afb30796d17c5fc121978ed3d02fc311b27c92389f4606501f2a4e8f3b842f61f75a9a73bc1fda8e3867a109fa203355ce19b30e09add8fe89d0"}, 0xd8) connect(r1, &(0x7f00000002c0)=@in={0x2, 0x4e21}, 0x1c3) 10:20:58 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a42001003600") socket(0xa, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:20:58 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a42001003600") socket(0xa, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:20:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) [ 142.310652] binder: release 9047:9050 transaction 92 out, still active [ 142.317485] binder: unexpected work type, 4, not freed [ 142.322821] binder: undelivered TRANSACTION_COMPLETE [ 142.328995] binder: 9047:9050 transaction failed 29189/-22, size 0-0 line 2852 [ 142.448322] binder: undelivered TRANSACTION_ERROR: 29189 [ 142.454083] binder: send failed reply for transaction 92, target dead [ 142.562696] IPVS: ftp: loaded support on port[0] = 21 [ 142.919640] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.926078] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.933281] device bridge_slave_0 entered promiscuous mode [ 142.959913] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.966290] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.973641] device bridge_slave_1 entered promiscuous mode [ 142.998916] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 143.024385] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 143.094227] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.123689] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.150508] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 143.157426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.183391] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 143.190301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.261217] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 143.268522] team0: Port device team_slave_0 added [ 143.293643] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 143.300805] team0: Port device team_slave_1 added [ 143.325760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.357116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.384232] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 143.391339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.399814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.420120] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 143.427211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.435777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.677637] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.684074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.690736] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.697124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.704592] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 144.160366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.565804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.651292] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 144.737773] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 144.743964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.751623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.832606] 8021q: adding VLAN 0 to HW filter on device team0 10:21:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:01 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:21:01 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r3, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r3, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d115f8f760070") r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000080)=0x3000) accept4$inet6(r1, &(0x7f0000000100), &(0x7f0000000140)=0x1c, 0x80000) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000140)}, 0xc100) sendmsg(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="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", 0x4e0}], 0x1, &(0x7f0000000280)}, 0x0) 10:21:01 executing program 6: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000d300000000028000007a0a00ffffffff006a01"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000500)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r0}, 0x10) 10:21:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:21:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(0xffffffffffffffff, &(0x7f0000003380)=""/4096, 0xf) 10:21:01 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6(0xa, 0x1000010000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80, 0x0) write$rdma_cm(0xffffffffffffff9c, &(0x7f0000003180)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000003140)={0xffffffff}, 0x111, 0x8}}, 0x20) write$rdma_cm(r2, &(0x7f00000031c0)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r3, 0x1f}}, 0x18) getsockopt(r0, 0x400000000000003a, 0x1, &(0x7f0000261f44)=""/188, &(0x7f0000953000)=0x1ca) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000100)) 10:21:01 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x440000) write$cgroup_int(r1, &(0x7f0000000080)={[0x3f, 0x37, 0x0, 0x3b, 0x3d, 0x39, 0x3a, 0x2c, 0x0, 0x3e]}, 0xa) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x7, 0x2100) 10:21:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) [ 145.359408] binder: release 9337:9339 transaction 97 out, still active [ 145.366197] binder: unexpected work type, 4, not freed [ 145.371667] binder: undelivered TRANSACTION_COMPLETE [ 145.378895] binder: 9337:9339 transaction failed 29189/-22, size 0-0 line 2852 10:21:01 executing program 1: setpriority(0x0, 0x0, 0x200) unshare(0x8000002) pipe2(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000002280)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000022c0)=0x14) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000180)=""/112, 0x70, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000000)=""/40, 0x28, 0x0, &(0x7f0000b6bff0)) 10:21:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x4, &(0x7f0000000040)={"736974300000e7ffffff0ea6519d8e00", @ifru_ivalue=0x1f}) 10:21:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(0xffffffffffffffff, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:01 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r3, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r3, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:01 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x0, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) [ 145.489278] binder: undelivered TRANSACTION_ERROR: 29189 [ 145.494875] binder: send failed reply for transaction 97, target dead 10:21:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) [ 145.599684] binder: release 9375:9378 transaction 102 out, still active [ 145.606729] binder: unexpected work type, 4, not freed [ 145.612053] binder: undelivered TRANSACTION_COMPLETE [ 145.619566] binder: 9375:9378 transaction failed 29189/-22, size 0-0 line 2852 [ 145.692900] binder: undelivered TRANSACTION_ERROR: 29189 [ 145.698504] binder: send failed reply for transaction 102, target dead 10:21:02 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) io_setup(0x469, &(0x7f0000000180)=0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x1000}) io_submit(r2, 0x1, &(0x7f00000016c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000240)="d7b1cb80"}]) 10:21:02 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:21:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(0xffffffffffffffff, &(0x7f0000003380)=""/4096, 0xf) 10:21:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(0xffffffffffffffff, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:21:02 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x0, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:21:02 executing program 1: clock_gettime(0x0, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000340)) clock_settime(0x3, &(0x7f0000000380)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x400, 0x0) getpeername(r0, &(0x7f0000000200)=@nfc, &(0x7f0000000280)=0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast2=0xe0000002}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x2f, &(0x7f0000000000)={@loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}, @multicast2=0xe0000002}, 0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000080)={{{@in, @in6=@local}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) 10:21:02 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r3, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 146.559191] binder_alloc: 9393: binder_alloc_buf, no vma [ 146.564791] binder: 9393:9395 transaction failed 29189/-3, size 24-8 line 2967 10:21:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(0xffffffffffffffff, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:02 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrusage(0x0, &(0x7f0000000000)) pread64(r0, &(0x7f00000001c0)=""/223, 0xdf, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="1028f50000"], 0x33fe0}], 0x1}, 0x0) 10:21:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:21:02 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x0, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) [ 146.641464] binder: undelivered TRANSACTION_ERROR: 29189 [ 146.652242] binder: 9393:9395 got transaction to invalid handle [ 146.658501] binder: 9393:9395 transaction failed 29201/-22, size 0-0 line 2852 10:21:02 executing program 6: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) accept4$unix(r0, &(0x7f00000001c0), &(0x7f0000000240)=0x6e, 0x80000) fcntl$setlease(r0, 0x400, 0x2) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r1, 0x9}, &(0x7f0000000100)=0x8) 10:21:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={r0}) getsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000140)) getsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 146.798419] binder: undelivered TRANSACTION_ERROR: 29201 10:21:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) 10:21:04 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x10000, 0x0) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000080)) 10:21:04 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r3, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x0, 0x0, 0xffffffffffffff40) 10:21:04 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrusage(0x0, &(0x7f0000000000)) pread64(r0, &(0x7f00000001c0)=""/223, 0xdf, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="1028f50000"], 0x33fe0}], 0x1}, 0x0) 10:21:04 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101402, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000400)="3ff898fe493883105d056e0e23aca852642fd59cafc6b8c2a6127a33a296bbc70798d8d4f950c4f45f85ffed42bb0c029a9c61a335fde6f0eb191989228be6dd203166c46eb6619116ffece88132181964334f039f882241afc494795ea39868976c1e7475f551e4a4282259cd8cf06973e2f96560051e49792f040419476581e48b0ac854279db50b0baabcab1f3e390f600483401fe6d99d01b29f31f9350ab6ffc71dfa05212a1b952ed2af6bbdf6f91a17e192a197a281dc969f953bf363e22fa4c036d3502ced926e21f0d4ef85186b760b4913501c6490b4") r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000340)={0xc1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000000c0)={{}, 'port0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x0, 0x0) 10:21:04 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:21:04 executing program 3 (fault-call:3 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) [ 147.813884] binder_alloc: 9446: binder_alloc_buf, no vma [ 147.819479] binder: 9446:9459 transaction failed 29189/-3, size 24-8 line 2967 10:21:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:04 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:21:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x4, @mcast1={0xff, 0x1, [], 0x1}, 0x5862}], 0x1c) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000040), 0x113, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) close(r0) 10:21:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) [ 147.871233] binder: undelivered TRANSACTION_ERROR: 29189 [ 147.876984] binder: 9446:9459 got transaction to invalid handle [ 147.883188] binder: 9446:9459 transaction failed 29201/-22, size 0-0 line 2852 10:21:04 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r3, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) [ 147.988090] binder: undelivered TRANSACTION_ERROR: 29201 [ 148.052288] binder_alloc: 9480: binder_alloc_buf, no vma [ 148.057916] binder: 9480:9482 transaction failed 29189/-3, size 24-8 line 2967 [ 148.100088] binder: undelivered TRANSACTION_ERROR: 29189 [ 148.107251] binder: 9480:9482 got transaction to invalid handle [ 148.113475] binder: 9480:9482 transaction failed 29201/-22, size 0-0 line 2852 [ 148.153241] binder: undelivered TRANSACTION_ERROR: 29201 10:21:05 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:21:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x9b, 0x2}, &(0x7f0000000240)=0xc) r2 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000080)={r1, 0xffffffffffffffff}, &(0x7f0000000100)=0x27d) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r3, 0x1}, &(0x7f00000001c0)=0x8) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d034000000000e9ffffff038400000c00001d08000889e1c64989ffffffff0800122f2036"], 0x20}, 0x1}, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000002c0)={0x1, 0x3, 0x1a}) 10:21:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) 10:21:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x5, 0x0, 0xffffffffffffff40) 10:21:05 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(0xffffffffffffffff, r2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xfffffffffffffef0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200), &(0x7f0000000240)=0x20) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}, 0x1}, 0x0) r1 = msgget(0x0, 0x200) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000500)=""/4096) 10:21:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x3, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f00000000c0)=""/227) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000000)) [ 148.852868] binder: 9504:9507 transaction failed 29189/-22, size 24-8 line 2852 10:21:05 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:21:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x6, 0x0, 0xffffffffffffff40) 10:21:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec5", 0x10, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(generic-gcm-aesni)\x00'}, 0x58) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="d179f20600000000001c14b1048c5b1bd2e7fcd330451c64b8614fcff9671a5cf54ab025", 0x24) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="2ef99f8baf76f54e8b1c8677f925731e", 0x10}], 0x1, &(0x7f0000000200)}, 0x0) recvmmsg(r1, &(0x7f00000028c0)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000018c0)=""/4096, 0x1000}}, {{&(0x7f0000001580)=@sco, 0x80, &(0x7f0000001700)=[{&(0x7f0000001680)=""/91, 0x5b}], 0x1, &(0x7f0000001740)=""/150, 0x96}}], 0x2, 0x0, &(0x7f0000001800)={0x77359400}) 10:21:05 executing program 6: socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept$packet(r0, 0x0, &(0x7f0000000600)) r3 = accept4$packet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x14, 0x80800) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f00000005c0)=0x9, &(0x7f0000000540)=0x2d3) getsockopt(r5, 0x9, 0x7fffffff, &(0x7f0000000bc0)=""/74, &(0x7f0000000980)=0x4a) r6 = socket$inet6(0xa, 0x3, 0x3a) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000002c0)=r7) getsockopt$IP6T_SO_GET_REVISION_TARGET(r6, 0x29, 0x45, &(0x7f0000000100)={"95016c2f54494d4552000000000000001ed400"}, &(0x7f0000000080)=0x1e) r8 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000640)='veth0_to_bond\x00') socketpair(0x17, 0x7, 0xf8, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAGIC(r9, 0x80046402, &(0x7f00000008c0)=0x2) setsockopt$bt_l2cap_L2CAP_OPTIONS(r10, 0x6, 0x1, &(0x7f0000000480)={0x1f, 0x20000000006, 0xf5, 0x6, 0x1f, 0x102000000000, 0x100000006}, 0x237) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000a00)={0x0, 0x4, 0x31}, &(0x7f0000000340)=0xc) bind(r8, &(0x7f0000000900)=@hci={0x1f, r4, 0x1}, 0x80) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000a80)={r11, 0xffffffff, 0x5}, &(0x7f0000000ac0)=0x8) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000b00), &(0x7f0000000280)=0xa2) connect$rds(r9, &(0x7f0000000300)={0x2, 0x4e1e, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) bind$packet(r0, &(0x7f0000000040)={0x11, 0x20, r4, 0x1, 0x5, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x17}}, 0x14) getsockopt$bt_hci(r6, 0x0, 0x2, &(0x7f00000004c0)=""/116, &(0x7f0000000140)=0x74) connect$bt_rfcomm(r9, &(0x7f00000009c0)={0x1f, {0xdb9, 0x8, 0xffffffff, 0x5, 0x3, 0x101}, 0x80}, 0xa) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'dummy0\x00', r4}) getsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000880), &(0x7f0000000580)) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x10) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000000c0)) ioctl$sock_FIOSETOWN(r10, 0x8901, &(0x7f0000000740)) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0xcb, &(0x7f0000000400)={0x0, 0x0, 0x8000000080, 0xe, 0x4}, 0xc) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000180)=@req3={0x14, 0x27a, 0x6, 0x4, 0x1f}, 0x1c) 10:21:05 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r0, &(0x7f0000003380)=""/4096, 0xf) 10:21:05 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(0xffffffffffffffff, r2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 148.993729] binder: undelivered TRANSACTION_ERROR: 29189 10:21:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x7, 0x0, 0xffffffffffffff40) [ 149.055124] netlink: 48 bytes leftover after parsing attributes in process `syz-executor5'. 10:21:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec5", 0x10, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:05 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) [ 149.122558] binder: 9545:9549 transaction failed 29189/-22, size 24-8 line 2852 10:21:05 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000be6000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x129) dup3(r1, r0, 0x80000) getpeername(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, &(0x7f0000000100)=0x80) ioctl$sock_ipx_SIOCIPXCFGDATA(r2, 0x89e2, &(0x7f00000000c0)) 10:21:05 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(0xffffffffffffffff, r2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 149.204705] netlink: 48 bytes leftover after parsing attributes in process `syz-executor5'. [ 149.244228] binder: undelivered TRANSACTION_ERROR: 29189 [ 149.311119] binder: 9578:9579 transaction failed 29189/-22, size 24-8 line 2852 [ 149.374579] binder: undelivered TRANSACTION_ERROR: 29189 10:21:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x9) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x80) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={"d202b999cf85000000000088f301e710", 0x105}) r2 = memfd_create(&(0x7f0000000100)='\')\x00', 0x1) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000000c0)=0xa, 0x4) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000140)="d202b999cf85000000000088f301e710") ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) setsockopt$ax25_int(r2, 0x101, 0x6, &(0x7f0000000200)=0x8, 0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x80000, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f00000001c0)={r3}) syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x2000) r4 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"d202b999cf85000000000088f301e710", 0x1103}) 10:21:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec5", 0x10, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x8, 0x0, 0xffffffffffffff40) 10:21:06 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000be6000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x129) dup3(r1, r0, 0x80000) getpeername(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, &(0x7f0000000100)=0x80) ioctl$sock_ipx_SIOCIPXCFGDATA(r2, 0x89e2, &(0x7f00000000c0)) 10:21:06 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x460c0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000e6b7a97875a71d2134e23cd84881d5d861a972e40f74f248be4f0ab3cf0113183cf4242fbde85bd905d0319ec165e6a83b491df64b4539c7f49d2e7261f4f1649e983418e2cc6abc42448ea2de0070966bc2ebb553090900374117c7b42f462ab58773aeb531acd2bb3f0f37226f4e808301f7cd073715f06b783dfb303f6b83a2250a5383a2ffe4209f0c1a0f81bf4e659e52248c047b992571d253f98fe74bea01e3c2d573f8cce97754c49202103f80b61c4b15b7be59434d99a4"]) 10:21:06 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:21:06 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r0, &(0x7f0000003380)=""/4096, 0xf) 10:21:06 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r2, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r2, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9e", 0x18, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:06 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) readv(r0, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/101, 0x65}, {&(0x7f0000000540)=""/101, 0x65}], 0x2) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@l2, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/169, 0xa9}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000380)={0x3, 0x0, [{0xc0000009, 0x7ff, 0x6, 0x5, 0x7, 0x8, 0x4}, {0x6, 0xfffffffffffffa96, 0x6, 0x6, 0x6, 0x7, 0xe0000000000000}, {0xd, 0x2, 0x4, 0x401, 0x1, 0x100000000, 0x877}]}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="17", 0x1}], 0x1) r2 = accept(r0, &(0x7f0000000300)=@sco, &(0x7f0000000040)=0x80) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'vlan0\x00'}}) [ 150.073317] binder: 9589:9593 got transaction to invalid handle [ 150.079543] binder: 9589:9593 transaction failed 29201/-22, size 0-0 line 2852 [ 150.092576] netlink: 48 bytes leftover after parsing attributes in process `syz-executor5'. 10:21:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x9, 0x0, 0xffffffffffffff40) 10:21:06 executing program 1: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0xdc476f2ca2a5cf68, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x501082, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @mcast1={0xff, 0x1, [], 0x1}, 0x8001}, 0x1c) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x44000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x164, r2, 0x200, 0x70bd26, 0x25dfdbfd, {0xc}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1=0xe0000001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3ff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x20}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x33}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8a4}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) open_by_handle_at(r0, &(0x7f0000000040)={0x24, 0xff, "9a892929968368a81fd40327e54461505accf9b6efc52caf74e8d0bf"}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'ip6gre0\x00'}}, 0x1e) writev(r3, &(0x7f00000012c0)=[{&(0x7f00000001c0)='>', 0x1}], 0x1) 10:21:06 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) [ 150.239407] binder: undelivered TRANSACTION_ERROR: 29201 [ 150.394269] device bridge_slave_1 left promiscuous mode [ 150.400598] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.410674] device bridge_slave_0 left promiscuous mode [ 150.416293] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.449605] team0 (unregistering): Port device team_slave_1 removed [ 150.461175] team0 (unregistering): Port device team_slave_0 removed [ 150.472593] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 150.490139] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 150.517879] bond0 (unregistering): Released all slaves 10:21:07 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r2, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r2, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:07 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r0, &(0x7f0000003380)=""/4096, 0xf) 10:21:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0xd) fsync(r0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1ff, 0x80880) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000040)=0x3, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 10:21:07 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x0, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:21:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x3, 0x0, 0xffffffffffffff40) 10:21:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000100)={'icmp\x00'}, &(0x7f0000000140)=0x1e) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000001c0), 0xc4) 10:21:07 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() sched_yield() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/1, 0x1}], 0x1, 0x0) close(r0) 10:21:07 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9e", 0x18, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) [ 151.009558] binder: 9633:9635 got transaction to invalid handle [ 151.016388] binder: 9633:9635 transaction failed 29201/-22, size 0-0 line 2852 10:21:07 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x0, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:21:07 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9e", 0x18, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:07 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r2, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r2, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x2, 0x0, 0xffffffffffffff40) [ 151.111330] binder: undelivered TRANSACTION_ERROR: 29201 10:21:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x2) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000080)) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)) [ 151.162165] binder: 9660:9663 got transaction to invalid handle [ 151.168409] binder: 9660:9663 transaction failed 29201/-22, size 0-0 line 2852 10:21:07 executing program 6: syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004600002c0000000000009078ac1414aa800000008602000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6fa1e4454658faad5e23000175ac5ff109371f509b6dacbe152d9a72aea074504df663ec4a1df9aa50cd08c52f2979aced260931ae08bdb8777d40bd67547b48e25f4b80f9e2409ef0fed6740756dbe60fe5e84bf865c1bac4dfb307e48d488d2634dfa66f009ba5fc01e3652605251d41bb8234c2ccc9f1c68392c79065c4f2fb427fc9370d869a6e8063149f8b82b742fd498937d7f63f7460220f77e7"], &(0x7f0000000000)) set_tid_address(&(0x7f0000000080)) 10:21:07 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x0, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:21:07 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf02", 0x1c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x4, 0x0, 0xffffffffffffff40) [ 151.350400] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.427762] IPVS: ftp: loaded support on port[0] = 21 [ 152.070130] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.076541] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.083833] device bridge_slave_0 entered promiscuous mode [ 152.110090] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.116485] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.123682] device bridge_slave_1 entered promiscuous mode [ 152.149616] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 152.175641] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 152.247802] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 152.276273] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 152.388687] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 152.395904] team0: Port device team_slave_0 added [ 152.420625] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 152.427770] team0: Port device team_slave_1 added [ 152.452793] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.480547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.507150] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 152.514271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.522774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.543761] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 152.551934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.560618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.798480] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.804885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.811548] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.817923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.825290] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 153.184312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.688670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.776558] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 153.862311] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 153.868516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.876184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.956948] 8021q: adding VLAN 0 to HW filter on device team0 10:21:11 executing program 0: perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) creat(&(0x7f00000000c0)='./file0\x00', 0x8) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:11 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r1 = dup2(r0, 0xffffffffffffffff) write$binfmt_aout(r1, &(0x7f0000001140)={{}, "ca5b8007c3b5ddcba3b45da7710644a32a4e3bfdeb84afab8406f086677dd1bb51577824f5271fcbbf26", [[]]}, 0x14a) r2 = getpgid(0xffffffffffffffff) syz_open_procfs(r2, &(0x7f0000000000)='net/rt_cache\x00') 10:21:11 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x0, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:21:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf02", 0x1c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:21:11 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flistxattr(r0, &(0x7f0000000380)=""/106, 0x6a) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r1) add_key(&(0x7f0000000100)='.dead\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000200)="9802652de58f2d138248f371a995f4a126394bee0b1159e3", 0x18, r1) add_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)='\x00', 0x1, 0xffffffffffffffff) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000340)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) 10:21:11 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r0, &(0x7f0000003380)=""/4096, 0xf) 10:21:11 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x80, 0xa4) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)={0x303, 0x33}, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000340)={0x1, 0x1, 0x3ff, 0x80000000}) read(r1, &(0x7f0000000000)=""/105, 0x69) fcntl$setstatus(r1, 0x4, 0x42800) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x140) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0xb0, @dev={0xfe, 0x80, [], 0x1f}, 0x9}, {0xa, 0x4e24, 0x1, @mcast1={0xff, 0x1, [], 0x1}, 0x6}, 0xffffffffffff9ec2, [0xc652, 0xad3, 0x80000000, 0x3, 0x2, 0x1, 0x5, 0x10]}, 0x5c) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000300)) 10:21:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf02", 0x1c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) [ 155.418841] binder: release 9953:9955 transaction 125 out, still active [ 155.426319] binder: unexpected work type, 4, not freed [ 155.431666] binder: undelivered TRANSACTION_COMPLETE [ 155.451794] binder: 9953:9955 transaction failed 29189/-22, size 0-0 line 2852 10:21:11 executing program 0: perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xf3a7, 0x1, 0xdb, 0xff, 0x0, 0x401, 0x800, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x7, 0x7fff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x9, 0x10000}, 0x8000, 0xff, 0x4, 0x3}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:11 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x0, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:21:11 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0xa, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x40}, 0x1}, 0x0) 10:21:11 executing program 6: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x105005, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@dellink={0x64, 0x11, 0x100, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8, 0x100}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_PHYS_PORT_ID={0x20, 0x22, "d0c87c153c344ef1b3f8441deb967a12190d8d2a639248e3df8d79"}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3d2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) fallocate(r0, 0x3, 0x0, 0x2d42) [ 155.496363] binder: undelivered TRANSACTION_ERROR: 29189 [ 155.502059] binder: send failed reply for transaction 125, target dead 10:21:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @loopback=0x7f000001}}, 0x9, 0x101}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r1, 0x4}, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xfffffffffffffffb, 0x9, 0x1, 0x0, 0x0, 0x3, 0x8284, 0x2, 0xfffffffffffffff9, 0x0, 0x6, 0x1f, 0x10000000000, 0x2, 0x9549, 0x9, 0x2, 0x1, 0x4, 0x6, 0x5, 0x40, 0x80000001, 0x7, 0x0, 0x1800000, 0x0, 0x7, 0x4, 0x31f8, 0x55bc000000000000, 0x7, 0xadb6, 0x3, 0x100000000, 0x8cdc, 0x0, 0x0, 0x6, @perf_bp, 0x8080, 0x4, 0x6, 0x4, 0x8}, r3, 0x9, r2, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffff9c, 0x5411, &(0x7f0000000240)) syslog(0xa, 0x0, 0xffffffffffffff40) 10:21:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf020000", 0x1e, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) [ 155.612253] binder: release 9975:9976 transaction 130 out, still active [ 155.619136] binder: unexpected work type, 4, not freed [ 155.624468] binder: undelivered TRANSACTION_COMPLETE [ 155.630390] binder: 9975:9976 transaction failed 29189/-22, size 0-0 line 2852 10:21:11 executing program 6: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2282, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000002c0)={{0x100000000, 0x8}, 'port0\x00', 0x8, 0x20042, 0x40000000000, 0x0, 0x100, 0x3a5, 0x9, 0x0, 0x1, 0x7ff}) r2 = socket$key(0xf, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r1}) sendmsg$key(r2, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300030c000000000000000000000002000900000000000000000000000000230006000000000002000000e0000800000058186fe8b90002000100003f3a8cb900070b00000000030005000000000002000000e000000100e900000000000070f9af4e9e5ae9b043cbc1b578e914067e41ec0adefe69416525a126603ab46a77493ee2013f6229bb3b96b497d10d5c62394fe0b9fa0ac58f0826ce0524d9795c7a66ce2f8f7728301752eb640a7a34d4b8478622419f3190"], 0x60}, 0x1}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x80, 0x0) 10:21:11 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x2000000008912, &(0x7f0000000000)="025cc83d6d345f8f760070") listen(r0, 0xffffffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x40}, 0xb) r3 = accept$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) write$binfmt_script(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="11"], 0x1) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x7fc, 0x0) ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f0000000100)=0x4000) [ 155.724163] binder: undelivered TRANSACTION_ERROR: 29189 [ 155.729746] binder: send failed reply for transaction 130, target dead [ 155.874299] device bridge_slave_1 left promiscuous mode [ 155.879932] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.892326] device bridge_slave_0 left promiscuous mode [ 155.897870] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.937559] team0 (unregistering): Port device team_slave_1 removed [ 155.947496] team0 (unregistering): Port device team_slave_0 removed [ 155.958920] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 155.975334] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 156.012739] bond0 (unregistering): Released all slaves 10:21:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000), 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x9, 0x109200) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000200)={{r2, r3+30000000}, {0x77359400}}, &(0x7f0000000240)) r4 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r4, &(0x7f0000003580)={&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000000140)=""/112, 0xfffffc61}], 0x1, &(0x7f0000003500)=""/106, 0x6a}, 0x0) 10:21:12 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x0, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:21:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:12 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x420000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000428bd7000fddbdf250100000028000100080008000300000008000b0073697000080009001d0000000c00070009000000220000000800060001ffffff4658177e7bbb8bf767310663d5c11b3a26544d78da538f7773be825d0980797b76f61992129ef710ebd8755a2e8935413e8bdb34933c0b30e8f8ff2351d3b2deb2bacf7205700136c92d92f19f9c6ce7961e8a4d56717abe6b193c828cd83f1120c8455385d0a2de053c6f5da702e9dabf42a30df88b3ccf60914300cf5f5e754f2b8af6"], 0x44}, 0x1, 0x0, 0x0, 0x44050}, 0x48811) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x7, 0x100, 0x0, 0x96c, 0x0, 0x8, 0x8000, 0x4, 0x1, 0x6, 0x8001, 0x3, 0xfffffffffffffffd, 0x0, 0x10001, 0x6, 0x81, 0x5, 0x10001, 0x6, 0x7, 0x9000000000000000, 0x9, 0x8000, 0x5, 0xffffffffffffffff, 0x9, 0x3412, 0xff, 0x40, 0x0, 0xfffffffffffffffd, 0x4d5f, 0xffffffffffff8000, 0x1f, 0x1000, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x2000, 0x81, 0x0, 0x7, 0x80000000, 0x200, 0x400}, r4, 0x6, r3, 0xb) 10:21:12 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r0, &(0x7f0000003380)=""/4096, 0xf) 10:21:12 executing program 6: socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x37, &(0x7f0000000040)=0x0) io_submit(r0, 0x2, &(0x7f0000001bc0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0xa02, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000003c0)={0x4614883a, 0x400, 0x4}) ioctl$VT_WAITACTIVE(r1, 0x5607) r2 = syz_open_dev$audion(&(0x7f0000000400)='/dev/audio#\x00', 0x8000000000200, 0x1000003) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0xfffffffffffffffb, 0x1, 0x2, 0x0, 0x0}, &(0x7f00000000c0)=0x10) ioctl$TIOCCBRK(r2, 0x5428) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000300), &(0x7f0000000380)=0x60) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000140)={r3}, 0x8) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) 10:21:12 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={"657267c71ac977ead9c300"}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x5, 0x1000}, 0x4) listen(r0, 0x0) accept(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) 10:21:12 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf020000", 0x1e, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) [ 156.530619] binder: release 10027:10028 transaction 135 out, still active [ 156.537640] binder: unexpected work type, 4, not freed [ 156.539032] sock: sock_set_timeout: `syz-executor4' (pid 10030) tries to set negative timeout [ 156.542957] binder: undelivered TRANSACTION_COMPLETE [ 156.543187] binder: 10027:10028 transaction failed 29189/-22, size 0-0 line 2852 10:21:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:21:12 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf020000", 0x1e, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:12 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x0, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) [ 156.616083] sock: sock_set_timeout: `syz-executor4' (pid 10038) tries to set negative timeout 10:21:12 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) r1 = userfaultfd(0x800) sendfile(r0, r1, &(0x7f0000000040)=0x51, 0xada) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB=':\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1c}, 0x1}, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0x0, [], 0x2, &(0x7f0000000080)=[{}, {}], &(0x7f00000000c0)}, &(0x7f00000001c0)=0x78) 10:21:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000680)="295ed277a4200100360070") r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7, 0x400000) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x602, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f0000000100), &(0x7f0000000480)=""/16}, 0xf) 10:21:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 156.756276] binder: undelivered TRANSACTION_ERROR: 29189 [ 156.761986] binder: send failed reply for transaction 135, target dead [ 156.833103] binder: release 10061:10062 transaction 140 out, still active [ 156.840182] binder: unexpected work type, 4, not freed [ 156.845534] binder: undelivered TRANSACTION_COMPLETE [ 156.851180] binder: 10061:10062 transaction failed 29189/-22, size 0-0 line 2852 [ 156.914925] IPVS: ftp: loaded support on port[0] = 21 [ 156.958414] binder: undelivered TRANSACTION_ERROR: 29189 [ 156.963993] binder: send failed reply for transaction 140, target dead [ 157.458986] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.465382] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.472567] device bridge_slave_0 entered promiscuous mode [ 157.498832] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.505247] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.512449] device bridge_slave_1 entered promiscuous mode [ 157.537550] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 157.564106] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 157.635609] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.663415] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.691317] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 157.698467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.788201] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 157.795504] team0: Port device team_slave_0 added [ 157.821145] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 157.829145] team0: Port device team_slave_1 added [ 157.853865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.880581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.906770] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 157.913873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.922288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.943687] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 157.950774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.959161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.191931] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.198334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.204979] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.211528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.218897] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 158.624469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.089116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.169483] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 159.250559] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 159.256730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.264508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.338654] 8021q: adding VLAN 0 to HW filter on device team0 10:21:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x400000000000000, 0x10000) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") r2 = request_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000100)='\x00', 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$reject(0x13, r2, 0x41, 0x0, r3) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@remote}, &(0x7f0000000040)=0x14) syslog(0xa, 0x0, 0xffffffffffffff40) 10:21:17 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x3, 0x400000) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) socketpair$inet(0x2, 0x0, 0xff, &(0x7f0000000100)) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000000c0)={'ifb0\x00', 0x5}) unshare(0x40000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000030000000000000000020000e2548e24881e0021000000000000000000000002000000ce251c93abac8a00000000000000000000000000000001a0a76881da815d00000000ce60228865ab2e05c21e7bf1b04b4cbdeda221890dd5ef1d3fe8ed4a6707aeff47829f0a4e2bf88a749fd12b1291ee0030298b5d1a4bb2fe4f6eb66831d8ea80cef2b3fe471b10349976f004a2ad235c1d32533788f29f6ce799803f220004000000000000f395"], 0x58) 10:21:17 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x0, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:21:17 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf02000000", 0x1f, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:17 executing program 1: r0 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x800) fcntl$setpipe(r0, 0x407, 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000000000)={{0x5}}) 10:21:17 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r0, &(0x7f0000003380)=""/4096, 0xf) 10:21:17 executing program 6: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ae6000/0x4000)=nil, 0x4000, 0xe) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x100000a0000, 0x0) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000080)={0x0, 0xf000, 0x141c, 0x2, 0x3}) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040)={0x3, 0x5}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6f) 10:21:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:17 executing program 6: r0 = socket$inet6(0xa, 0x41000000000002, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x204000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @broadcast=0xffffffff}}, [0xff, 0x1, 0x80000000, 0x9, 0x2, 0x7ff, 0x68, 0xfff, 0x9, 0x401, 0x3, 0xd2, 0x9, 0x1ff, 0x2]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={r2, 0x2}, &(0x7f00000002c0)=0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) [ 160.791323] binder_alloc: 10338: binder_alloc_buf, no vma [ 160.797060] binder: 10338:10340 transaction failed 29189/-3, size 24-8 line 2967 [ 160.828762] binder: undelivered TRANSACTION_ERROR: 29189 10:21:17 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf02000000", 0x1f, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000d80)=@ipv4_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_MULTIPATH={0xc, 0x9}]}, 0x28}, 0x1}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x21}, r1}, 0x14) 10:21:17 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x0, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) [ 160.837496] binder: 10338:10340 got transaction to invalid handle [ 160.843895] binder: 10338:10340 transaction failed 29201/-22, size 0-0 line 2852 10:21:17 executing program 3: r0 = socket$inet6(0xa, 0x7fffffffffff, 0xec) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x200, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:21:17 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}}, 0x14}, 0x1}, 0x0) 10:21:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:17 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) 10:21:17 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf02000000", 0x1f, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) [ 161.036088] binder: undelivered TRANSACTION_ERROR: 29201 [ 161.062429] IPVS: ftp: loaded support on port[0] = 21 [ 161.122922] binder_alloc: 10379: binder_alloc_buf, no vma [ 161.128716] binder: 10379:10384 transaction failed 29189/-3, size 24-8 line 2967 [ 161.178752] device bridge_slave_1 left promiscuous mode [ 161.184537] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.196888] binder: undelivered TRANSACTION_ERROR: 29189 [ 161.202778] binder: 10379:10384 got transaction to invalid handle [ 161.209152] binder: 10379:10384 transaction failed 29201/-22, size 0-0 line 2852 [ 161.225196] device bridge_slave_0 left promiscuous mode [ 161.230842] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.247098] binder: undelivered TRANSACTION_ERROR: 29201 [ 161.253156] IPVS: ftp: loaded support on port[0] = 21 [ 161.288323] team0 (unregistering): Port device team_slave_1 removed [ 161.298451] team0 (unregistering): Port device team_slave_0 removed [ 161.309647] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 161.328513] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 161.358171] bond0 (unregistering): Released all slaves [ 161.456102] IPVS: ftp: loaded support on port[0] = 21 [ 162.054419] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.060879] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.068311] device bridge_slave_0 entered promiscuous mode [ 162.106515] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.112971] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.120742] device bridge_slave_1 entered promiscuous mode [ 162.158434] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.196322] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 162.308541] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 162.349258] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 162.517017] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 162.524841] team0: Port device team_slave_0 added [ 162.563105] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 162.570470] team0: Port device team_slave_1 added [ 162.596397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.636659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.675499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.703638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.020215] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.026640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.033336] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.039722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.047685] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 163.936138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.343582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.427372] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 164.511214] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 164.517437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.525230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.605204] 8021q: adding VLAN 0 to HW filter on device team0 10:21:22 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x301000, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f00000069c0)={&(0x7f0000006800)=@can={0x0, 0x0}, 0x80, &(0x7f00000068c0)=[{&(0x7f0000006880)=""/29, 0x1d}], 0x1, &(0x7f0000006900)=""/178, 0xb2, 0x7}, 0x10000) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000006a00)={@mcast2={0xff, 0x2, [], 0x1}, 0x1f, r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0xf503}, 0xc, &(0x7f0000000040)={&(0x7f0000000ac0)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0x108}}, 0x14}, 0x1}, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000fff000/0x1000)=nil}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84800) ioctl$sock_ifreq(r3, 0x891d, &(0x7f0000000100)={'erspan0\x00', @ifru_names='veth0\x00'}) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f00000000c0)) r4 = dup(r2) recvfrom$packet(r4, &(0x7f0000000080)=""/58, 0x3a, 0x0, 0x0, 0x0) 10:21:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:22 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000040)=0x7f, 0x4) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x80) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000080)) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000240)=[{0x28, 0x29, 0x2, "2b07df2fd0846bc0964f4ffde3d917e30d"}], 0x28}}], 0x1, 0x0) 10:21:22 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000001c0)={0x0, {{0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x244180, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/141) syslog(0x9, 0x0, 0x330) 10:21:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:22 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}}, 0x14}, 0x1}, 0x0) 10:21:22 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) 10:21:22 executing program 4: r0 = socket$inet6(0xa, 0x7fffffffffff, 0xec) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x200, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) [ 166.074709] binder_alloc: 10666: binder_alloc_buf, no vma [ 166.080403] binder: 10666:10668 transaction failed 29189/-3, size 24-8 line 2967 10:21:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x4) recvmmsg(r1, &(0x7f0000001b40)=[{{&(0x7f00000001c0)=@alg, 0x80, &(0x7f0000001440), 0x0, &(0x7f0000001480)=""/177, 0xb1}}, {{0x0, 0x0, &(0x7f0000001ac0)}}], 0x2, 0x0, &(0x7f0000001c40)={0x77359400}) 10:21:22 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x3, &(0x7f0000000980)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x458082, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x200400, 0x4) 10:21:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x1, 0x200, 0x8000, 0x100000001, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r4, 0x7}, &(0x7f0000000180)=0x8) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000001c0)="0f009c8c007800000f20c035080000000f22c0b805000000b9909d00000f01d90f09b9800000c00f3235000800000f30f30f10a221000000360f01c8d9f1b8004000000f23c00f21f83501000e000f23f80f5d03", 0x54}], 0x1, 0x0, &(0x7f00000002c0), 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x101000) r6 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x0, 0x2000) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000002c0)={0x2, r6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:21:22 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}}, 0x14}, 0x1}, 0x0) [ 166.129636] binder: undelivered TRANSACTION_ERROR: 29189 [ 166.135527] binder: 10666:10668 got transaction to invalid handle [ 166.141989] binder: 10666:10668 transaction failed 29201/-22, size 0-0 line 2852 10:21:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 166.292473] binder: undelivered TRANSACTION_ERROR: 29201 [ 166.400081] binder_alloc: 10705: binder_alloc_buf, no vma [ 166.405854] binder: 10705:10708 transaction failed 29189/-3, size 24-8 line 2967 [ 166.420218] binder: undelivered TRANSACTION_ERROR: 29189 [ 166.426674] binder: 10705:10708 got transaction to invalid handle [ 166.433132] binder: 10705:10708 transaction failed 29201/-22, size 0-0 line 2852 [ 166.452594] device bridge_slave_1 left promiscuous mode [ 166.453812] binder: undelivered TRANSACTION_ERROR: 29201 [ 166.458198] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.482776] device bridge_slave_0 left promiscuous mode [ 166.488366] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.545390] team0 (unregistering): Port device team_slave_1 removed [ 166.555351] team0 (unregistering): Port device team_slave_0 removed [ 166.565986] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 166.585224] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 166.615058] bond0 (unregistering): Released all slaves 10:21:23 executing program 6: modify_ldt$read_default(0x2, &(0x7f0000000000)=""/1, 0x1) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0xc0202, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='d'], 0x1) fallocate(r0, 0x0, 0x0, 0x1b0c) write$binfmt_aout(r0, &(0x7f0000001780)=ANY=[@ANYBLOB="cf0104051201000099020000e1ffffffd3030000ffff0000000000000000000013033428db53d01a616f5968783dae30206f12d52142d5b3a73f325de4e6dffe821ae3f433aff31a0a05b5f6cad8b20d14d77a68c84575cfaeb344306aeadcc440d90a420e1241755c377664b5b91a2813be370b57f8365c0c7e3bfd798f712d5953e743bcb29c21f9db5c1dd4c02d154a48c9a5499729e1ee6c82e811ac3261820ea009f188243eb55db8ed61ba453e27e5ffc3204fc24bc2b3e1c848c8a10f3769606ca2731e06d922f3672db17fa19c70e87f91be6557662b57e2cd195f3f9656a75f5414966faa4c5c5d4a15818b58c19e66dcdfc1c1e480c4efc3a331379196b9f7e2864788f64b779ea8dbe02f3da88c7fd3d77de5f26a3d81dd2747b0cf3e9fee62be277f6d46d395973eb7be966ea37d81752e45def928da6cf91b0f88a3b22174a09ff976edf4506846ba6737c02d9f50b3dc2646f34226a3491fb1068dfc7265b9fb73c5fcc90cd84db9d8defddd8c88e80a9a68c924bbad8d40b6841c1483c1f48265930e1b63ec707e52e6088abc3231658fb55f7640a91a468f83c08936e02b24dfbc26e0027114a0c32a7bf8455df4091f84d7f3d8b8d62a3043b1fd724915ca9076aef53f3c6135da2bc22da45f171ae0c628035d3d308c5f34a531fea9df733c4064a323d5ca902eca1f26ab0a00be1e5b184ca1d30917f885d8ce0401b0dc0735f2aab30e3d30a4da7781397d28d876be4f1aa484844ec18ac0637a31975c59a1b80d52e23d0b3376432e6cc4eceeebea1db7813f739ccace88ba8b4c5fabadf186c30139227879b64b099f2e00b289e7c0fbf10174bfc4bfd074dbee76c82bf86273c68c2631c678a1c6823f7b1a8cc867f22a377466cddb1325b9df58036c09c2319cf85cbe612697f236c596a72aa4c56bff4acc6f016cc9fdbd6c264b6f946a5541195c275b67fd28527c55fad39301574aed4ed8e19d34bd06579f696557fb3ca992d3fe3dee7bbd546a7f72d70fb1ab6eceae8e8e2d1206ea57fb3814bc2345d71d6a46d7a8fe4a7b95d2c062a8c34cb5d0072b123d6b2918332f3e737c1306ad5c19473fde859bee54c3fc9eba17baf37baf4d680e3ae323ac9b2eb298b2b648560425eb32723ff43897efc284f89bdb6c427da18a1da282805a5b9837467a0296c1fef58c6cee976a0e20902eb57587a46a59090f6f43eb257688a9d45f5fa3cce2a4fc6c4c4f48b26b5bbb9636e450eed3d70104178f284067fb87d29bfd8a69ef33fd3b7e90a62e0e9de265329c9d96146b4604d8b866d664901d189915d4460534a7c19a694d71484c9262d791f88a390e2de963708e0b77c9c0cf5c0d2f97a626b7de7bc145ef6239d12e7bb6e936d289825903fe7f48ede505e52a1598de4d007497b8cf381bbc8bee733264eff264f9ca9731352ba6bab27d8889c6beca71cb558d35b0870c3c4fc34b6febbe8386498af1dbf7e4041f53724daf56f755b18a782a3cde433ac77bf5da9b0ff479e3645a906470e8d3acd33027281b70a5fc7048c1b1c8ad833f79b7b084e74e0badba84cd5a71f04747155682d96984c4d50f338090a9c014feed47f8ee04e3271ba42ebdcfc781df0fc4fc73a489c78efa074d44328454142e53e5a58a1d3dfe05ba0185f609dd05d9bb8e682833d5bf0e8d21910d77e76789ee77de138a174905c9f477367557c4397445f4d69e1d1fbcff86cfafe5b00a25039128c28745a4fe7301ca0434a19df3ce43936018ae45f433af1a4c39c316f0178acb512a60644e4e6d3e95763b5f662b2059c8737d4c19c060c7c083b181a08d457ee0d3b30da352698a4b3b082675a2a6be87187d9181c43805af30616476f66224f81e25a5e33fb88b3126363f73db371820732c5ebfba0c59dadf06bb930e7cf374deeb77d10eadb3eac9fbdcc1b2f6cab631446752ed98096949c6b343e6d06d3dcde533123d1e6e64b4565c42b185f9af375ae84d06d7a1fdc40018cfd149f50e7ff5090c9b916ae7b505af70c78a2b1f8cb3fefdfa466d748e74eb266ae944ddafd84019189c91d5f99d5ef032c2d63db656f9ed013540c77e28c320f40a7bd9278df0f6bd049e5fd7261705add52d254cf034d8fbaf805baa62af3bd5337530fdafc2b03a3888d2b31028a60d2f23e125706598f51007a7e2e784acf88df8eac1feb75a47a9c4384e8f284a615ca18c106b59335a31e44c912b6b6047d12174714f501b041e3b032f794f497cdc8d3a91fd72a658d7705a6a42f2cb614e6a7c1065915889523e8e0686c06e119705b932a85c43279ce36472d5382c84fe66b675b5cbb1dddf74014e4de507b63380c4342296bd8b685a4da8ee1dd7388b2108a3b03e4ca7963b11e697acecfff872117e25f27a545d42339538442827780f136e9761b981c8a1df65d6bb007cedc2ae6174ae504d992d3a950e9b4b372bb1da20de729e1cbf0508485e37881c68af05a1b687f744023723b3ec556aea53604a624bf5efd981a58a38b03c6bca3d5ca906bdbd4fd2cc46ffba1a9a171deb43adf86e762e8c6c467cffa720f8f1ed649707e1bab6e11659aae858b52bdb891f29d1b469cd35253519ed2f1e39a3da313a23b64384cb1e6a75c7456966d3472db89af54bc113976ce796c9a81debbb17defa5c7f51b95112c24087274eb38f77d96c404bafadb2e81f6c984adbd243867e3407378fe9e28fa463b2c4dc6ada2c9ee9d906d67616998183e762f90f50ac94350170f85900711b18a12bbb68f26d50fdf6f6012807480b2f72faf71ff22f4057d5ea4e518b31eaa51819a1d0ea2a8f939586eb6fbbfde190f1504dd130dae835092b7875bdbcc908602d09d112772ffaaac22389afeaec28625d1cf51573ecfd6148f03547f634fe24d6a7550f1b0c8147d6d6ec63a1409d190acdd9f429f904f25c7864cd33c4a5c2c715036dc78b24f8d877bb7f7531d0ff5d630109af6b19068d657cb580e07b9d6af46d180b2fe9e6677ebd53f11d86f0eb7796f6295329008e40d21b3e4fce1a75a1abe4a6d9dcb1b6c6fb7d89605268d188ab551b8744c673a6e092fe794ad7f892acf4b8f7ce85233bad25e6be1eb2fc40b8f814bd9b5c805fade67003c375b2c4477acdbcfac65afa4a978f78a1d80f3c526eab9ff85a3a1d9e0b6cbae1679e7ef685a9a5f52286c72ec58c7f388a20d0d551ae5eb22a531254c908a6d0aec988d8f2387e997355d30fb0cfa261b54c2c024423f554ed251680cbe27f246c8b85950428e1845e1ac9b8d7275b0aba25539418bd7d802f97246f1a9e374e396541f88bcf49d8769079376ad57b23dc4ae47eb3726941abf01c7af2a2291d256a48b6615311b60ff567e7223fb891b8083431cac111eca736394b0353ac3720070962d9a422c2a02e1aad18983ef7ef13668f0f7baeba966897dc542772b80794ad12ca7eec3cae93a8cb16abeba969119b6cde2edbae110aee5a189bae038718d088e6b1afb2e61e94f61ace07cd6c929e7f5f59c7197918134c5d5acfffc927c3cbca4718e04409e8d0862ad9522b4370c27c04deac2cb170aabd6aef32fd678baa01ef9838b800c928ed4b8c8d33a7d9d985876d7f096cafd481cce8448d70b51e6f9420ec4bee4d1ec8d729f11f64aa77c4457fb66ead6c55eac2cc74235cf63ebfa85112071b06df6dfc2e299f863771d374055303ef0637f434dedc50e61cf6f5e26d1304cf79cb65deca8b7a42605d2a4e5173ff002baedd563edd685f5d444cd64358c37d229ded44f0c542ede1fe8bd3a8151e1893e8e1dd3d00be0517d4579aa0a6920e23175286f872166b95b6c13698f3c914105e4bf62788145d7fb4770d18c1158fc7424b36219eeffeafc7b239dbaf4027f0af356a9c21420e3d8325383578d03f1491d6bdac38d051d219e7528bde53eaea7ace0075b14bbdf0647a74d263d0685f95907b88a12f3e2084bfbe8af4b917aeb099f10e0140f7ef53a6428134da04b74763f96ec154c9c223ca0f8d7a27698c588a82b87a8f9d5a2f21693ba23d36db32e26afb5795f43147ec1d5a7b651a6fd0e813cddcf2285f29aa510d78a9d6feb707969593297ce8601aeb375a391a4f45aee4033717ffd764860bd3b08ec9b903d53960f802bbf47501c95773f0e7ed3d3b2492292b84e66ccdd5ab1fa5974ffdbd5d001a4ba383ca46c0dc4b97af8915b97ba31ddc5e22f709d3eca8e930fb339d0487df91498e497689fac0f74fdbcb95f86e42a6f961886bd4fb7bde5bd4084773618c35a99e4dfed4f3cce1681c68b94876b4cc7d649c98d48e3a72fcb50026baa9dec2e72ace935522e36ebec278313f7f10baffc707356e7071134d0ec97ea0be7b94df774eac6e5bfb4dee5014a133f837e817958d6ae3efd1840f39138363d5e4bd005fd634ff166754ade0999cd19df8be209f32368556137b2f425d1b74a10084cc01e4b118d117e558ab8083efda2203de9b57f53bd783498638181cc0d6229bc2779caa06c2425efa1ea3c5a2ad8455f8fab31d52dc5f8ef7c75a396a4d31b062f5b9e0d329af0eaccf44319b395000679a78adb3d4e01b117beef484071e603dbc4c465b46eca815dfd889dce1ef3fee8ddb20b9e1bd3e1aedc80f86beb03088f7ed5c14e91a937144b6e684741f914c7df5e89e7a85da047f6feeb1ba8c1f623425d230c7584e825a00f64d43bd3b429ba2dcac17387335000eae53de6e0f69c67940101db19803fc43331bc10189d2629d87e2e72c3b617f26d14d6bc989ba317ddff6c242bc6e890713f81421a2ad65d94b0663e6d0b44371142573cc36dfa45ef0c1790f2a2adfdb4e2a76e1f77320a827324cab1b9c9f0e79f1b02fecc601666683b5feecd5dfc39bd43a66c0f6f29906e5a8ff783a2c000ec1f94378863fe7d177cd4279fec7b06d064740590f8ca00bee4ed2850d63d6dac72e63cde8c8b463e50d0dfb6a5729d2f8bc1f1e38a242581a0bd5b56118b512ead4e3ab33648ea5772cd2a52b5728eda2afe93416f4c5c307338fb2e36f0113e69ebfc31517c4b6c4ea1235641a39eb92cf97eb425a3df8bfd8b18949b5f8057d2dd407ca8c122cd76d0e884e0196061c95846771f2324e3c8cfc0d6d0c43b694a7f7ab271f61717aafc89457ca386f47013747ed56c9516e31343e716eafc2bdd7d708cc7cf92f6de9d2a5922c74b093352ecbfde6dacd61328d5c38f35d7c0da60ac16fc2cd16832d99996bb040427228984682536c4a55543a0d26e9622671b8f86620cc26991d4dfcad58d3c9d2abb9b86317b8756c278a4971bb5be3240e06cb0c5bf43db8dc05312a318de6c5b5ea3241693fbdef3b685693338373eaa91b58e196d54c481a5c69cfd305de57c06e2adba5e781e082d7bbc96d8691923bd3604b2ad0d598ecb6413b8127a19d4d379f265d8dc4778aa50524b0520ebef2b12fd5a78fa0993fab81c669223fd4e66d6cc394a6accb0d95ac297517101cc4cdc50d5f5f4e4637571f6e5123f2c72ab43943291d07ffec0089cc14c7b9e92ad4219a7b1229fa19c77fb7997264fd057b1219a46f58a546a65d07a6a1dbc78f024598927727eaea13cb90597c26793e0f2fdc240c4aaffdaf69fb1992828ead3cb15377ff32630c9811a8972efc5a3b925aa5cbfa182cfd041db0f0cae7ee4678f0970876a936e637b5745197aa0e9bf0fe3e2d031b6f058820ceca3f07d776e4d7f843cfa540a53a552c73f71e48250fdb4ed32fdb31f11ad4a4fcd4139f"], 0x1000) close(r0) 10:21:23 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) 10:21:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:23 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic]}, 0x14}, 0x1}, 0x0) 10:21:23 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffff7, 0x2802) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x14}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:21:23 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000080)=0x8001) sendfile(r1, r1, &(0x7f00000000c0), 0x100) 10:21:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:23 executing program 4: acct(&(0x7f0000000040)='./file0\x00') socket$inet_sctp(0x2, 0x0, 0x84) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa000000000008) getgroups(0x2, &(0x7f0000000080)=[0xffffffffffffffff, 0x0]) setfsgid(r0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) [ 167.042963] binder_alloc: 10719: binder_alloc_buf, no vma [ 167.048671] binder: 10719:10721 transaction failed 29189/-3, size 24-8 line 2967 10:21:23 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic]}, 0x14}, 0x1}, 0x0) 10:21:23 executing program 6: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000280)={{0x2, 0x0, 0x4, 0x5, 'syz0\x00', 0xfffffffffffffffa}, 0x1, [0x1f, 0x6, 0x81, 0x100, 0xffffffffffff7fff, 0xffffffffffffff00, 0x1, 0x8, 0x9, 0x101, 0x80000001, 0x0, 0x2, 0xc2, 0x2800000000000, 0x9e, 0x4, 0xffffffff, 0xff, 0xfffffffffffffffa, 0x7, 0x3, 0x40, 0x20, 0xabd2, 0x3d7d, 0x8001, 0x5, 0x4389, 0x2e2000000000000, 0x1, 0xfffffffffffffffa, 0x40, 0x0, 0x35, 0x9, 0x6, 0x3, 0x20, 0x81, 0x3, 0x2eb, 0x4, 0xf45, 0x1, 0x1a612e34, 0x2, 0x5, 0xfffffffffffffff7, 0x2, 0x9, 0x5, 0xffff, 0x7, 0x1, 0x1, 0x8001, 0x101, 0x8000, 0xd11e, 0x1, 0x0, 0x4, 0x64, 0x8001, 0x0, 0x80000000, 0x8, 0x20, 0x3, 0x0, 0x7f, 0x3, 0x2, 0x8, 0x80000001, 0x6, 0x80000001, 0x1, 0xac, 0x9, 0xf9b, 0x4, 0x3f, 0xfff, 0x10001, 0x7, 0xfffffffffffffff9, 0x40, 0x8, 0x400, 0x4, 0x1, 0x6, 0xc026, 0x4, 0x7fff, 0x400, 0x86, 0x7, 0x100000000, 0x800, 0x200, 0x6, 0xe948, 0x100000000, 0x8, 0x7, 0xfffffffffffffff7, 0x1, 0x1, 0x5, 0x2, 0x3, 0x8, 0x401, 0x3, 0x7f, 0x80000001, 0x71, 0xa71c, 0x9, 0x6, 0x19b, 0x1000, 0x0, 0x3, 0x4], {0x77359400}}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x2, &(0x7f0000008540), 0x8) 10:21:23 executing program 3: r0 = socket$inet6(0xa, 0x80006, 0x100000000000004) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x80603, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x1) ioctl(r0, 0x4080008912, &(0x7f0000000000)="025cdc3d6d34a7727600702c38c51fffa7dd9e1fa661b28e85407277da9cb6774db7e0f8b537bcd5bc93e438f4f77c74758e8c05056d1b3431fcea58887deae4a03415c495f88aaf3cc50a8e80f2a3967edb09db5522b8b582695bae5a3f190ea3785fff7f000000000000f0b4ea7b29f9d0add007db7171443ce8") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) [ 167.150204] binder: undelivered TRANSACTION_ERROR: 29189 [ 167.156495] binder: 10719:10721 got transaction to invalid handle [ 167.162825] binder: 10719:10721 transaction failed 29201/-22, size 0-0 line 2852 10:21:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:23 executing program 1: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 10:21:23 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic]}, 0x14}, 0x1}, 0x0) 10:21:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000f12fd8)={&(0x7f0000218000)=@in={0x2, 0x4e20}, 0x10, &(0x7f0000f1dfc0), 0x0, &(0x7f0000f13000)=[{0x10, 0x0, 0x7}], 0x10}, 0x20000010) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x10000, 0x0) setsockopt$ipx_IPX_TYPE(r1, 0x100, 0x1, &(0x7f0000000240)=0x3, 0x4) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000200)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/connector\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000080)={{{@in=@rand_addr, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000180)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', r3}) 10:21:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 167.359309] binder: undelivered TRANSACTION_ERROR: 29201 [ 167.407245] IPVS: ftp: loaded support on port[0] = 21 [ 167.462065] binder_alloc: 10781: binder_alloc_buf, no vma [ 167.467746] binder: 10781:10782 transaction failed 29189/-3, size 24-8 line 2967 [ 167.523538] binder: undelivered TRANSACTION_ERROR: 29189 [ 167.529326] binder: 10781:10782 got transaction to invalid handle [ 167.535672] binder: 10781:10782 transaction failed 29201/-22, size 0-0 line 2852 [ 167.586224] binder: undelivered TRANSACTION_ERROR: 29201 [ 168.110083] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.116632] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.123882] device bridge_slave_0 entered promiscuous mode [ 168.149812] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.156217] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.163453] device bridge_slave_1 entered promiscuous mode [ 168.189395] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 168.215610] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 168.287290] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 168.316514] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 168.428151] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 168.435556] team0: Port device team_slave_0 added [ 168.459909] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 168.467166] team0: Port device team_slave_1 added [ 168.492791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.521130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.547078] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 168.554284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.562760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.583544] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 168.590666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.599170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.831100] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.837524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.844188] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.850548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.857793] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 169.249305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.727425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.814730] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 169.898321] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 169.904552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.912189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.989928] 8021q: adding VLAN 0 to HW filter on device team0 10:21:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:27 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x20) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setsig(0x4203, r2, 0x4, &(0x7f0000000040)={0x2f, 0x8, 0x1, 0x4}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 10:21:27 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="0047fc2f07d82c99240970") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(tea-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x204000, 0x141) ioctl$BLKRRPART(r3, 0x125f, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) sendmsg$nl_xfrm(r2, &(0x7f00000defe0)={&(0x7f0000a1c000)={0x10}, 0xc, &(0x7f00005ec000)={&(0x7f0000b8ff38)=@getsadinfo={0x14, 0x23}, 0x14}, 0x1}, 0x0) recvmsg(r2, &(0x7f0000000000)={&(0x7f0000f7ffa8)=@alg, 0x80, &(0x7f0000ec4fd0)=[{&(0x7f0000f81000)=""/4096, 0xfffffe0f}], 0x1, &(0x7f0000000040)=""/87, 0x57}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0xc8000, 0x0) prctl$setmm(0x23, 0x4, &(0x7f0000ffc000/0x2000)=nil) 10:21:27 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x200000000003) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x0, 0x7530}}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) write$binfmt_aout(r0, &(0x7f00000002c0)={{0x107, 0x8, 0x5, 0x177, 0x241, 0x8, 0x3e0, 0x8001}, "02fd9ef5e21d0297f3cb57ab71", [[], []]}, 0x22d) 10:21:27 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x30, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f"]}, 0x30}, 0x1}, 0x0) 10:21:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) 10:21:27 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="0047fc2f07d82c99240970") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000000)={0x74f}, &(0x7f0000000040), &(0x7f0000000100)={0x77359400}, 0x8) ioctl$TIOCPKT(r1, 0x5413, &(0x7f0000000080)) 10:21:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:27 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x30, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f"]}, 0x30}, 0x1}, 0x0) [ 171.534834] binder_alloc: 11057: binder_alloc_buf, no vma [ 171.540543] binder: 11057:11063 transaction failed 29189/-3, size 0-0 line 2967 [ 171.548917] binder: release 11057:11063 transaction 163 out, still active [ 171.555936] binder: unexpected work type, 4, not freed [ 171.561293] binder: undelivered TRANSACTION_COMPLETE 10:21:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:27 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000)=0x8005, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040), 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd0600fe8000000000000000000000000000aefe8000000000000000000000000000aa00004e20c012cf2a797c484376d95bec98ea0bd4d0f70321c086371b02d4c629619dd0718e84499ef9a6e15d4f7c6224afb86bacf886734d10ce659fd261bb368868da94f288703c2552ed212e0c12a015907b69d34919c538565b4a49f9b6ff9fa8ec67a3e55ea167542528768252c3505ab130d50956abc135957c523e7b2df8a7a58350c361e10ffe2aae8285db", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="09a22695364355099070855a547acc9822e44c320f134adf280aa17d99c07121426e7ec08d96bad31f5197a3c988d48065b8eb92491804bd62fedd3c9799941ed130a78aaa5b01f5f8a1f83edbd2abe5977530857bb75753833437642646dfcc4e731603458f861191082a1973744f523369419e5830594d32045aa3"], &(0x7f00000002c0)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000300)={0x4, {{0xa, 0x4e21, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}, {{0xa, 0x4e22, 0x2, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x108) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x9, 0x7f, 0x1}, 0x8) 10:21:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4001, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x20000, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000040)=0x3000) [ 171.673617] binder: undelivered TRANSACTION_ERROR: 29189 [ 171.679607] binder: send failed reply for transaction 163, target dead 10:21:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) 10:21:28 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:28 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x30, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f"]}, 0x30}, 0x1}, 0x0) [ 171.805714] device bridge_slave_1 left promiscuous mode [ 171.811366] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.843268] device bridge_slave_0 left promiscuous mode [ 171.848901] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.859313] binder_alloc: 11091: binder_alloc_buf, no vma [ 171.865131] binder: 11091:11093 transaction failed 29189/-3, size 0-0 line 2967 [ 171.872716] binder: release 11091:11093 transaction 168 out, still active [ 171.879803] binder: unexpected work type, 4, not freed [ 171.885916] binder: undelivered TRANSACTION_COMPLETE [ 171.936487] binder: undelivered TRANSACTION_ERROR: 29189 [ 171.942298] binder: send failed reply for transaction 168, target dead [ 171.983291] IPVS: ftp: loaded support on port[0] = 21 [ 171.995470] team0 (unregistering): Port device team_slave_1 removed [ 172.006955] team0 (unregistering): Port device team_slave_0 removed [ 172.017166] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 172.033722] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 172.059672] bond0 (unregistering): Released all slaves [ 172.745391] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.751807] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.759595] device bridge_slave_0 entered promiscuous mode [ 172.798957] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.805402] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.813237] device bridge_slave_1 entered promiscuous mode [ 172.850407] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 172.888008] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 172.999129] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 173.040338] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 173.217552] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 173.224985] team0: Port device team_slave_0 added [ 173.259252] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 173.267268] team0: Port device team_slave_1 added [ 173.307448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.349084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.377207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.418697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.672000] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.678420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.685114] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.691495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.698751] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 174.551656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.563460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.640298] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 174.722455] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 174.728644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.735762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.818909] 8021q: adding VLAN 0 to HW filter on device team0 10:21:32 executing program 1: 10:21:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:21:32 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:32 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee812"]}, 0x3c}, 0x1}, 0x0) 10:21:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:32 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) 10:21:32 executing program 4: 10:21:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet6(0xa, 0x803, 0x100000001) sendmmsg(r1, &(0x7f00000038c0)=[{{&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f0000000500), 0x0, &(0x7f00000000c0)}}], 0x1, 0x0) ioctl$sock_netrom_SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000)) recvmsg(r1, &(0x7f0000001300)={&(0x7f00000000c0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001280)=""/85, 0x55}, 0x0) 10:21:32 executing program 4: 10:21:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000d80)=@ipv4_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_MULTIPATH={0xc, 0x16}]}, 0x28}, 0x1}, 0x0) 10:21:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x424001, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8, 0x989, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r1, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000000c0)={'security\x00', 0xffffffffffffef6, [{}, {}, {}]}, 0xffffffffffffffad) 10:21:32 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee812"]}, 0x3c}, 0x1}, 0x0) 10:21:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@rr={0xffffff94, 0x3}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)) 10:21:32 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)) recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) [ 176.333453] binder_alloc: 11382: binder_alloc_buf, no vma [ 176.339124] binder: 11382:11384 transaction failed 29189/-3, size 0-0 line 2967 [ 176.348869] binder: release 11382:11384 transaction 173 out, still active [ 176.356131] binder: unexpected work type, 4, not freed [ 176.361656] binder: undelivered TRANSACTION_COMPLETE 10:21:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f00000001c0)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x0, 0xa}, 0x8) listen(r1, 0x2) sendto$inet6(r0, &(0x7f0000000500), 0x0, 0x20000003, &(0x7f00000005c0)={0xa, 0x4e22}, 0x1c) close(r0) 10:21:32 executing program 4: mlock(&(0x7f0000011000/0x1000)=nil, 0x1000) 10:21:32 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)) recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) [ 176.539667] binder: undelivered TRANSACTION_ERROR: 29189 [ 176.545311] binder: send failed reply for transaction 173, target dead 10:21:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x200, 0x2b0203) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000080)={0x1, 0x7, 0x33, 'queue1\x00', 0x6}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x8100) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000002c0)) 10:21:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:32 executing program 6: r0 = socket(0x40000000002, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=""/239, 0xef}}], 0x1, 0x0, &(0x7f0000003b80)) poll(&(0x7f0000000240)=[{r0}, {r0, 0x4}, {r0, 0x4}, {r0, 0x80}, {r0}], 0x5, 0x400) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) sendto$unix(r0, &(0x7f0000000cc0), 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) getsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000340), &(0x7f0000000380)=0x4) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x856, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x600, 0x131) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300)) 10:21:32 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) 10:21:32 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee812"]}, 0x3c}, 0x1}, 0x0) 10:21:32 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f00000001c0)) write$rdma_cm(r0, &(0x7f0000008880)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000008840)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000000)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa}, {0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xa}}, r1}}, 0xfed1) 10:21:32 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)) recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:32 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:21:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 176.712685] binder: release 11435:11439 transaction 178 out, still active [ 176.715407] device bridge_slave_1 left promiscuous mode [ 176.719779] binder: unexpected work type, 4, not freed [ 176.725270] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.730414] binder: undelivered TRANSACTION_COMPLETE [ 176.732476] binder: 11435:11439 transaction failed 29189/-22, size 0-0 line 2852 10:21:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:33 executing program 4: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)=@full, &(0x7f0000000180)=0x48) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000), &(0x7f0000001380)=0x4) 10:21:33 executing program 3: r0 = socket$inet6(0xa, 0x80007, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f00000001c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x14) r2 = syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x7bd3, 0x84000) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000340)=0x15b4) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000240)={r1, 0x3ff, 0x81, 0x9d4a}, &(0x7f00000002c0)=0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000380)='/dev/input/event#\x00', 0x5, 0x90000) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000100)=@get={0x1, &(0x7f0000000000)=""/195, 0x7f}) 10:21:33 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x40, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a944"]}, 0x40}, 0x1}, 0x0) [ 176.789613] binder: undelivered TRANSACTION_ERROR: 29189 [ 176.795300] binder: send failed reply for transaction 178, target dead [ 176.866999] device bridge_slave_0 left promiscuous mode [ 176.872653] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.898007] binder: release 11468:11471 transaction 183 out, still active [ 176.905268] binder: unexpected work type, 4, not freed [ 176.910736] binder: undelivered TRANSACTION_COMPLETE 10:21:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:21:33 executing program 4: mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x0, 0x0, &(0x7f0000000000)) epoll_create(0x20) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000000040), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) [ 176.916341] binder: 11468:11471 transaction failed 29189/-22, size 0-0 line 2852 [ 177.010597] binder: undelivered TRANSACTION_ERROR: 29189 [ 177.016259] binder: send failed reply for transaction 183, target dead [ 177.067807] IPVS: ftp: loaded support on port[0] = 21 [ 177.085348] team0 (unregistering): Port device team_slave_1 removed [ 177.105586] team0 (unregistering): Port device team_slave_0 removed [ 177.117539] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 177.131800] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 177.158283] bond0 (unregistering): Released all slaves [ 177.494191] raw_sendmsg: syz-executor6 forgot to set AF_INET. Fix it! [ 177.880991] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.887577] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.895471] device bridge_slave_0 entered promiscuous mode [ 177.935585] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.942061] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.949815] device bridge_slave_1 entered promiscuous mode [ 177.987560] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.026132] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 178.139582] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.181731] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 178.349337] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 178.356502] team0: Port device team_slave_0 added [ 178.382732] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 178.390171] team0: Port device team_slave_1 added [ 178.427654] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 178.434595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.450158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.473340] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 178.480237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.488575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.508918] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 178.516068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.524357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.545876] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 178.552965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.561437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.788864] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.795289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.801948] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.808311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.815944] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 179.426634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.658461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.746251] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 179.833089] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 179.840230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.847857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.926520] 8021q: adding VLAN 0 to HW filter on device team0 10:21:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:37 executing program 3: r0 = socket$inet6(0xa, 0xfffffffffffa, 0x7) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xf4e0, 0x157001) getsockname$inet(r1, &(0x7f0000000040)={0x0, 0x0, @loopback}, &(0x7f0000000080)=0x10) 10:21:37 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"626373685c41000f00000038c500", 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000026c0)={0x1, &(0x7f0000002680)=[{0x6}]}) 10:21:37 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:21:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d34") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:37 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x40, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a944"]}, 0x40}, 0x1}, 0x0) 10:21:37 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) 10:21:37 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000001280)='cgroup.procs\x00', 0x2, 0x0) 10:21:37 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000ff03000000000018000000000000000700000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) 10:21:37 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 181.399945] binder: release 11764:11765 transaction 188 out, still active [ 181.407049] binder: unexpected work type, 4, not freed [ 181.412364] binder: undelivered TRANSACTION_COMPLETE [ 181.427926] binder: 11764:11765 transaction failed 29189/-22, size 0-0 line 2852 10:21:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='gretap0\x00', 0x3}) syslog(0xa, 0x0, 0xffffffffffffff40) 10:21:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d34") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:37 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x40, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a944"]}, 0x40}, 0x1}, 0x0) 10:21:37 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000040)=""/1, &(0x7f00000000c0)=0x1) fcntl$setsig(r0, 0xa, 0xb) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) rt_sigsuspend(&(0x7f0000000080), 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x16) [ 181.529435] binder: BINDER_SET_CONTEXT_MGR already set [ 181.544407] binder: undelivered TRANSACTION_ERROR: 29189 [ 181.550086] binder: send failed reply for transaction 188, target dead 10:21:37 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 181.597551] binder: 11771:11776 ioctl 40046207 0 returned -16 [ 181.632469] binder_alloc: 11786: binder_alloc_buf, no vma [ 181.638160] binder: 11786:11787 transaction failed 29189/-3, size 0-0 line 2967 [ 181.646427] binder: release 11786:11787 transaction 193 out, still active [ 181.653452] binder: unexpected work type, 4, not freed [ 181.658808] binder: undelivered TRANSACTION_COMPLETE [ 181.688998] binder: 11771:11776 got transaction with invalid offsets ptr [ 181.729576] binder: 11771:11776 transaction failed 29201/-14, size 24-7 line 2995 [ 181.745296] device bridge_slave_1 left promiscuous mode [ 181.750967] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.752989] binder_alloc: binder_alloc_mmap_handler: 11771 20001000-20004000 already mapped failed -16 [ 181.785735] device bridge_slave_0 left promiscuous mode [ 181.791478] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.799767] binder: undelivered TRANSACTION_ERROR: 29189 [ 181.805344] binder: send failed reply for transaction 193, target dead [ 181.809317] binder_alloc: 11771: binder_alloc_buf, no vma [ 181.817707] binder: 11771:11797 transaction failed 29189/-3, size 24-7 line 2967 [ 181.869193] binder: undelivered TRANSACTION_ERROR: 29189 [ 181.874914] binder: undelivered TRANSACTION_ERROR: 29201 [ 181.882621] team0 (unregistering): Port device team_slave_1 removed [ 181.897095] team0 (unregistering): Port device team_slave_0 removed [ 181.907573] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 181.924512] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 181.953308] bond0 (unregistering): Released all slaves 10:21:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d34a772760070") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x240800, 0x40) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0xdfa0}, &(0x7f0000000200)=0x8) r6 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x100) ioctl$ASHMEM_SET_NAME(r6, 0x41007701, &(0x7f0000000300)=':system\\\x00') getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={r5, 0xbe67, 0x10}, &(0x7f0000000280)=0xc) futimesat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r3, r4/1000+30000}, {0x77359400}}) syslog(0x9, 0x0, 0x0) 10:21:38 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d34") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) 10:21:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:38 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a944701573"]}, 0x44}, 0x1}, 0x0) 10:21:38 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:21:38 executing program 4: r0 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@generic, &(0x7f00000000c0)=0x80) ioctl$sock_ipx_SIOCAIPXPRISLT(r0, 0x89e1, &(0x7f0000000100)=0x8) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000140)) r1 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 10:21:38 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000300)="0047fc2f07d82c99240970") r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0xff) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000040)={0x100, {{0xa, 0x4e24, 0x8001, @mcast1={0xff, 0x1, [], 0x1}, 0x8}}, {{0xa, 0x4e23, 0x7, @loopback={0x0, 0x1}, 0x6}}}, 0x108) setsockopt(r2, 0x2000000000010d, 0x4000800000000b, &(0x7f0000000280)='\a\x00\x00\x00', 0x4) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) close(r0) [ 182.748558] binder: release 11814:11816 transaction 201 out, still active [ 182.755698] binder: unexpected work type, 4, not freed [ 182.761065] binder: undelivered TRANSACTION_COMPLETE [ 182.767540] binder: 11814:11816 transaction failed 29189/-22, size 0-0 line 2852 10:21:39 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a944701573"]}, 0x44}, 0x1}, 0x0) 10:21:39 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:21:39 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xa000) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) syslog(0xa, 0x0, 0xffffffffffffff40) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000080)=""/66, &(0x7f0000000100)=0x42) 10:21:39 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x11) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101000, 0x0) accept4$netrom(r1, &(0x7f0000000040)=@full, &(0x7f0000000140)=0x48, 0x80800) sendmsg(r0, &(0x7f0000000cc0)={&(0x7f00000000c0)=@in={0x2, 0x4e21, @loopback=0x7f000001}, 0x80, &(0x7f0000000b40), 0x0, &(0x7f0000000c00)}, 0x24008000) close(r0) 10:21:39 executing program 6: socket$inet6(0xa, 0x1000000000002, 0x2) r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40100, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{&(0x7f00000001c0)=@alg, 0x80, &(0x7f0000001440), 0x0, &(0x7f0000001480)=""/177, 0xb1}}, {{0x0, 0x0, &(0x7f0000001ac0)}}], 0x2, 0x0, &(0x7f0000001c40)={0x77359400}) 10:21:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 182.910250] binder: undelivered TRANSACTION_ERROR: 29189 [ 182.915907] binder: send failed reply for transaction 201, target dead 10:21:39 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:21:39 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a944701573"]}, 0x44}, 0x1}, 0x0) [ 182.997555] binder: release 11845:11846 transaction 206 out, still active [ 183.004616] binder: unexpected work type, 4, not freed [ 183.009969] binder: undelivered TRANSACTION_COMPLETE [ 183.026458] binder: 11845:11846 transaction failed 29189/-22, size 0-0 line 2852 10:21:39 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x2}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$setpipe(r0, 0x407, 0x0) dup2(r0, r2) [ 183.133967] binder: undelivered TRANSACTION_ERROR: 29189 [ 183.139694] binder: send failed reply for transaction 206, target dead [ 183.170197] IPVS: ftp: loaded support on port[0] = 21 [ 183.665785] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.672184] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.679398] device bridge_slave_0 entered promiscuous mode [ 183.705298] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.711721] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.718915] device bridge_slave_1 entered promiscuous mode [ 183.744556] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 183.770615] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 183.844977] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 183.873004] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 183.985379] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 183.992517] team0: Port device team_slave_0 added [ 184.018193] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 184.025510] team0: Port device team_slave_1 added [ 184.050534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.077533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.104427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.132137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.364372] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.370763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.377415] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.383789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.235843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.321572] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 185.403280] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 185.409477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.417138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.498547] 8021q: adding VLAN 0 to HW filter on device team0 10:21:43 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:43 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:21:43 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53"]}, 0x44}, 0x1}, 0x0) 10:21:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) 10:21:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") timer_create(0xfffffffffffffffc, &(0x7f0000ee4000)={0x0, 0x10, 0x0, @thr={&(0x7f0000000080), &(0x7f0000000200)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000003140)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000003180)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000d64000)) 10:21:43 executing program 6: r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x9, 0x8001}) r1 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0xf78, 0x8000) accept$inet(r1, &(0x7f0000000180), &(0x7f00000001c0)=0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f00000000c0)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000440)=0xc) 10:21:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)={r2}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00000000c0)={0x1, 0xffffffffffffff81}) syslog(0xa, 0x0, 0xffffffffffffff40) getsockopt$nfc_llcp(r1, 0x118, 0x3, &(0x7f00000002c0)=""/4096, 0x1000) 10:21:43 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) r1 = open(&(0x7f0000000000)='./file0\x00', 0xc00, 0x85) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000040)={0x5, 0x8, 0x9, 0x6}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x200, 0x4) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f00000000c0)=0xf000) 10:21:43 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 186.972846] binder: release 12139:12141 transaction 211 out, still active [ 186.979976] binder: unexpected work type, 4, not freed [ 186.985323] binder: undelivered TRANSACTION_COMPLETE [ 186.990746] binder: 12139:12141 transaction failed 29189/-22, size 0-0 line 2852 10:21:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") unshare(0x8020000) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r1, 0x0) clone(0x1f000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000580)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x1, r2}) setpriority(0x1, 0x0, 0x0) 10:21:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = signalfd(0xffffffffffffffff, &(0x7f0000421000), 0x8) r2 = dup(r1) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4096, 0x6a8}], 0x1) ioctl$int_in(r4, 0x5452, &(0x7f0000fc3000)=0x1) fcntl$setsig(r4, 0xa, 0x12) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001c4, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400481, 0x0) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0xfffffffffffffff8) r6 = dup2(r2, r5) fcntl$setown(r6, 0x8, r3) tkill(r3, 0x80000100016) 10:21:43 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53"]}, 0x44}, 0x1}, 0x0) 10:21:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 187.123818] binder: undelivered TRANSACTION_ERROR: 29189 [ 187.129408] binder: send failed reply for transaction 211, target dead [ 187.216942] binder: release 12172:12173 transaction 216 out, still active [ 187.224060] binder: unexpected work type, 4, not freed [ 187.229395] binder: undelivered TRANSACTION_COMPLETE [ 187.237878] binder: 12172:12173 transaction failed 29189/-22, size 0-0 line 2852 [ 187.296574] binder: undelivered TRANSACTION_ERROR: 29189 [ 187.302167] binder: send failed reply for transaction 216, target dead [ 187.370289] device bridge_slave_1 left promiscuous mode [ 187.375820] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.388664] device bridge_slave_0 left promiscuous mode [ 187.394194] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.425678] team0 (unregistering): Port device team_slave_1 removed [ 187.435662] team0 (unregistering): Port device team_slave_0 removed [ 187.446361] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 187.462383] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 187.491558] bond0 (unregistering): Released all slaves 10:21:44 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7600") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:44 executing program 3: socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:21:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) 10:21:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:44 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:21:44 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53"]}, 0x44}, 0x1}, 0x0) 10:21:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x10000) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x5}) r4 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x472, 0x8000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r3, 0x80000, r4}) sendmmsg(r1, &(0x7f000000a600)=[{{&(0x7f0000002fc0)=@hci={0x1f}, 0x80, &(0x7f0000003180)=[{&(0x7f00000030c0)='9', 0x1}], 0x1, &(0x7f00000031c0)}}, {{&(0x7f00000063c0)=@nl=@kern={0x10}, 0x80, &(0x7f0000007700), 0x0, &(0x7f0000007780)=[{0x28, 0x0, 0x0, "50d8a3f5b0e063e4a1188c26bf97ca7144"}], 0x28}}], 0x2, 0x8000) 10:21:44 executing program 4: socketpair(0x1f, 0xf, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) ioctl(r0, 0x7, &(0x7f0000000040)="ba8af0") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") unshare(0x2000400) fcntl$getflags(r1, 0x408) 10:21:44 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7600") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:44 executing program 5 (fault-call:4 fault-nth:0): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) [ 188.297934] binder: release 12196:12200 transaction 221 out, still active [ 188.305102] binder: unexpected work type, 4, not freed [ 188.310429] binder: undelivered TRANSACTION_COMPLETE [ 188.316522] binder: 12196:12200 transaction failed 29189/-22, size 0-0 line 2852 10:21:44 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:21:44 executing program 4: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f00000000c0)=""/134) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000300)={r2, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x100000000, 0x7fffffff], &(0x7f0000000240)=[0x715a, 0x9], 0x0, 0x2, 0xfffffffffffffffd, &(0x7f0000000280)=[0x7b38, 0x3d6], &(0x7f00000002c0)=[0x6, 0xffff, 0x7, 0xff]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x3, &(0x7f0000002000)=ANY=[@ANYBLOB="180000003200000000000000000000009540000000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x3, 0xc3, &(0x7f0000386000)=""/195}, 0x48) close(r3) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000340)={0x7, 0x0, [{0x2f7, 0x0, 0x9}, {0xabe, 0x0, 0x50d2}, {0x9b9, 0x0, 0x1}, {0xb18}, {0x0, 0x0, 0x2}, {0xa2a, 0x0, 0xf01}, {0x34a, 0x0, 0x100000000}]}) 10:21:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) prctl$setfpexc(0xc, 0x3) 10:21:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d34") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 188.457637] binder: undelivered TRANSACTION_ERROR: 29189 [ 188.463295] binder: send failed reply for transaction 221, target dead [ 188.477720] FAULT_INJECTION: forcing a failure. [ 188.477720] name failslab, interval 1, probability 0, space 0, times 1 [ 188.489211] CPU: 0 PID: 12214 Comm: syz-executor5 Not tainted 4.17.0+ #90 [ 188.496161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 188.505531] Call Trace: [ 188.508140] dump_stack+0x1b9/0x294 [ 188.511964] ? dump_stack_print_info.cold.2+0x52/0x52 [ 188.517178] ? lock_downgrade+0x8e0/0x8e0 [ 188.521359] should_fail.cold.4+0xa/0x1a [ 188.525453] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 188.530582] ? __local_bh_enable_ip+0x161/0x230 [ 188.535478] ? _raw_spin_unlock_bh+0x30/0x40 [ 188.539913] ? release_sock+0x1e2/0x2b0 [ 188.543445] IPVS: ftp: loaded support on port[0] = 21 [ 188.543908] ? rcu_is_watching+0x85/0x140 [ 188.553258] ? __local_bh_enable_ip+0x161/0x230 [ 188.557950] ? __release_sock+0x3a0/0x3a0 [ 188.562126] ? find_held_lock+0x36/0x1c0 [ 188.566219] ? show_iface_tcp_nagle_disable+0x60/0x90 [ 188.571440] ? check_same_owner+0x320/0x320 [ 188.575783] ? rcu_note_context_switch+0x710/0x710 [ 188.580737] ? __netlink_lookup+0x5cf/0xaa0 [ 188.585083] __should_failslab+0x124/0x180 [ 188.589331] should_failslab+0x9/0x14 [ 188.593137] kmem_cache_alloc_node+0x272/0x780 [ 188.597734] ? find_held_lock+0x36/0x1c0 [ 188.601834] __alloc_skb+0x111/0x780 [ 188.605570] ? skb_scrub_packet+0x580/0x580 [ 188.609921] ? rcu_is_watching+0x85/0x140 [ 188.614091] ? rcu_report_qs_rnp+0x790/0x790 [ 188.618519] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 188.624075] ? netlink_autobind.isra.34+0x240/0x330 [ 188.629114] netlink_sendmsg+0xb01/0xfa0 [ 188.633206] ? netlink_unicast+0x740/0x740 [ 188.637464] ? security_socket_sendmsg+0x94/0xc0 [ 188.642233] ? netlink_unicast+0x740/0x740 [ 188.646479] sock_sendmsg+0xd5/0x120 [ 188.650206] ___sys_sendmsg+0x805/0x940 [ 188.654195] ? copy_msghdr_from_user+0x560/0x560 [ 188.658980] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 188.664533] ? proc_fail_nth_write+0x96/0x1f0 [ 188.669051] ? __fget_light+0x2ef/0x430 [ 188.673410] ? fget_raw+0x20/0x20 [ 188.676872] ? find_held_lock+0x36/0x1c0 [ 188.680944] ? kasan_check_write+0x14/0x20 [ 188.685198] ? wait_for_completion+0x870/0x870 [ 188.689808] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 188.695367] ? sockfd_lookup_light+0xc5/0x160 [ 188.699881] __sys_sendmsg+0x115/0x270 [ 188.703775] ? __ia32_sys_shutdown+0x80/0x80 [ 188.708211] ? __sb_end_write+0xac/0xe0 [ 188.712195] ? fput+0x130/0x1a0 [ 188.715495] ? ksys_write+0x1a6/0x250 [ 188.719319] __x64_sys_sendmsg+0x78/0xb0 [ 188.723410] do_syscall_64+0x1b1/0x800 [ 188.727305] ? finish_task_switch+0x1ca/0x840 [ 188.731813] ? syscall_return_slowpath+0x5c0/0x5c0 [ 188.736763] ? syscall_return_slowpath+0x30f/0x5c0 [ 188.741738] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 188.747124] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 188.751987] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 188.757186] RIP: 0033:0x4559f9 [ 188.760375] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 188.779737] RSP: 002b:00007fcee12c1c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.787479] RAX: ffffffffffffffda RBX: 00007fcee12c26d4 RCX: 00000000004559f9 [ 188.794761] RDX: 0000000000000000 RSI: 0000000020005000 RDI: 0000000000000014 [ 188.802066] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 10:21:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000020607041dfffd946fa2830020200a0009000300f01d85680c1ba3a20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x140, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000040)) 10:21:45 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:21:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='bpf\x00', 0x40000, &(0x7f0000000240)="5ec05c24ad7228c27db1662d5a67d9242f84370377df381eb55f2661af0974c549e7a2a0f45f28bfa405fb2d789cfe5d112c0ea8339d9236e60691b0faabdcade47d0fb456288a64796d9912608e3ecb654d136c47343819acabcb467c43f8cfa79cfb9ead059100f865ce61c6d6c189751459f831fd9ebae5a917615151608c14dbf3a28850db905575d9c5384b3b95f42c37c4deb088c3d5301491813442824e9813ce705c3530f58f79e77e6c888e5839c674e786a0cd6ff0c5c349deab239648640abba5cc198e4878d201e087faa90f2ed9a098cfb66d5075e14a85c909baf500a46ba4b40991a119a1272e7130808dec5c142938b621342919dfd453992dc5581dce591a50b59beadd2c6ea467c979e42f6a62313f7d594720013a1460bf4c8f3dfe81de05af79a8dfb10737271eabb2e060920c41a89b5762aa008c5c332ab5a4168d95599408a33bd4fb705b42f24e59335dc643a88138b9f29a6e2645794320f05aef499d3b030e322a525dfb04763de9fdc5cbf1a0e869b32872766304f516e95c8f6ea647f2042f922deb0dce0aa0736bb130fe17de928fc9c6ef6c932a31ddfc3ee09967c2adf7beb37be9ae4c391c85eaae2db4d9f31f2034c6494a84407f245b693818831958b31a8476557caa5ef1ea23c24cfbaf622b4b73d4bd950acc8cc5c480004459015cf801292fabcde9acba58727fac4bcc66aa84b5173dbbbfcf55f0f9048ae6be11c669de2a0fe0f82aa6ada53a5c43ca6b876fbf365e46a4532f49910c8c4a386ec2971386bbffa8e9cd1cb64a244e610ff8cbe424c849dde392d344d3db80b92d8dd7881a9a589ef3ed5edc8bb6a9673928cf1b9f17fccc5b1f43f50fae9321ccbf9dab7d7dbaff2979a5a9c49db217a6ef9b449da56a9d11bc69d1eccd6006b18583a271ac29b47c93767438f8ecaf0b4012691c8361c9fdd02b9e982a3e20ce942c3d7f0072651515eb8c65ae3ff0ef8e5b18e44cfa3eae86e213fc16a0cae1aaaadba243b53e1edf4112507ad56bb83f2f6069f804fa39823f989c1233fa9dc13fa00b8173ba55509bf59592c58e43de469a3cfe1c2a1edcb0e7ec662ab754f402bd7c8b2542609dc4e0bec7d3c469345db24334cb85c44434f61d0d5e245165307eed10fede73099d9a07eed6d002777d8c132a27a35df25ebed0ec4b7cd3407958d181dd731699b3086dedbb550cc7bb9de03769b1b943a3f9c669e3170ca0f249ffcf815ffd9b9c9c3d2fb0ce362d7eea3aba7b3bde2f281f51a34eba4fce0d46f77e05fdaa536405294f7761920eb9ad5716c3b649d5277e1873cce820668204b875b6be8f4179acd7521cd98ef4daa5809ff1cc555fb3268f73e069424c895f8e2236f704797882fc66c9c83c570dafd1b92c12cd8c86890554aa6799a44dfe6a0a6b6fac6a8056772ea2fcc18d2dd3ca3c5f6ff836ea03b843898441bfc8f4e7761aa214cd0a64c1df864bec1a3e4d41bd0a4a9dcad6dd64d81f86dfeeabb22eee93bc6fe80781f1cd6f896fc439ee14f7dd8ba3388a9dde60ef33c804a0ac38e114d35eb565de6b1cb8b12657f590968d41acc90692b79253abcd1b75a5e5acc130935867e8dd560a334e9f7b6029a74673d58e472ca92888681e91cd4005a539636408fae672439f055db31ab3320f415ce88f7e9738e1a908a5ee6a96d348afb4b6a4a7b2b335c2db0611ef82221cb44211ded237885b6b73e9982c9f57233b9f1a45fb0877c3428b8658de912704f9c048b36e4a654f5d6c7b4ebff97f5bfa6da9a64301be81f204b5a8ab0d6981ccd36840d7091981b54f7090edcbacd33da27585e3c24fb1f73379129cd7ad41e1b5c929f7e1077a62a967f597f5e090f7fb282adfdd27583944d8c60e4e14aa33e9cd3faf81a39325c70d4aaf64457087b233db3f2d1f30a4ee33120e9eddaa550c33b00e9d514595d40ca62915721bbbcfa14a8de7517f661715017828e91a7847f4d88c5d06eab42e85b3d0fa4e39a524e6de2be13497ff586b960e5a5430ccddc05767b9b75f8e1cd99e2c7384b3ecb47282438705259cff156da907770bb1616efa47a1781c18dae8a7043882f19e133fad7b6f75b80c39aa161716da129e777d4a6d1a5a1b11fdda55652588a50af76a9b187374b4c7beff89076d51951fb0b77ecdc219324eda241c2bb0c5df378b62aab984e16b9e8ede646b934c4cc509f8d5380a52c3926076c69bfc65cf78d9ba42a179dd6d432be6bf0246c799bc0ac9b5b069e27b02a0dd7d130db91e16a29537c006f8d13521899b78822f82cff7aa69c542e562b92830f2da038554c5f72101bb725f31cce0c027e476572f26066d6b216a4b2a9fedf604ad2b56d7ad34b7dddf0d4fd45a3e9d49edbe0e461731c81e68c9bf948733206f37ba923544a03b75bc4624d31740433193bd0912f5997e7915fa1a58d1691b8b128fb4393b45b9d5e325f88350667963072de0c86473a286da2498fd202aca77561cbb137503807830e05dfa216fb0f5089834c902f287e93351541ebd6dad6a1fdbb5014ad6555e3081f7db0e54ec149f4dcc7a21496935e141df4cdf87270a04c2b787ecdf4ff3ddb0cd944f19b85457c3005f8fc08d288d06c93ad9be79a6b981a2c10666b00db66febd480b849888b7d8e85f27ee36d41d987ae21a5b2776624566c24457d8e2b15f4dc96333bcdc9874566098f2018e2c2edc1db34d5581cc5074e2b4f304d4848c3846e77b30553c1d689c17b74665e82a0749c67894cae332f96f84a0c074c88f96483ba462f0d1565e842785149130e8cbaa724e66c4706d9c5e196e40b6067798070e76b94b3fca92c80301d4633ea10adb1d51a4a5d556785ec4b51ce670ebb98558cc1d9d2aa4c87f1355be731e73fec16fb0ddd688d4c217e7475ca703876f11dd2da577197e76762b9d09d00a99e10b5f6fbf04d213e6a8e61f6e4a557faeb868a9d3e20dfd455ff6929bd0e38ccdf91296e1e7ae0690a56fa5ca59c01ba91f8d94881130a17c172bee47ed0d0a239afa4d47438505dc61155299cf12245253cff0a1d0bb2711b761d1ab6987dd9863d0df9d7c92f57bd3fc3d2c292bf3030ecc1f3d89ee45ec458f404e0b62bc4c5254bf5c7130ce0ec2c56b3346d5654d696250201cfdeb5ff8ea3b3d24932ebb38db4ac203392692bdf63790cbc723f589a684bcbe39e35ffcb4f020576ac91186d67eb18c00ad45761370dfd5383be6beb4e1f08096c9c7fb6b46ab99827a342cb76fbf89365e091282cab182e56ba572d592ca19b719f41bbfcee8bc58a91485a385dede626d023ac1c8eb4c2f92cef762f5a031e2deaa3dd30e7d1083d541b165102f45adcf24a597fe25a9e6b32ee4f421e76b7afa96bfddde38ff6f01f77fea643675dc90b6298c71c15ffc8acb08d9bb973c104cb7f107a8a0bded16f25ad640a0fe0c23a5dfac610f8666612289ff662519aca8ee77eccec60c95bf90aef6667ac5a40a5652a0902ba4fa1ff447d6ed48044a292d36b10c4f40df505757c489d6926254bda440b32dfe83d0f82e6c88176a878f972ba007c5bcfa9331a8d70c06891eaec614ffb9c4b4e3931ff90216d3fda969395d2d59e6c7ff4f85ad2759bce3b380294c9c3bcb741928b26fd12a6090df94d220a7975bf26ba10617b13c673a8743781d7a0084ff23e0a012fc6cc10ea90535053ca62c29ed3a6ddc49079b85886b3d7ef2eff4fdfc4d5aaa7d72ad49fa764e480b4671441dd5848e95d20860303d028df73a753c76de23d4ad9fdb5ff44316e1b68641dbf9ed861a7888b0695006f59e0075f2f62d8bcf5af4ba22beeb51839c724831f303346a4510d14dc3103d5e5e2da72886183ecf2e337e77bb7710217230f87d28af2daaee952e20dd1a268a32895acb517531b42758666a81b9740c2f75ec1cb5dc1c34c8fe09f4ba5003638368dc30e1bffda20dc80495e4cefaf455653dc537612ff564b85e8804bbb83c0ec85090cc3d4cb8e7fd5766aacf03790387d9605e92d4619dbaa32d99b77252d86848532316612abcac6dfaa12dd7402d0daa67ffb835778691bde8c1abee8b48861c7b6455c3e922ce3998224f5056a8b5ae897778207a120a2d0bd3980398c102ccd956afc3485a216febbf8a2448c24cefe6cde58b63d75a7c7e4dbcf68dd8aa91d2716eb8d4e91028ba9337fa44c89c8d8686db6f3d346b13ffd07e1ff71b8a97f218a622195e67083cb8bdb6ed3c3c56a697981fbeb99279f4545c2d39adf4024879b36a3684aa2c6a4119c21791eb2a08b868679c8a67f95466b56f53b880856283170e96242f2313a1634e8b50522ed8c691509ca86432da39ff155d94e580d2cf475567dc51f062d22de8eefd1b07a1701c84a47d71d3e9c8ff8cb7b9b6a5d7e43f8af2ce15c20db5295e9e02e02df54db6581a01c8a2e7094ff3fc3fe6d25f4b92d83e899d65ab923ae53ba8a26cd47aa3db71107c8b2d4bb278ace2d48112a2a03a905b3c6acdeb786a3430586ebf34f7a5eb099688aa6302f241c2c2d1df1abe95ae50342b8b1752e20bba7ed6cbbfbbdc952df0bbae42fe656947a8918b72c43619aaa7086dfa56cc57f261fbec0ffe3ab0bf207f786cf5c034e476a1932d75bbf46c496dc9f8a7630ee03435ee32573984af1d5a85ba481f501807de20263437b281348aa84fb838fbd600b27875b78143a7057cf623dec1aca9078ab4f105608ec016ebee415a20979e8d62b981ecf243fcfa82dd7cf8b82b6847d66916b1c0ac0cd3dc55a34d0bac2da5d35ba3f06443e0d81a8c6dc88ce1f6df111fb53b6855d2065e97a6044449516dbc09b06b884cf6d8257a674a76f3f409432901b75cb37e77d335ec5f2b8c24cc34dfb57701c84afe6a04755ddb429c88bb81c5a6226287679129c84a432f5f6d2ac19740361c301e2cfd36f5de3a81d6fa3b118394ff636788ddeda3550e2ee63208f3a34e5823d7b2ebf5fdef8d5abf3b528bd34694d21f1c2ef2913e9281c46d7f78a8d9834ed8b7bb86ef254bb98206b75cfb3c22a4c7d7fdcdb49cd7fca58e650b95716c2da5346b265fbf54866df2db2e97d0dfbabf3235a3eabbfdd8ffae124d00c41a113a1b304a7e83de8ba0d5dc6cfc1386fe1964c3e73f104a0692509ec18e4e5b03f638430b02a0b42cb3185672a286987313ebbbefac43ed3425a7d7a105d800ca04e09886bb61d93ed2407b5115c3649ee74af7a84039740efbaac345866bca254251ac356906e542da94190f3069dfee1d0c2f2dd3fbde22ca8e09482db0242b2a4eaa79bc36830621bc76546f8ebfb9a5c9bf382c3186dcfeab64defcf4b56bfe84d480664037e2aff8d4a92e3399849e95ae6460222fe5c96e705a31be402b6ab98f21e4e3015553a3783e1e5739c77a63cf0e78faefca804dc66329905a1350762afc331dd4808e21012931bf2c1326032eb1e2a7a1b6825a02c969588ff02a27af2b741fa0748a92cb98090520538f0403d7ad8d7412c18f0833a680c29458af1f1c068f3841e4c276d30930df8f9eae77fb440e76b4df3b8e0df3e63d9de00a1f8aa148ece4ceda98ed01849827a5f321e2b752f066a19bd2684369c05f11b4b7f0507ba1bbe554c175063268ae019804f93105348b1636381973845aa7f89969e7bab5f2bd33da3344a083823a79b1e4aebe0597f0b23b6cd1ecac7597df102109af1025802027bd2c3ba0632d3f246133bbe264f4278fbe4bbae68e97fe931b0c3fa2cea8914b34168c9435a7cc8471d9751") ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d65345f8f760070") r1 = syz_open_procfs(0x0, &(0x7f0000000180)="617474720054291a3d5be2842054302d2da0a38d0045cc09c3e069b47b2dcaac8c5b69a8b7f9dd97a7f153b2965ef6d9e7eb3df537f782a6f6f6112250857836a2abe7cb1929764e8a8d0e1c0ab3fe6a41ffdc458ead583e74ddf20ae1913d8adf7f005997408ddc998634659e86ce93765ca662af3587e684b7fc645c725b4eec6c0000000000000000000000") unlink(&(0x7f0000000000)='./file0\x00') sync_file_range(r1, 0x0, 0x0, 0x4) 10:21:45 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7600") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) [ 188.809345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 188.816628] R13: 00000000004c0bd3 R14: 00000000004d0420 R15: 0000000000000000 [ 188.890879] netlink: 20 bytes leftover after parsing attributes in process `syz-executor4'. [ 188.893154] binder: release 12252:12255 transaction 226 out, still active [ 188.906636] binder: unexpected work type, 4, not freed [ 188.911992] binder: undelivered TRANSACTION_COMPLETE [ 188.918897] binder: 12252:12255 transaction failed 29189/-22, size 0-0 line 2852 [ 188.979658] netlink: 20 bytes leftover after parsing attributes in process `syz-executor4'. [ 188.993704] binder: undelivered TRANSACTION_ERROR: 29189 [ 188.999391] binder: send failed reply for transaction 226, target dead [ 189.222451] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.228853] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.236047] device bridge_slave_0 entered promiscuous mode [ 189.261761] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.268191] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.275398] device bridge_slave_1 entered promiscuous mode [ 189.301199] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 189.327053] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 189.397811] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 189.427137] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 189.540324] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 189.547491] team0: Port device team_slave_0 added [ 189.572162] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 189.579482] team0: Port device team_slave_1 added [ 189.604416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.632418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.658994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.686657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.926125] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.932537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.939203] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.945594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.780608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.864118] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 190.945917] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 190.952152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.959757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.036294] 8021q: adding VLAN 0 to HW filter on device team0 10:21:48 executing program 5 (fault-call:4 fault-nth:1): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:21:48 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:21:48 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000040)={0xff, {{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x88) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f00000001c0)={0x2, 0x1, [{0x4, 0x0, 0x5}, {0x1, 0x0, 0x7fff}]}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={r3, 0x3, 0x1, 0x100000001, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x20) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) 10:21:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d34") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:48 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(0xffffffffffffffff, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:48 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)) socket$xdp(0x2c, 0x3, 0x0) io_setup(0x1000, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="050000008cfc6cfde19ab3a251fd2cfd09684d9c7afae3b519d21a2ce3cbdfcb2665dd1203ed5f1023fa813c9a0e46000000004001000000", 0x38}]) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/urandom\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000300)=0x2, 0x8) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000340)) r3 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x100, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000280)={'\x00', 0x400}) 10:21:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) 10:21:48 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000000c0)={'gretap0\x00', 0x80000001}) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000500)={0x303, 0x33}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={@remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0xffffffffffff676c, 0xbc25, 0x2, 0x500, 0x9, 0x40020, r2}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x404000, 0x0) getsockopt$llc_int(r3, 0x10c, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000340)="9f730e4a2ca864202cb231d098925ccba3e810d3e65ed1e8ceb76cbcf17105b7f0c029b124d59dfd7c87d2fb641015ce58661d9153e10582c2983bc9c9b9932a753ebf1fd8c8b1d5d8e80ca058a8f1d48891fd1f0f282d9606e85b0b92b4a518aad58daaa6b3f12f50b7f53e045b1d86bc7a68e1c5b4835b6373162c26f60318c55ad04ef2b6646460a85544aa29dca52e9cfe92cf17684bf081d34b4142f0e46d715abbb06dcba24a5ec827b4f140a9aaf3e8d3002ac37fdabbb2b0d2890d3a37c1699e", 0xc4) r4 = gettid() pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) perf_event_open(&(0x7f0000000440)={0x4, 0x70, 0x3, 0x2, 0x644bfdb3, 0x400, 0x0, 0x4, 0x4, 0x4, 0x10001, 0x5, 0x3f, 0x7, 0xfffffffffffffff7, 0x18000000000000, 0x2, 0x301, 0xfff, 0x100000001, 0x1, 0xffffffff, 0x3f, 0x4, 0x8, 0x3, 0xf5eb, 0x10000, 0x8, 0x4, 0x4, 0xffffffff, 0x80000000, 0xfffffffffffff001, 0x7fffffff, 0x7fffffff, 0x22a, 0x7, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000200)}, 0x200, 0x9, 0x1ff, 0x0, 0x3, 0x9, 0xfffffffffffffff8}, r4, 0xb, r3, 0x1) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ipx_SIOCIPXCFGDATA(r3, 0x89e2, &(0x7f0000000100)) syslog(0xa, 0x0, 0xffffffffffffff40) fcntl$dupfd(r5, 0x406, r7) setsockopt$inet_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000540)={0x3}, 0x4) [ 192.513557] binder: release 12512:12521 transaction 231 out, still active [ 192.520678] binder: unexpected work type, 4, not freed [ 192.526044] binder: undelivered TRANSACTION_COMPLETE [ 192.531706] binder: 12512:12521 transaction failed 29189/-22, size 0-0 line 2852 [ 192.574736] binder: undelivered TRANSACTION_ERROR: 29189 [ 192.580422] binder: send failed reply for transaction 231, target dead [ 192.587996] FAULT_INJECTION: forcing a failure. [ 192.587996] name failslab, interval 1, probability 0, space 0, times 0 [ 192.599323] CPU: 0 PID: 12516 Comm: syz-executor5 Not tainted 4.17.0+ #90 [ 192.606356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.615765] Call Trace: [ 192.618389] dump_stack+0x1b9/0x294 [ 192.622042] ? dump_stack_print_info.cold.2+0x52/0x52 [ 192.628306] ? is_bpf_text_address+0xd7/0x170 [ 192.632834] should_fail.cold.4+0xa/0x1a [ 192.636921] ? __save_stack_trace+0x7e/0xd0 [ 192.641271] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 192.646408] ? save_stack+0x43/0xd0 [ 192.650054] ? kasan_kmalloc+0xc4/0xe0 [ 192.653961] ? kasan_slab_alloc+0x12/0x20 [ 192.658133] ? find_held_lock+0x36/0x1c0 [ 192.662326] ? check_same_owner+0x320/0x320 [ 192.666667] ? lock_downgrade+0x8e0/0x8e0 [ 192.670832] ? rcu_note_context_switch+0x710/0x710 [ 192.675789] __should_failslab+0x124/0x180 [ 192.680044] should_failslab+0x9/0x14 [ 192.683860] kmem_cache_alloc_node_trace+0x26f/0x770 [ 192.688989] __kmalloc_node_track_caller+0x33/0x70 [ 192.693943] __kmalloc_reserve.isra.39+0x3a/0xe0 [ 192.698749] __alloc_skb+0x14d/0x780 [ 192.702516] ? skb_scrub_packet+0x580/0x580 [ 192.706883] ? rcu_is_watching+0x85/0x140 [ 192.711051] ? rcu_report_qs_rnp+0x790/0x790 [ 192.715502] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 192.721056] ? netlink_autobind.isra.34+0x240/0x330 [ 192.726077] netlink_sendmsg+0xb01/0xfa0 [ 192.730148] ? netlink_unicast+0x740/0x740 [ 192.734377] ? security_socket_sendmsg+0x94/0xc0 [ 192.739381] ? netlink_unicast+0x740/0x740 [ 192.743614] sock_sendmsg+0xd5/0x120 [ 192.747500] ___sys_sendmsg+0x805/0x940 [ 192.751481] ? copy_msghdr_from_user+0x560/0x560 [ 192.756248] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 192.761800] ? proc_fail_nth_write+0x96/0x1f0 [ 192.766325] ? __fget_light+0x2ef/0x430 [ 192.770302] ? fget_raw+0x20/0x20 [ 192.773744] ? find_held_lock+0x36/0x1c0 [ 192.777796] ? kasan_check_write+0x14/0x20 [ 192.782031] ? wait_for_completion+0x870/0x870 [ 192.786615] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 192.792166] ? sockfd_lookup_light+0xc5/0x160 [ 192.796652] __sys_sendmsg+0x115/0x270 [ 192.800545] ? __ia32_sys_shutdown+0x80/0x80 [ 192.804976] ? __sb_end_write+0xac/0xe0 [ 192.808963] ? fput+0x130/0x1a0 [ 192.812229] ? ksys_write+0x1a6/0x250 [ 192.816038] __x64_sys_sendmsg+0x78/0xb0 [ 192.820098] do_syscall_64+0x1b1/0x800 [ 192.823973] ? finish_task_switch+0x1ca/0x840 [ 192.828456] ? syscall_return_slowpath+0x5c0/0x5c0 [ 192.833378] ? syscall_return_slowpath+0x30f/0x5c0 [ 192.838299] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 192.843652] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 192.848499] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 192.853682] RIP: 0033:0x4559f9 [ 192.856865] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 192.876129] RSP: 002b:00007fcee12c1c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.883849] RAX: ffffffffffffffda RBX: 00007fcee12c26d4 RCX: 00000000004559f9 [ 192.891125] RDX: 0000000000000000 RSI: 0000000020005000 RDI: 0000000000000014 [ 192.898385] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 192.905647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 192.912914] R13: 00000000004c0bd3 R14: 00000000004d0420 R15: 0000000000000001 [ 193.056572] device bridge_slave_1 left promiscuous mode [ 193.062317] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.074719] device bridge_slave_0 left promiscuous mode [ 193.080278] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.111426] team0 (unregistering): Port device team_slave_1 removed [ 193.121643] team0 (unregistering): Port device team_slave_0 removed [ 193.133183] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 193.147643] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 193.177645] bond0 (unregistering): Released all slaves 10:21:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'ifb0\x00', 0x80000000}) syslog(0xa, 0x0, 0xffffffffffffff40) 10:21:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d34") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:50 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:21:50 executing program 2 (fault-call:7 fault-nth:0): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:50 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x8, 0x0, 0x1}, 0xffffffffffffff3e) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$rds(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)=""/191, 0xbf}, {&(0x7f0000000200)=""/233, 0xe9}], 0x2, &(0x7f00000003c0)=[@rdma_dest={0x18, 0x114, 0x2, {0x2, 0x6}}, @rdma_dest={0x18, 0x114, 0x2, {0x5, 0x1f}}, @mask_cswp={0x58, 0x114, 0x9, {{0x80, 0x4}, &(0x7f0000000340)=0x4, &(0x7f0000000380)=0x3, 0xff, 0x2, 0x9, 0x3, 0x2, 0x10001}}, @rdma_dest={0x18, 0x114, 0x2, {0x2, 0x100000001}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x1}], 0xb8, 0x15}, 0x8040) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x101000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000000), &(0x7f0000001200)=""/4096}, 0x18) 10:21:50 executing program 5 (fault-call:4 fault-nth:2): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:21:50 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) kcmp(r0, r1, 0x4, r2, r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x13a) getsockopt$inet6_tcp_buf(r3, 0x11a, 0x0, &(0x7f0000001680)=""/4096, &(0x7f0000000180)=0x1000) 10:21:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) [ 194.083066] binder: release 12539:12546 transaction 236 out, still active [ 194.097101] binder: unexpected work type, 4, not freed [ 194.102477] binder: undelivered TRANSACTION_COMPLETE [ 194.109875] FAULT_INJECTION: forcing a failure. [ 194.109875] name failslab, interval 1, probability 0, space 0, times 0 [ 194.121537] CPU: 0 PID: 12541 Comm: syz-executor2 Not tainted 4.17.0+ #90 [ 194.128478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.137842] Call Trace: [ 194.140450] dump_stack+0x1b9/0x294 [ 194.144101] ? dump_stack_print_info.cold.2+0x52/0x52 [ 194.149311] ? print_usage_bug+0xc0/0xc0 [ 194.153455] should_fail.cold.4+0xa/0x1a [ 194.157544] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 194.162670] ? graph_lock+0x170/0x170 [ 194.166496] ? find_held_lock+0x36/0x1c0 [ 194.170575] ? __lock_is_held+0xb5/0x140 [ 194.174661] ? check_same_owner+0x320/0x320 [ 194.179002] ? rcu_note_context_switch+0x710/0x710 [ 194.183938] ? lock_downgrade+0x8e0/0x8e0 [ 194.188080] __should_failslab+0x124/0x180 [ 194.192306] should_failslab+0x9/0x14 [ 194.196094] __kmalloc+0x2c8/0x760 [ 194.199626] ? sock_kmalloc+0x14e/0x1d0 [ 194.203602] sock_kmalloc+0x14e/0x1d0 [ 194.207401] ? __sk_mem_schedule+0xe0/0xe0 [ 194.211626] ? mark_held_locks+0xc9/0x160 [ 194.215776] af_alg_alloc_areq+0x7b/0x270 [ 194.219914] ? alg_accept+0x60/0x60 [ 194.223528] ? trace_hardirqs_on+0xd/0x10 [ 194.227667] ? __local_bh_enable_ip+0x161/0x230 [ 194.232341] ? lock_sock_nested+0xe7/0x120 [ 194.236579] skcipher_recvmsg+0x34c/0x1200 [ 194.240820] ? skcipher_bind+0x30/0x30 [ 194.244702] ? skcipher_check_key.isra.3+0x6d/0x240 [ 194.249722] skcipher_recvmsg_nokey+0x69/0x90 [ 194.254224] ? skcipher_sendpage_nokey+0xa0/0xa0 [ 194.258968] sock_recvmsg+0xd0/0x110 [ 194.262671] __sys_recvfrom+0x311/0x5d0 [ 194.266635] ? __ia32_sys_send+0x100/0x100 [ 194.270857] ? kasan_check_read+0x11/0x20 [ 194.275004] ? rcu_is_watching+0x85/0x140 [ 194.279144] ? rcu_pm_notify+0xc0/0xc0 [ 194.283035] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 194.288583] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 194.294106] ? syscall_slow_exit_work+0x12d/0x4f0 [ 194.298948] ? lockdep_sys_exit_thunk+0x2e/0x2e [ 194.303609] ? tracehook_report_syscall_exit+0x2f0/0x2f0 [ 194.309048] ? __ia32_sys_read+0xb0/0xb0 [ 194.313099] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 194.317939] __x64_sys_recvfrom+0xe1/0x1a0 [ 194.322164] do_syscall_64+0x1b1/0x800 [ 194.326040] ? finish_task_switch+0x1ca/0x840 [ 194.330522] ? syscall_return_slowpath+0x5c0/0x5c0 [ 194.335438] ? syscall_return_slowpath+0x30f/0x5c0 [ 194.340378] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 194.345820] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 194.350655] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 194.355840] RIP: 0033:0x4559f9 [ 194.359012] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 10:21:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x1, 0x12100) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x81, 0xfffffffffffffff8}, &(0x7f0000000300)=0x10) sendmmsg$inet_sctp(r1, &(0x7f0000000ac0)=[{&(0x7f0000000140)=@in6={0xa, 0x4e23, 0x80000000, @mcast2={0xff, 0x2, [], 0x1}, 0xfffffffffffffffe}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="b49c91a49fe0b527ee5b766b9e6f8a00727f211a07be49484defb1719914442273872bde01029bd300112e0c", 0x2c}, {&(0x7f00000001c0)="be34bcb164c87ad55b4c16d9c9299802f113a43eda78e449e931", 0x1a}], 0x2, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000008400000000000000041ec10495000000180000000000000084003d000500000030000000ffffffff1865000000000000840000000500000000000000aa0b0000300000001cf7ffff840e000001000000cc04f8ff08020000ff01000000040000000000000200000009000000", @ANYRES32=r2, @ANYBLOB="18000000000000008400000005000000300000000400e29809000018000000000000008400000000000000aa98e0826604bf10b2bc970000000000000000"], 0xa8, 0x4}, {&(0x7f0000000400)=@in6={0xa, 0x4e20, 0x10000, @loopback={0x0, 0x1}, 0x80000001}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000440)="4a91a2483cff708a0d0b51dbc46b886605e13d083e2a8352d28e27603a94d387c68867f6101b3694ad859d802cd1c5fe", 0x30}, {&(0x7f0000000480)="1b1a12bd9a72b603f737d0e26be937b516ab60803e3cc9291d330f3692bfac361df5e8e769a931c4cbeb301fd296fa8eb913123ccb18ddc90ab39153ada7fc31155dcb7b2947125da439842aab8916f618cb4fab7caa66a0006faf10604a0ca779fd88cf6546f02334f72aceaf746aa804ae499a7c3150631f521350ef9eb8986449f5610e7da42f0bf1d9ea8a3b6000ce32269af858b1017521660e1ab613bf0c5a980b76ca6e4f7e681cf353fcc0a7cd92c2a5ec11cfd708d81fa6df0e77c77175b70fea0225a981645dd7e49b448005c8f8c3feeb551c812b1d3b05b4ad915092dcd908a675480f", 0xe9}, {&(0x7f0000000580)="3e276173f1e26024b5a4", 0xa}, {&(0x7f00000005c0)="b118b083673bf8e3bafe914408b2139b377e1c5f886c610760cb4118fc5c5f9f014a9f363b4763f6ea12a95c7c97202ef63887ffd124ec6219df49a98479", 0x3e}, {&(0x7f0000000600)="117af3da8b963d346919b985915ee5209b13520080051f40107638d153a7084914f8783a9559b70f31b54c88000f44253bfc4c8588da89e20e988da2c6a9de2b3a0d6657f448fd71", 0x48}, {&(0x7f0000000680)="2e7a377235cb2ea56d4a2b4d5146a47830e4cb9cbcaadcd0745859722a8a7f0e18a0e21d2a73470963f6f0d597d1256de1bc8f06135b0b03800abee9b5483bb90d07def78a2fd7558ddbdd14825357cbe74849db4b2a81c66e2d4b228e3dbb02a4932754fbc14328d2c8e0afae9464d29d557cb2c0369ed467a24443103d521b11d7f91201df7ea1b454e824fc43bca537e12c61cf6eaea77640a3994bf912daf84a4d7afc984c2ea3389a6b92f499334fa8cd07a52b7fd1fcf28838", 0xbc}, {&(0x7f0000000740)="9f221e732dd74b9c7072b488ad125cc59c602ad4bc260c6bbe1c4024c67f07085b2b89f56bc55e0b414cc85ba57f906c26dc16cdc73dd96d426f0b83174887c0000481750b70daa2f7253d86298a428b2a36ce6b454f4ffed5e137c1f8d249835c0244ac0d12af194e16549f03e28821a34a5dc31c8d84cb73b6b874573be13f4b23f6b022d6f73790032d4eb932535e4cea03a8840f48ee4e2a69ddca7bcc1bb8a0c14957c77f7a35739f58b887828f0bee293f8c8006fc37648fe0e396c26da1be6ba8cb46200fb406f15bf541", 0xce}, {&(0x7f0000000840)="0ae5deb7c30be1d8e856c15b34f79cc4b4325d46cc2e8678f012044e243fddccffdad3bc4838cf1919774bdf3d4e1923452c0f28b1737cee3bfcdc3b19e9ab1bb10046d4175e15fdb421f51cc4a6f517c42ea43287cfc144e9da7cc891288767d49d438652ca656055e08204a209767b7fcf399265e76bcfa6c96fdca704aaa09f49ae05ee19b9ec1cea00c81c67bfaba5e4bc60c92b6feb1128e2b8c617135af994d39754155cc311c750eaf8bbf2b9d7efd35dd361b2c0", 0xb8}, {&(0x7f0000000900)="3c414fe11ef0d8d8c5bd5a00013145f65a2296b6a4761a7a643a1bb9da7693bb75942b1cc27094e8848ce513715c4aaacbf8cae311029d248e0b5cb6f34d069b5b80b57b68e7db827bfaafdfa12c133410af44ab893f7218edbcae4e3ab92e76329e6fb64af3909c7ba6211758083e5e405070b27c99cfa36efa1044fa1242ec402c8eece27df5e3818bda71a91ac3a29e217e2a27fe37c2d840e6193e939e6975de41c1e9b1bcfb10d094563e70eb601a1f61dc219942cce890004f62b18ff8", 0xc0}, {&(0x7f00000009c0)="7034fe0faece7706990a12eba1a3bbf715d2d34ac2bebddcdc3ab62a", 0x1c}], 0xa, 0x0, 0x0, 0x8c0}], 0x2, 0x20040001) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x3}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000b40)=0x2) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x2}) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x9, &(0x7f0000000080), 0x10) close(r3) 10:21:50 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x0, 0x0, 0x5, 0x0, 0x10}, 0x2c) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a93", 0x5) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000100)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0x0, 0x0, {0x7}}, 0x28f}, 0x1}, 0x0) recvmsg(r3, &(0x7f00000002c0)={&(0x7f0000000180)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/112, 0x7}, {&(0x7f0000002900)=""/4096, 0x1000}], 0x2, &(0x7f00000003c0)=""/164, 0xa4}, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="3b8d201c1f59"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10:21:50 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 194.378262] RSP: 002b:00007fe13c65bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 194.385960] RAX: ffffffffffffffda RBX: 00007fe13c65c6d4 RCX: 00000000004559f9 [ 194.393216] RDX: ffffffffffffffbd RSI: 0000000020000140 RDI: 0000000000000014 [ 194.400472] RBP: 000000000072bea0 R08: 0000000000000000 R09: fffffffffffffc84 [ 194.407728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 194.414987] R13: 00000000004c05cd R14: 00000000004cfb50 R15: 0000000000000000 [ 194.426767] FAULT_INJECTION: forcing a failure. [ 194.426767] name failslab, interval 1, probability 0, space 0, times 0 [ 194.427451] binder: 12539:12546 transaction failed 29189/-22, size 0-0 line 2852 [ 194.438383] CPU: 1 PID: 12534 Comm: syz-executor5 Not tainted 4.17.0+ #90 [ 194.452854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.459698] binder: undelivered TRANSACTION_ERROR: 29189 [ 194.462225] Call Trace: [ 194.462249] dump_stack+0x1b9/0x294 [ 194.462270] ? dump_stack_print_info.cold.2+0x52/0x52 [ 194.462288] ? rcu_note_context_switch+0x710/0x710 [ 194.467792] binder: send failed reply for transaction 236, target dead [ 194.472065] should_fail.cold.4+0xa/0x1a [ 194.472082] ? kasan_check_write+0x14/0x20 [ 194.472106] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 194.505777] ? graph_lock+0x170/0x170 [ 194.509574] ? check_same_owner+0x320/0x320 [ 194.513883] ? graph_lock+0x170/0x170 [ 194.517735] ? rcu_note_context_switch+0x710/0x710 [ 194.522656] ? find_held_lock+0x36/0x1c0 [ 194.526720] ? __lock_is_held+0xb5/0x140 [ 194.530788] ? check_same_owner+0x320/0x320 [ 194.535098] ? rcu_note_context_switch+0x710/0x710 [ 194.540023] __should_failslab+0x124/0x180 [ 194.544250] should_failslab+0x9/0x14 [ 194.548042] kmem_cache_alloc_node+0x272/0x780 [ 194.552632] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 194.557574] __alloc_skb+0x111/0x780 [ 194.561281] ? skb_scrub_packet+0x580/0x580 [ 194.565612] ? kasan_check_write+0x14/0x20 [ 194.569838] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 194.574757] ? wait_for_completion+0x870/0x870 [ 194.579341] ? mutex_unlock+0xd/0x10 [ 194.583061] ? inet_diag_cmd_exact+0x86/0x170 [ 194.587551] ? inet_diag_handler_cmd+0x314/0x3e0 [ 194.592299] netlink_ack+0x2d7/0xbc0 [ 194.596013] ? netlink_sendmsg+0xfa0/0xfa0 [ 194.600266] ? mutex_unlock+0xd/0x10 [ 194.603968] ? sock_diag_rcv_msg+0x250/0x3d0 [ 194.608368] netlink_rcv_skb+0x35d/0x440 [ 194.612417] ? sock_diag_bind+0x80/0x80 [ 194.616395] ? netlink_ack+0xbc0/0xbc0 [ 194.620274] ? rcu_report_qs_rnp+0x790/0x790 [ 194.624682] ? netlink_skb_destructor+0x210/0x210 [ 194.629533] sock_diag_rcv+0x2a/0x40 [ 194.633250] netlink_unicast+0x58b/0x740 [ 194.637303] ? netlink_attachskb+0x970/0x970 [ 194.641714] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 194.647255] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 194.653122] ? security_netlink_send+0x88/0xb0 [ 194.657719] netlink_sendmsg+0x9f0/0xfa0 [ 194.661773] ? netlink_unicast+0x740/0x740 [ 194.666006] ? security_socket_sendmsg+0x94/0xc0 [ 194.670752] ? netlink_unicast+0x740/0x740 [ 194.674974] sock_sendmsg+0xd5/0x120 [ 194.678672] ___sys_sendmsg+0x805/0x940 [ 194.682634] ? copy_msghdr_from_user+0x560/0x560 [ 194.687384] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 194.692924] ? proc_fail_nth_write+0x96/0x1f0 [ 194.697421] ? __fget_light+0x2ef/0x430 [ 194.701394] ? fget_raw+0x20/0x20 [ 194.704841] ? find_held_lock+0x36/0x1c0 [ 194.709342] ? kasan_check_write+0x14/0x20 [ 194.713577] ? wait_for_completion+0x870/0x870 [ 194.718155] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 194.723681] ? sockfd_lookup_light+0xc5/0x160 [ 194.728167] __sys_sendmsg+0x115/0x270 [ 194.732043] ? __ia32_sys_shutdown+0x80/0x80 [ 194.736437] ? __sb_end_write+0xac/0xe0 [ 194.740399] ? fput+0x130/0x1a0 [ 194.743666] ? ksys_write+0x1a6/0x250 [ 194.747462] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 194.752299] __x64_sys_sendmsg+0x78/0xb0 [ 194.756362] do_syscall_64+0x1b1/0x800 [ 194.760242] ? finish_task_switch+0x1ca/0x840 [ 194.764728] ? syscall_return_slowpath+0x5c0/0x5c0 [ 194.769644] ? syscall_return_slowpath+0x30f/0x5c0 [ 194.774567] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 194.779927] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 194.784765] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 194.789950] RIP: 0033:0x4559f9 [ 194.793122] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 194.812383] RSP: 002b:00007fcee12c1c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.820086] RAX: ffffffffffffffda RBX: 00007fcee12c26d4 RCX: 00000000004559f9 [ 194.827342] RDX: 0000000000000000 RSI: 0000000020005000 RDI: 0000000000000014 10:21:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x890f, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) [ 194.834598] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 194.841855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 194.849110] R13: 00000000004c0bd3 R14: 00000000004d0420 R15: 0000000000000002 10:21:51 executing program 2 (fault-call:7 fault-nth:1): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) [ 194.900608] binder_alloc: 12563: binder_alloc_buf, no vma [ 194.906279] binder: 12563:12564 transaction failed 29189/-3, size 0-0 line 2967 10:21:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000)=0x8e, 0x4) syslog(0xa, 0x0, 0x8eabae6dc4a2e311) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x420000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000080)={0x4e3, 0x20, 0x6, {0x77359400}, 0x7, 0x3f}) accept4(r0, &(0x7f00000002c0)=@xdp={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x80, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdf}, [@call={0x85, 0x0, 0x0, 0x28}], {0x95}}, &(0x7f0000000200)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x41f00, 0x1, [], r3, 0xa}, 0x48) mincore(&(0x7f0000ff4000/0x9000)=nil, 0x9000, &(0x7f00000003c0)=""/4096) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000100)={0x81, 0x100000000, 0x1, 0xffff, 0x6, 0x3}) 10:21:51 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:21:51 executing program 4: mincore(&(0x7f00006ca000/0x3000)=nil, 0xffffffffffffff3f, &(0x7f0000c91000)=""/34) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x10004, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 10:21:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 195.112630] FAULT_INJECTION: forcing a failure. [ 195.112630] name failslab, interval 1, probability 0, space 0, times 0 [ 195.113274] binder: BINDER_SET_CONTEXT_MGR already set [ 195.123955] CPU: 1 PID: 12574 Comm: syz-executor2 Not tainted 4.17.0+ #90 [ 195.124046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.124059] Call Trace: [ 195.140519] IPVS: ftp: loaded support on port[0] = 21 [ 195.145661] dump_stack+0x1b9/0x294 [ 195.145685] ? dump_stack_print_info.cold.2+0x52/0x52 [ 195.145706] ? rcu_is_watching+0x85/0x140 [ 195.145733] should_fail.cold.4+0xa/0x1a [ 195.145755] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 195.145773] ? __get_user_pages_fast+0x3e0/0x3e0 [ 195.176774] binder: 12588:12591 ioctl 40046207 0 returned -16 [ 195.180430] ? __kernel_text_address+0xd/0x40 [ 195.180452] ? graph_lock+0x170/0x170 [ 195.180473] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 195.180492] ? find_held_lock+0x36/0x1c0 [ 195.180513] ? __lock_is_held+0xb5/0x140 [ 195.180536] ? check_same_owner+0x320/0x320 [ 195.212139] ? find_held_lock+0x36/0x1c0 [ 195.212713] binder_alloc: 12563: binder_alloc_buf, no vma [ 195.216208] ? rcu_note_context_switch+0x710/0x710 [ 195.216224] ? print_usage_bug+0xc0/0xc0 [ 195.216247] __should_failslab+0x124/0x180 [ 195.216266] should_failslab+0x9/0x14 [ 195.216279] __kmalloc+0x2c8/0x760 [ 195.216293] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 195.216308] ? iov_iter_advance+0x2e4/0x14c0 [ 195.216325] ? sg_init_table+0x28/0x60 [ 195.221916] binder: 12588:12591 transaction failed 29189/-3, size 24-8 line 2967 [ 195.226772] ? sock_kmalloc+0x14e/0x1d0 [ 195.226795] sock_kmalloc+0x14e/0x1d0 [ 195.226813] ? __sk_mem_schedule+0xe0/0xe0 [ 195.254838] binder: 12588:12591 got transaction to invalid handle [ 195.255698] ? rcu_read_lock_sched_held+0x108/0x120 [ 195.255722] af_alg_get_rsgl+0x1ce/0x940 [ 195.255746] ? af_alg_make_sg+0x4d0/0x4d0 [ 195.263399] binder: 12588:12591 transaction failed 29201/-22, size 0-0 line 2852 [ 195.267278] ? mark_held_locks+0xc9/0x160 [ 195.267300] ? af_alg_alloc_areq+0x1e4/0x270 [ 195.267312] ? alg_accept+0x60/0x60 [ 195.267330] ? __local_bh_enable_ip+0x161/0x230 [ 195.319176] ? lock_sock_nested+0xe7/0x120 [ 195.323446] skcipher_recvmsg+0x396/0x1200 [ 195.327708] ? skcipher_bind+0x30/0x30 [ 195.331614] ? skcipher_check_key.isra.3+0x6d/0x240 [ 195.336648] skcipher_recvmsg_nokey+0x69/0x90 [ 195.341153] ? skcipher_sendpage_nokey+0xa0/0xa0 [ 195.345921] sock_recvmsg+0xd0/0x110 [ 195.349655] __sys_recvfrom+0x311/0x5d0 [ 195.353649] ? __ia32_sys_send+0x100/0x100 [ 195.357897] ? kasan_check_read+0x11/0x20 [ 195.362063] ? rcu_is_watching+0x85/0x140 [ 195.366221] ? rcu_pm_notify+0xc0/0xc0 [ 195.370157] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 195.375723] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 195.381279] ? syscall_slow_exit_work+0x12d/0x4f0 [ 195.386137] ? lockdep_sys_exit_thunk+0x2e/0x2e [ 195.390822] ? tracehook_report_syscall_exit+0x2f0/0x2f0 [ 195.396292] ? __ia32_sys_read+0xb0/0xb0 [ 195.400372] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 195.405933] __x64_sys_recvfrom+0xe1/0x1a0 [ 195.410190] do_syscall_64+0x1b1/0x800 [ 195.414090] ? finish_task_switch+0x1ca/0x840 [ 195.418609] ? syscall_return_slowpath+0x5c0/0x5c0 [ 195.423559] ? syscall_return_slowpath+0x30f/0x5c0 [ 195.428524] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 195.434008] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 195.438878] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 195.444086] RIP: 0033:0x4559f9 [ 195.447277] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 195.466668] RSP: 002b:00007fe13c65bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 195.474403] RAX: ffffffffffffffda RBX: 00007fe13c65c6d4 RCX: 00000000004559f9 [ 195.481684] RDX: ffffffffffffffbd RSI: 0000000020000140 RDI: 0000000000000014 [ 195.488952] RBP: 000000000072bea0 R08: 0000000000000000 R09: fffffffffffffc84 [ 195.496223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 195.503492] R13: 00000000004c05cd R14: 00000000004cfb50 R15: 0000000000000001 [ 195.543189] binder: undelivered TRANSACTION_ERROR: 29189 [ 195.549228] binder: release 12563:12564 transaction 241 out, still active [ 195.556564] binder: unexpected work type, 4, not freed [ 195.561920] binder: undelivered TRANSACTION_COMPLETE [ 195.568939] binder: undelivered TRANSACTION_ERROR: 29201 [ 195.575382] binder: undelivered TRANSACTION_ERROR: 29189 [ 195.581090] binder: send failed reply for transaction 241, target dead [ 195.899492] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.905897] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.913167] device bridge_slave_0 entered promiscuous mode [ 195.939770] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.946184] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.953381] device bridge_slave_1 entered promiscuous mode [ 195.978827] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 196.005077] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 196.077141] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 196.105436] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 196.216360] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 196.223547] team0: Port device team_slave_0 added [ 196.248358] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 196.255514] team0: Port device team_slave_1 added [ 196.281767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.308497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.335282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.362584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.598867] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.605285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.611953] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.618346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.466287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.548898] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 197.632571] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.638772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.646412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.723407] 8021q: adding VLAN 0 to HW filter on device team0 10:21:55 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:21:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:55 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") unshare(0x1fc) 10:21:55 executing program 5 (fault-call:4 fault-nth:3): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:21:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:21:55 executing program 2 (fault-call:7 fault-nth:2): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) 10:21:55 executing program 6: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000340)={@mcast1, 0x0}, &(0x7f0000000380)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x400}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, @generic={0x2, 0x8, 0x6, 0x7fff}, @call={0x85, 0x0, 0x0, 0x12}], {0x95}}, &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x0, 0x0, 0x41000, 0x0, [], r0, 0x3}, 0x48) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x440, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x1, 0x0, 0x0, 0x8dc, 0x20, r1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0x418, &(0x7f00001a7f05)=""/251}, 0x48) [ 199.197615] binder: release 12860:12862 transaction 248 out, still active [ 199.204800] binder: unexpected work type, 4, not freed [ 199.210136] binder: undelivered TRANSACTION_COMPLETE [ 199.210588] FAULT_INJECTION: forcing a failure. [ 199.210588] name failslab, interval 1, probability 0, space 0, times 0 [ 199.215630] binder: 12860:12862 transaction failed 29189/-22, size 0-0 line 2852 [ 199.226635] CPU: 1 PID: 12866 Comm: syz-executor5 Not tainted 4.17.0+ #90 [ 199.226652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.250514] Call Trace: [ 199.253107] dump_stack+0x1b9/0x294 [ 199.256749] ? dump_stack_print_info.cold.2+0x52/0x52 [ 199.262203] ? is_bpf_text_address+0xd7/0x170 [ 199.266872] ? kernel_text_address+0x79/0xf0 [ 199.271267] ? __unwind_start+0x166/0x330 [ 199.275406] should_fail.cold.4+0xa/0x1a [ 199.279462] ? __save_stack_trace+0x7e/0xd0 [ 199.283785] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 199.288882] ? graph_lock+0x170/0x170 [ 199.292675] ? save_stack+0x43/0xd0 [ 199.296312] ? kasan_kmalloc+0xc4/0xe0 [ 199.300188] ? kasan_slab_alloc+0x12/0x20 [ 199.305462] ? find_held_lock+0x36/0x1c0 [ 199.309524] ? __lock_is_held+0xb5/0x140 [ 199.313593] ? check_same_owner+0x320/0x320 [ 199.317920] ? rcu_note_context_switch+0x710/0x710 [ 199.322854] __should_failslab+0x124/0x180 [ 199.327084] should_failslab+0x9/0x14 [ 199.330894] kmem_cache_alloc_node_trace+0x26f/0x770 [ 199.336007] __kmalloc_node_track_caller+0x33/0x70 [ 199.340952] __kmalloc_reserve.isra.39+0x3a/0xe0 [ 199.345698] __alloc_skb+0x14d/0x780 [ 199.349401] ? skb_scrub_packet+0x580/0x580 [ 199.353715] ? kasan_check_write+0x14/0x20 [ 199.357953] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 199.362892] ? wait_for_completion+0x870/0x870 [ 199.367468] ? mutex_unlock+0xd/0x10 [ 199.371173] ? inet_diag_cmd_exact+0x86/0x170 [ 199.375665] ? inet_diag_handler_cmd+0x314/0x3e0 [ 199.380421] netlink_ack+0x2d7/0xbc0 [ 199.384151] ? netlink_sendmsg+0xfa0/0xfa0 [ 199.388384] ? mutex_unlock+0xd/0x10 [ 199.392097] ? sock_diag_rcv_msg+0x250/0x3d0 [ 199.396518] netlink_rcv_skb+0x35d/0x440 [ 199.400571] ? sock_diag_bind+0x80/0x80 [ 199.404535] ? netlink_ack+0xbc0/0xbc0 [ 199.408409] ? rcu_report_qs_rnp+0x790/0x790 [ 199.412822] ? netlink_skb_destructor+0x210/0x210 [ 199.417655] sock_diag_rcv+0x2a/0x40 [ 199.421355] netlink_unicast+0x58b/0x740 [ 199.425411] ? netlink_attachskb+0x970/0x970 [ 199.429826] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 199.435367] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 199.440392] ? security_netlink_send+0x88/0xb0 [ 199.444970] netlink_sendmsg+0x9f0/0xfa0 [ 199.449032] ? netlink_unicast+0x740/0x740 [ 199.453275] ? security_socket_sendmsg+0x94/0xc0 [ 199.458027] ? netlink_unicast+0x740/0x740 [ 199.462266] sock_sendmsg+0xd5/0x120 [ 199.466082] ___sys_sendmsg+0x805/0x940 [ 199.470065] ? copy_msghdr_from_user+0x560/0x560 [ 199.474820] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 199.480449] ? proc_fail_nth_write+0x96/0x1f0 [ 199.484941] ? __fget_light+0x2ef/0x430 [ 199.488908] ? fget_raw+0x20/0x20 [ 199.492350] ? find_held_lock+0x36/0x1c0 [ 199.496403] ? kasan_check_write+0x14/0x20 [ 199.500636] ? wait_for_completion+0x870/0x870 [ 199.505213] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 199.510740] ? sockfd_lookup_light+0xc5/0x160 [ 199.515225] __sys_sendmsg+0x115/0x270 [ 199.519102] ? __ia32_sys_shutdown+0x80/0x80 [ 199.523499] ? __sb_end_write+0xac/0xe0 [ 199.527474] ? fput+0x130/0x1a0 [ 199.530759] ? ksys_write+0x1a6/0x250 [ 199.534569] __x64_sys_sendmsg+0x78/0xb0 [ 199.538625] do_syscall_64+0x1b1/0x800 [ 199.542514] ? finish_task_switch+0x1ca/0x840 [ 199.547000] ? syscall_return_slowpath+0x5c0/0x5c0 [ 199.551920] ? syscall_return_slowpath+0x30f/0x5c0 [ 199.556846] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 199.562203] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 199.567068] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 199.572248] RIP: 0033:0x4559f9 [ 199.575426] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 199.594655] RSP: 002b:00007fcee12c1c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.602363] RAX: ffffffffffffffda RBX: 00007fcee12c26d4 RCX: 00000000004559f9 [ 199.609622] RDX: 0000000000000000 RSI: 0000000020005000 RDI: 0000000000000014 [ 199.616891] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 199.624151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 199.631413] R13: 00000000004c0bd3 R14: 00000000004d0420 R15: 0000000000000003 [ 199.645721] FAULT_INJECTION: forcing a failure. [ 199.645721] name failslab, interval 1, probability 0, space 0, times 0 [ 199.657019] CPU: 1 PID: 12873 Comm: syz-executor2 Not tainted 4.17.0+ #90 [ 199.663962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.673328] Call Trace: [ 199.675940] dump_stack+0x1b9/0x294 [ 199.676946] binder: undelivered TRANSACTION_ERROR: 29189 [ 199.679584] ? dump_stack_print_info.cold.2+0x52/0x52 [ 199.679604] ? get_user_pages_fast+0x223/0x440 [ 199.679627] should_fail.cold.4+0xa/0x1a [ 199.685161] binder: send failed reply for transaction 248, target dead [ 199.690281] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 199.690297] ? __get_user_pages_fast+0x3e0/0x3e0 [ 199.690313] ? kasan_kmalloc+0xc4/0xe0 [ 199.690332] ? sock_kmalloc+0x14e/0x1d0 [ 199.723541] ? af_alg_get_rsgl+0x1ce/0x940 [ 199.727767] ? skcipher_recvmsg+0x396/0x1200 [ 199.732179] ? graph_lock+0x170/0x170 [ 199.735973] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 199.740993] ? find_held_lock+0x36/0x1c0 [ 199.745051] ? __lock_is_held+0xb5/0x140 [ 199.749119] ? check_same_owner+0x320/0x320 [ 199.753528] ? rcu_note_context_switch+0x710/0x710 [ 199.758452] __should_failslab+0x124/0x180 [ 199.762678] should_failslab+0x9/0x14 [ 199.766566] __kmalloc+0x2c8/0x760 [ 199.770106] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 199.775116] ? iov_iter_advance+0x2e4/0x14c0 [ 199.779516] ? sg_init_table+0x28/0x60 [ 199.783417] ? sock_kmalloc+0x14e/0x1d0 [ 199.787382] sock_kmalloc+0x14e/0x1d0 [ 199.792136] ? __sk_mem_schedule+0xe0/0xe0 [ 199.796374] ? rcu_read_lock_sched_held+0x108/0x120 [ 199.801384] af_alg_get_rsgl+0x1ce/0x940 [ 199.805452] ? af_alg_make_sg+0x4d0/0x4d0 [ 199.809612] ? mark_held_locks+0xc9/0x160 [ 199.813761] ? af_alg_alloc_areq+0x1e4/0x270 [ 199.818173] ? alg_accept+0x60/0x60 [ 199.821796] ? __local_bh_enable_ip+0x161/0x230 [ 199.826456] ? lock_sock_nested+0xe7/0x120 [ 199.830683] skcipher_recvmsg+0x396/0x1200 [ 199.834928] ? skcipher_bind+0x30/0x30 [ 199.838816] ? skcipher_check_key.isra.3+0x6d/0x240 [ 199.843827] skcipher_recvmsg_nokey+0x69/0x90 [ 199.848315] ? skcipher_sendpage_nokey+0xa0/0xa0 [ 199.853066] sock_recvmsg+0xd0/0x110 [ 199.856774] __sys_recvfrom+0x311/0x5d0 [ 199.860757] ? __ia32_sys_send+0x100/0x100 [ 199.864985] ? kasan_check_read+0x11/0x20 [ 199.869128] ? rcu_is_watching+0x85/0x140 [ 199.873275] ? rcu_pm_notify+0xc0/0xc0 [ 199.877160] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 199.882708] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 199.888326] ? syscall_slow_exit_work+0x12d/0x4f0 [ 199.893174] ? lockdep_sys_exit_thunk+0x2e/0x2e [ 199.897849] ? tracehook_report_syscall_exit+0x2f0/0x2f0 [ 199.903295] ? __ia32_sys_read+0xb0/0xb0 [ 199.907350] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 199.912901] __x64_sys_recvfrom+0xe1/0x1a0 [ 199.917167] do_syscall_64+0x1b1/0x800 [ 199.921064] ? finish_task_switch+0x1ca/0x840 [ 199.925555] ? syscall_return_slowpath+0x5c0/0x5c0 [ 199.930489] ? syscall_return_slowpath+0x30f/0x5c0 [ 199.935425] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 199.940784] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 199.945622] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 199.950799] RIP: 0033:0x4559f9 [ 199.953985] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 199.973245] RSP: 002b:00007fe13c65bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 199.980949] RAX: ffffffffffffffda RBX: 00007fe13c65c6d4 RCX: 00000000004559f9 [ 199.988558] RDX: ffffffffffffffbd RSI: 0000000020000140 RDI: 0000000000000014 10:21:56 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f00000044c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000004ac0), 0x0, &(0x7f0000004b80)=""/21, 0x15}}, {{0x0, 0x0, &(0x7f0000004c40), 0x101, &(0x7f0000004c80)=""/79, 0x4f}}], 0x2, 0x22, &(0x7f0000004f00)={0x77359400}) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x8, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) sched_setparam(0x0, &(0x7f0000000040)=0x3ff) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x20000000000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x5001}) umount2(&(0x7f0000000140)='./file0\x00', 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) bind(r1, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x3, 0x3, 0x2, 0x1}}, 0x80) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r4, 0x1, &(0x7f00000016c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000040), 0x2f3}]) r5 = shmget(0x0, 0x3000, 0x30, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) 10:21:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7600") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 199.995821] RBP: 000000000072bea0 R08: 0000000000000000 R09: fffffffffffffc84 [ 200.003082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 200.010339] R13: 00000000004c05cd R14: 00000000004cfb50 R15: 0000000000000002 10:21:56 executing program 5 (fault-call:4 fault-nth:4): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) [ 200.053758] binder_alloc: 12881: binder_alloc_buf, no vma [ 200.059437] binder: 12881:12886 transaction failed 29189/-3, size 0-0 line 2967 10:21:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r1, r2) socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000300)='{\x00', 0x2, 0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x4, 0x3e0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, &(0x7f0000000240), &(0x7f0000000600)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'bcsf0\x00', 'bond_slave_1\x00', 'yam0\x00', "7465610200", @link_local={0x1, 0x80, 0xc2}, [0x0, 0x3], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xa0, 0x120, 0x170, [@pkttype={'pkttype\x00', 0x8, {{0x5}}}]}, [@common=@AUDIT={'AUDIT\x00', 0x8}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}, {{{0x15, 0x0, 0x0, 'veth0_to_bridge\x00', 'bridge0\x00', 'syz_tun\x00', 'nr0\x00', @random="60f9a9d474aa", [0x100000000, 0x0, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x70, 0x70, 0xa0}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{{{0x11, 0x40, 0x10, 'bridge0\x00', 'irlan0\x00', 'veth1_to_bond\x00', 'sit0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @empty, [0xff, 0xff, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa0}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x9}}}}, {{{0x5, 0x68, 0x1c, 'teql0\x00', 'ifb0\x00', 'bond0\x00', 'veth1_to_bond\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}]}]}, 0x458) getsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000140)={@broadcast, @rand_addr}, &(0x7f0000000180)=0x8) 10:21:56 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 200.096493] binder: release 12881:12886 transaction 253 out, still active [ 200.103570] binder: unexpected work type, 4, not freed [ 200.108916] binder: undelivered TRANSACTION_COMPLETE 10:21:56 executing program 2 (fault-call:7 fault-nth:3): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:21:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7600") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:21:56 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) [ 200.166557] binder: undelivered TRANSACTION_ERROR: 29189 [ 200.172145] binder: send failed reply for transaction 253, target dead 10:21:56 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 200.242283] binder_alloc: 12897: binder_alloc_buf, no vma [ 200.248024] binder: 12897:12905 transaction failed 29189/-3, size 0-0 line 2967 [ 200.255750] binder: release 12897:12905 transaction 258 out, still active [ 200.262845] binder: unexpected work type, 4, not freed [ 200.268288] binder: undelivered TRANSACTION_COMPLETE [ 200.297715] FAULT_INJECTION: forcing a failure. [ 200.297715] name failslab, interval 1, probability 0, space 0, times 0 [ 200.309115] CPU: 0 PID: 12903 Comm: syz-executor2 Not tainted 4.17.0+ #90 [ 200.316079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.325451] Call Trace: [ 200.328065] dump_stack+0x1b9/0x294 [ 200.331726] ? dump_stack_print_info.cold.2+0x52/0x52 [ 200.336969] ? get_user_pages_fast+0x223/0x440 [ 200.341587] should_fail.cold.4+0xa/0x1a [ 200.345690] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 200.350823] ? __get_user_pages_fast+0x3e0/0x3e0 [ 200.355606] ? kasan_kmalloc+0xc4/0xe0 [ 200.359512] ? sock_kmalloc+0x14e/0x1d0 [ 200.363510] ? af_alg_get_rsgl+0x1ce/0x940 [ 200.367762] ? skcipher_recvmsg+0x396/0x1200 [ 200.372196] ? graph_lock+0x170/0x170 [ 200.376022] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 200.381088] ? find_held_lock+0x36/0x1c0 [ 200.385200] ? __lock_is_held+0xb5/0x140 [ 200.389291] ? check_same_owner+0x320/0x320 [ 200.393636] ? rcu_note_context_switch+0x710/0x710 [ 200.398597] __should_failslab+0x124/0x180 [ 200.402878] should_failslab+0x9/0x14 [ 200.405142] IPVS: ftp: loaded support on port[0] = 21 [ 200.406696] __kmalloc+0x2c8/0x760 [ 200.406716] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 200.406736] ? iov_iter_advance+0x2e4/0x14c0 [ 200.406752] ? sg_init_table+0x28/0x60 [ 200.428798] ? sock_kmalloc+0x14e/0x1d0 [ 200.432803] sock_kmalloc+0x14e/0x1d0 [ 200.436621] ? __sk_mem_schedule+0xe0/0xe0 [ 200.440912] ? rcu_read_lock_sched_held+0x108/0x120 [ 200.445971] af_alg_get_rsgl+0x1ce/0x940 [ 200.450061] ? af_alg_make_sg+0x4d0/0x4d0 [ 200.452698] binder: undelivered TRANSACTION_ERROR: 29189 [ 200.454220] ? mark_held_locks+0xc9/0x160 [ 200.454245] ? af_alg_alloc_areq+0x1e4/0x270 [ 200.454260] ? alg_accept+0x60/0x60 [ 200.454278] ? __local_bh_enable_ip+0x161/0x230 [ 200.454296] ? lock_sock_nested+0xe7/0x120 [ 200.454312] skcipher_recvmsg+0x396/0x1200 [ 200.459801] binder: send failed reply for transaction 258, target dead [ 200.463899] ? skcipher_bind+0x30/0x30 [ 200.463917] ? skcipher_check_key.isra.3+0x6d/0x240 [ 200.463933] skcipher_recvmsg_nokey+0x69/0x90 [ 200.505564] ? skcipher_sendpage_nokey+0xa0/0xa0 [ 200.510322] sock_recvmsg+0xd0/0x110 [ 200.514034] __sys_recvfrom+0x311/0x5d0 [ 200.517996] ? __ia32_sys_send+0x100/0x100 [ 200.522234] ? kasan_check_read+0x11/0x20 [ 200.526377] ? rcu_is_watching+0x85/0x140 [ 200.530516] ? rcu_pm_notify+0xc0/0xc0 [ 200.534398] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 200.540206] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 200.545732] ? syscall_slow_exit_work+0x12d/0x4f0 [ 200.550566] ? lockdep_sys_exit_thunk+0x2e/0x2e [ 200.555228] ? tracehook_report_syscall_exit+0x2f0/0x2f0 [ 200.560672] ? __ia32_sys_read+0xb0/0xb0 [ 200.564739] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 200.570275] __x64_sys_recvfrom+0xe1/0x1a0 [ 200.574508] do_syscall_64+0x1b1/0x800 [ 200.578383] ? finish_task_switch+0x1ca/0x840 [ 200.582873] ? syscall_return_slowpath+0x5c0/0x5c0 [ 200.587809] ? syscall_return_slowpath+0x30f/0x5c0 [ 200.592750] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 200.598108] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 200.603388] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 200.608579] RIP: 0033:0x4559f9 [ 200.611770] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 200.631027] RSP: 002b:00007fe13c65bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 200.638734] RAX: ffffffffffffffda RBX: 00007fe13c65c6d4 RCX: 00000000004559f9 10:21:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) 10:21:56 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x400000000006, 0x0, 0x0, 0x2, 0x0, 0x70bd2d}, 0x10}, 0x1}, 0x0) socket$inet6(0xa, 0x0, 0xaf) 10:21:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7600") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 200.646005] RDX: ffffffffffffffbd RSI: 0000000020000140 RDI: 0000000000000014 [ 200.653282] RBP: 000000000072bea0 R08: 0000000000000000 R09: fffffffffffffc84 [ 200.660544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 200.667812] R13: 00000000004c05cd R14: 00000000004cfb50 R15: 0000000000000003 [ 200.733561] binder_alloc: 12918: binder_alloc_buf, no vma [ 200.739253] binder: 12918:12920 transaction failed 29189/-3, size 0-0 line 2967 [ 200.746861] binder: release 12918:12920 transaction 263 out, still active [ 200.753958] binder: unexpected work type, 4, not freed [ 200.759335] binder: undelivered TRANSACTION_COMPLETE [ 200.841489] binder: undelivered TRANSACTION_ERROR: 29189 [ 200.847222] binder: send failed reply for transaction 263, target dead [ 200.916317] device bridge_slave_1 left promiscuous mode [ 200.922078] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.942011] device bridge_slave_0 left promiscuous mode [ 200.947627] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.979794] team0 (unregistering): Port device team_slave_1 removed [ 200.989737] team0 (unregistering): Port device team_slave_0 removed [ 201.001282] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 201.017295] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 201.044847] bond0 (unregistering): Released all slaves [ 201.791217] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.797780] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.805233] device bridge_slave_0 entered promiscuous mode [ 201.844598] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.851060] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.858862] device bridge_slave_1 entered promiscuous mode [ 201.896417] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 201.936183] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 202.047832] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 202.087908] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 202.257910] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 202.265320] team0: Port device team_slave_0 added [ 202.294079] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 202.301967] team0: Port device team_slave_1 added [ 202.339023] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 202.346307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.362238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.380108] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 202.387096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.395931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.417006] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 202.424267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.432789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.454971] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 202.462239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.470805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.709315] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.715742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.722403] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.728814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.737200] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 203.360149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.597186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.680379] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 203.761962] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 203.768179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.775777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.852382] 8021q: adding VLAN 0 to HW filter on device team0 10:22:01 executing program 2 (fault-call:7 fault-nth:4): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:22:01 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x20000250}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:22:01 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:22:01 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2, @dev}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000340)={0x1, 0x10000, 0xb, 0x6, 0x8, 0x80000001, 0x8001, 0x7952, 0x0}, &(0x7f0000000380)=0x20) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000003c0)={r2}, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe0, 0x32, 0x1, 0x70bd2d, 0x25dfdbfd, {0x4}, [@nested={0xcc, 0x93, [@generic="e568b8f4df30694a0844fdeb4ae7610c13774986527a7683c54a1d511fbcb44eac96239a58817efdc15ae33e47b1c1d63af877a99b546eea2342c3f40d5c8543cdef93e58b77d0d2d747df34b668b27987d4297931b562e71d27f159e415018d4e837348fd810afe63f7eefebdcceb5716d087be7b19f3a129a0122cb7bc7b851e769b0f873598048063e3d8b60b0ce366a53407a9e27517e085dbffbf6e3580f4b29611ea0d5511ad33afc73c8beafd9850d8", @typed={0x14, 0x6d, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', r1}) 10:22:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) 10:22:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:22:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0xfffffffffffffffc) ioctl(r0, 0x8912, &(0x7f0000000080)="4f10b92500") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x90000, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x9) setsockopt$inet_tcp_buf(r1, 0x6, 0x0, &(0x7f00000002c0)="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", 0x1000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:22:01 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgget(0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) sysinfo(&(0x7f0000000000)=""/60) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x2, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) read(r0, &(0x7f00000001c0)=""/4096, 0x1000) [ 205.342679] binder: 13200:13206 transaction failed 29189/-22, size 24-8 line 2852 [ 205.353094] FAULT_INJECTION: forcing a failure. [ 205.353094] name failslab, interval 1, probability 0, space 0, times 0 [ 205.364450] CPU: 1 PID: 13205 Comm: syz-executor2 Not tainted 4.17.0+ #90 [ 205.371503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.380850] Call Trace: [ 205.383434] dump_stack+0x1b9/0x294 [ 205.387061] ? dump_stack_print_info.cold.2+0x52/0x52 [ 205.392332] ? perf_trace_lock_acquire+0xe3/0x980 [ 205.397182] ? csum_and_copy_from_iter+0x14c0/0x14c0 [ 205.402288] should_fail.cold.4+0xa/0x1a [ 205.406343] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 205.411459] ? __lock_is_held+0xb5/0x140 [ 205.415516] ? graph_lock+0x170/0x170 [ 205.419312] ? find_held_lock+0x36/0x1c0 [ 205.423368] ? __lock_is_held+0xb5/0x140 [ 205.427431] ? check_same_owner+0x320/0x320 [ 205.431746] ? rcu_read_lock_sched_held+0x108/0x120 [ 205.436757] ? rcu_note_context_switch+0x710/0x710 [ 205.441693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 205.447243] __should_failslab+0x124/0x180 [ 205.451476] should_failslab+0x9/0x14 [ 205.455276] __kmalloc+0x2c8/0x760 [ 205.458815] ? af_alg_make_sg+0x4d0/0x4d0 [ 205.462979] ? sock_kmalloc+0x14e/0x1d0 [ 205.466949] ? mark_held_locks+0xc9/0x160 [ 205.471097] sock_kmalloc+0x14e/0x1d0 [ 205.474891] ? __sk_mem_schedule+0xe0/0xe0 [ 205.479120] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 205.484129] ? af_alg_count_tsgl+0x1bc/0x250 [ 205.488536] skcipher_recvmsg+0x4e6/0x1200 [ 205.492772] ? skcipher_bind+0x30/0x30 [ 205.496656] ? skcipher_check_key.isra.3+0x6d/0x240 [ 205.501668] skcipher_recvmsg_nokey+0x69/0x90 [ 205.506153] ? skcipher_sendpage_nokey+0xa0/0xa0 [ 205.510912] sock_recvmsg+0xd0/0x110 [ 205.514625] __sys_recvfrom+0x311/0x5d0 [ 205.518605] ? __ia32_sys_send+0x100/0x100 [ 205.522828] ? kasan_check_read+0x11/0x20 [ 205.526974] ? rcu_is_watching+0x85/0x140 [ 205.531112] ? rcu_pm_notify+0xc0/0xc0 [ 205.535010] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 205.540564] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 205.546094] ? syscall_slow_exit_work+0x12d/0x4f0 [ 205.550922] ? lockdep_sys_exit_thunk+0x2e/0x2e [ 205.555584] ? tracehook_report_syscall_exit+0x2f0/0x2f0 [ 205.561030] ? __ia32_sys_read+0xb0/0xb0 [ 205.565079] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 205.570609] __x64_sys_recvfrom+0xe1/0x1a0 [ 205.574837] do_syscall_64+0x1b1/0x800 [ 205.578715] ? finish_task_switch+0x1ca/0x840 [ 205.583202] ? syscall_return_slowpath+0x5c0/0x5c0 [ 205.588121] ? syscall_return_slowpath+0x30f/0x5c0 [ 205.593050] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 205.598407] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 205.603245] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 205.608439] RIP: 0033:0x4559f9 [ 205.611624] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 205.630927] RSP: 002b:00007fe13c65bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 205.638626] RAX: ffffffffffffffda RBX: 00007fe13c65c6d4 RCX: 00000000004559f9 [ 205.645882] RDX: ffffffffffffffbd RSI: 0000000020000140 RDI: 0000000000000014 [ 205.653138] RBP: 000000000072bea0 R08: 0000000000000000 R09: fffffffffffffc84 [ 205.660395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 205.667664] R13: 00000000004c05cd R14: 00000000004cfb50 R15: 0000000000000004 10:22:01 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:22:01 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0xa}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) [ 205.698836] binder: undelivered TRANSACTION_ERROR: 29189 [ 205.704788] binder: 13200:13206 got transaction to invalid handle [ 205.711746] binder: 13200:13206 transaction failed 29201/-22, size 0-0 line 2852 10:22:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:22:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20000, 0x0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000040)=0x9) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:22:02 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ed277a4200100360070") setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@local={0xfe, 0x80, [], 0xaa}, 0x9, 0x2, 0x6, 0x4, 0x7, 0x1, 0x401}, 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000140)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}}}, 0x108) 10:22:02 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000cac000)='/dev/ptmx\x00', 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x6, 0x20001000, 0x3000, 0x9, 0x100000000, 0x1f, 0x88, 0x9}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000622ffc)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) getsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$KVM_RUN(r1, 0xae80, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f000082ef0a)=""/246) 10:22:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:22:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) [ 205.913288] device bridge_slave_1 left promiscuous mode [ 205.918898] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.921460] binder: undelivered TRANSACTION_ERROR: 29201 [ 205.985951] device bridge_slave_0 left promiscuous mode [ 205.991550] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.099203] team0 (unregistering): Port device team_slave_1 removed [ 206.108884] IPVS: ftp: loaded support on port[0] = 21 [ 206.121112] team0 (unregistering): Port device team_slave_0 removed [ 206.131008] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 206.149888] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 206.175690] bond0 (unregistering): Released all slaves [ 206.791474] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.797950] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.805330] device bridge_slave_0 entered promiscuous mode [ 206.845458] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.851911] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.859802] device bridge_slave_1 entered promiscuous mode [ 206.897310] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 206.935553] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 207.048196] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 207.089535] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 207.265801] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 207.273766] team0: Port device team_slave_0 added [ 207.304090] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 207.311980] team0: Port device team_slave_1 added [ 207.349833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.391585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.417940] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 207.425157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.433230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.463296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.722486] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.729115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.735761] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.742154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.596747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.680824] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 208.762505] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 208.768711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.776358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.858390] 8021q: adding VLAN 0 to HW filter on device team0 10:22:06 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x34000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:22:06 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:22:06 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="295ed277a4200100360070") r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x683, 0x4) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00006d8fe4)=@in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000)={0xa}, 0x1c) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={r2, 0x0, 0x47, 0x1000, &(0x7f0000000080)="d681dce9f5dfac15033fb16e6547ccd252829f2b383406b75b3a2d732794923163423febc0544ad0d128eb86811f9c1dfe34601fd0153a5ec164f356230e8ec3401ff1dcd878c5", &(0x7f0000000100)=""/4096, 0x1}, 0x28) 10:22:06 executing program 2 (fault-call:7 fault-nth:5): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:22:06 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400200, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000040)=0x8, &(0x7f0000000080)=0x1) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0xd31c607fea2db549}, 0xc) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f00000001c0)={0xffffffff, 0xffffffffffffffff, 0x8, 0x100000000, [], [], [], 0x1, 0x2935, 0x5, 0x7f, "848751e4a0585a9127b52c4f7d54780d"}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0x4, 0x8}) 10:22:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000040002, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, 0x3ff, 0x7, 0x4, &(0x7f0000ffb000/0x3000)=nil, 0x7}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x101) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x2, 0x9, r2, 0xfffffffffffffff9, r3, 0x3, 0x7ff, 0x1}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) syslog(0xe, 0x0, 0xffffffffffffffd4) 10:22:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) 10:22:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 210.328289] binder: 13507:13510 transaction failed 29189/-22, size 24-8 line 2852 [ 210.341325] FAULT_INJECTION: forcing a failure. [ 210.341325] name failslab, interval 1, probability 0, space 0, times 0 [ 210.352669] CPU: 0 PID: 13511 Comm: syz-executor2 Not tainted 4.17.0+ #90 [ 210.359606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.368974] Call Trace: [ 210.371585] dump_stack+0x1b9/0x294 10:22:06 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x2) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) r2 = fcntl$getown(r0, 0x9) kcmp(r1, r2, 0x0, r0, r0) r3 = getpid() sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a, 0x0, 0x903b, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x7}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80000, 0x0) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000080)={0x7fffffff, 0x8, 0xffffffffffffff9d, 'queue0\x00', 0x7}) write$sndseq(r0, &(0x7f0000000240)=[{0xffff, 0x0, 0x0, 0x0, @time, {0x469}, {}, @result}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000280)={0x0, 0xfffffffffffffffb}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) 10:22:06 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:22:06 executing program 6: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)="2e2f6367726f7570000478d081", 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000004c0)='io.weight\x00', 0x2, 0x0) read(r0, &(0x7f0000000240)=""/239, 0xffffffffffffff10) write$cgroup_int(r2, &(0x7f0000000040), 0x1e4) [ 210.375232] ? dump_stack_print_info.cold.2+0x52/0x52 [ 210.378159] binder: 13507:13510 got transaction to invalid handle [ 210.380523] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 210.380543] ? trace_hardirqs_on+0xd/0x10 [ 210.380566] should_fail.cold.4+0xa/0x1a [ 210.380591] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 210.386846] binder: 13507:13510 transaction failed 29201/-22, size 0-0 line 2852 [ 210.391838] ? lock_repin_lock+0x410/0x410 [ 210.391858] ? graph_lock+0x170/0x170 [ 210.391877] ? print_usage_bug+0xc0/0xc0 [ 210.396160] binder: undelivered TRANSACTION_ERROR: 29189 [ 210.400081] ? find_held_lock+0x36/0x1c0 [ 210.400103] ? __lock_is_held+0xb5/0x140 [ 210.400128] ? check_same_owner+0x320/0x320 [ 210.443169] ? rcu_note_context_switch+0x710/0x710 [ 210.448113] ? trace_hardirqs_on+0xd/0x10 [ 210.452276] __should_failslab+0x124/0x180 [ 210.456512] should_failslab+0x9/0x14 [ 210.460309] __kmalloc+0x2c8/0x760 [ 210.463846] ? __local_bh_enable_ip+0x161/0x230 [ 210.468508] ? lock_sock_nested+0xe7/0x120 [ 210.472763] ? sock_kmalloc+0x14e/0x1d0 [ 210.476730] sock_kmalloc+0x14e/0x1d0 [ 210.480526] ? __sk_mem_schedule+0xe0/0xe0 [ 210.484761] ? mark_held_locks+0xc9/0x160 [ 210.488907] ? quarantine_put+0xeb/0x190 [ 210.492965] af_alg_alloc_areq+0x7b/0x270 [ 210.497101] ? alg_accept+0x60/0x60 [ 210.500717] ? kasan_check_write+0x14/0x20 [ 210.504951] ? sock_kfree_s+0x47/0x60 [ 210.508745] skcipher_recvmsg+0x34c/0x1200 [ 210.512977] ? skcipher_bind+0x30/0x30 [ 210.516858] ? skcipher_check_key.isra.3+0x6d/0x240 [ 210.521878] skcipher_recvmsg_nokey+0x69/0x90 [ 210.526361] ? skcipher_sendpage_nokey+0xa0/0xa0 [ 210.531113] sock_recvmsg+0xd0/0x110 [ 210.534826] __sys_recvfrom+0x311/0x5d0 [ 210.538796] ? __ia32_sys_send+0x100/0x100 [ 210.543023] ? kasan_check_read+0x11/0x20 [ 210.547170] ? rcu_is_watching+0x85/0x140 [ 210.551309] ? rcu_pm_notify+0xc0/0xc0 [ 210.555574] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 210.561145] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 210.566684] ? syscall_slow_exit_work+0x12d/0x4f0 [ 210.571521] ? lockdep_sys_exit_thunk+0x2e/0x2e [ 210.576181] ? tracehook_report_syscall_exit+0x2f0/0x2f0 [ 210.581621] ? __ia32_sys_read+0xb0/0xb0 [ 210.585671] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 210.591204] __x64_sys_recvfrom+0xe1/0x1a0 [ 210.595436] do_syscall_64+0x1b1/0x800 [ 210.599315] ? syscall_return_slowpath+0x5c0/0x5c0 [ 210.604234] ? syscall_return_slowpath+0x30f/0x5c0 [ 210.609159] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 210.614516] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 210.619356] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 210.624545] RIP: 0033:0x4559f9 [ 210.627721] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 210.647071] RSP: 002b:00007fe13c65bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 210.654786] RAX: ffffffffffffffda RBX: 00007fe13c65c6d4 RCX: 00000000004559f9 [ 210.662059] RDX: ffffffffffffffbd RSI: 0000000020000140 RDI: 0000000000000014 [ 210.669319] RBP: 000000000072bea0 R08: 0000000000000000 R09: fffffffffffffc84 [ 210.676589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 210.683847] R13: 00000000004c05cd R14: 00000000004cfb50 R15: 0000000000000005 10:22:07 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xfffffff0}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:22:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair(0x11, 0x7, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r1, &(0x7f0000000040)="34ff74e2e6e690a1a5be7bd904d9d3b9baa76939e4607a6a008e0958c77e1df74148541d07ca", 0x26, 0x40000, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:22:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 210.778657] binder: undelivered TRANSACTION_ERROR: 29201 [ 210.874369] binder: 13537:13538 transaction failed 29189/-22, size 24-8 line 2852 [ 210.930680] binder: 13537:13538 got transaction to invalid handle [ 210.937083] binder: 13537:13538 transaction failed 29201/-22, size 0-0 line 2852 [ 210.944869] binder: undelivered TRANSACTION_ERROR: 29189 [ 210.960243] device bridge_slave_1 left promiscuous mode [ 210.965829] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.982375] device bridge_slave_0 left promiscuous mode [ 210.988095] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.993160] binder: undelivered TRANSACTION_ERROR: 29201 [ 211.045456] team0 (unregistering): Port device team_slave_1 removed [ 211.056402] team0 (unregistering): Port device team_slave_0 removed [ 211.067377] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 211.086424] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 211.111716] bond0 (unregistering): Released all slaves 10:22:08 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:22:08 executing program 2 (fault-call:7 fault-nth:6): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:22:08 executing program 6: capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x800000000000}) r0 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r0, 0x3a, 0x6, 0x3) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000001c00)=@in={0x2, 0x4e23, @broadcast=0xffffffff}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000100)=[{0x28, 0x0, 0x7, "8612b75e7eff7f0000000000004a927364"}], 0x28}}], 0x2, 0x0) 10:22:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7600") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) 10:22:08 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf00000000000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:22:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, @mcast1={0xff, 0x1, [], 0x1}, 0x9, 0x8, 0x1, 0x400, 0x7, 0x4000000, r1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 10:22:08 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x12, 0x5, 0x200) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom$ax25(r0, &(0x7f00000004c0)=""/87, 0x57, 0x0, &(0x7f0000000540)={0x3, {"b0e9b527204877"}}, 0x707000) sendto$inet(r0, &(0x7f0000f7db7f)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 10:22:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 211.908738] capability: warning: `syz-executor6' uses deprecated v2 capabilities in a way that may be insecure [ 211.922982] FAULT_INJECTION: forcing a failure. [ 211.922982] name failslab, interval 1, probability 0, space 0, times 0 [ 211.927865] binder: 13560:13562 got transaction to invalid handle [ 211.934472] CPU: 1 PID: 13554 Comm: syz-executor2 Not tainted 4.17.0+ #90 [ 211.940704] binder: 13560:13562 transaction failed 29201/-22, size 0-0 line 2852 [ 211.947550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.947556] Call Trace: [ 211.947580] dump_stack+0x1b9/0x294 [ 211.947599] ? dump_stack_print_info.cold.2+0x52/0x52 [ 211.947624] ? rcu_is_watching+0x85/0x140 [ 211.980028] ? get_user_pages_fast+0x223/0x440 [ 211.984629] should_fail.cold.4+0xa/0x1a [ 211.988701] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 211.993798] ? __get_user_pages_fast+0x3e0/0x3e0 [ 211.998552] ? __kernel_text_address+0xd/0x40 [ 212.003043] ? graph_lock+0x170/0x170 [ 212.006876] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 212.011884] ? find_held_lock+0x36/0x1c0 [ 212.015937] ? __lock_is_held+0xb5/0x140 [ 212.019992] ? check_same_owner+0x320/0x320 [ 212.024301] ? find_held_lock+0x36/0x1c0 [ 212.028367] ? rcu_note_context_switch+0x710/0x710 [ 212.033284] ? print_usage_bug+0xc0/0xc0 [ 212.037350] __should_failslab+0x124/0x180 [ 212.041580] should_failslab+0x9/0x14 [ 212.045387] __kmalloc+0x2c8/0x760 [ 212.048933] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 212.053945] ? iov_iter_advance+0x2e4/0x14c0 [ 212.058356] ? sg_init_table+0x28/0x60 [ 212.062236] ? sock_kmalloc+0x14e/0x1d0 [ 212.066222] sock_kmalloc+0x14e/0x1d0 [ 212.070015] ? __sk_mem_schedule+0xe0/0xe0 [ 212.074249] ? rcu_read_lock_sched_held+0x108/0x120 [ 212.079261] af_alg_get_rsgl+0x1ce/0x940 [ 212.083326] ? af_alg_make_sg+0x4d0/0x4d0 [ 212.087462] ? quarantine_put+0xeb/0x190 [ 212.091515] ? af_alg_alloc_areq+0x1e4/0x270 [ 212.095924] ? alg_accept+0x60/0x60 [ 212.099541] ? kasan_check_write+0x14/0x20 [ 212.103769] ? sock_kfree_s+0x47/0x60 [ 212.107575] skcipher_recvmsg+0x396/0x1200 [ 212.111808] ? skcipher_bind+0x30/0x30 [ 212.115688] ? skcipher_check_key.isra.3+0x6d/0x240 [ 212.120695] skcipher_recvmsg_nokey+0x69/0x90 [ 212.125192] ? skcipher_sendpage_nokey+0xa0/0xa0 [ 212.129940] sock_recvmsg+0xd0/0x110 [ 212.133658] __sys_recvfrom+0x311/0x5d0 [ 212.137641] ? __ia32_sys_send+0x100/0x100 [ 212.141868] ? kasan_check_read+0x11/0x20 [ 212.146009] ? rcu_is_watching+0x85/0x140 [ 212.150149] ? rcu_pm_notify+0xc0/0xc0 [ 212.154042] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 212.159581] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 212.165127] ? syscall_slow_exit_work+0x12d/0x4f0 [ 212.169974] ? lockdep_sys_exit_thunk+0x2e/0x2e [ 212.174645] ? tracehook_report_syscall_exit+0x2f0/0x2f0 [ 212.180087] ? __ia32_sys_read+0xb0/0xb0 [ 212.184139] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 212.189680] __x64_sys_recvfrom+0xe1/0x1a0 [ 212.193923] do_syscall_64+0x1b1/0x800 [ 212.197800] ? finish_task_switch+0x1ca/0x840 [ 212.202298] ? syscall_return_slowpath+0x5c0/0x5c0 [ 212.207218] ? syscall_return_slowpath+0x30f/0x5c0 [ 212.212140] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 212.217496] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 212.222339] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 212.227529] RIP: 0033:0x4559f9 [ 212.230703] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 212.249937] RSP: 002b:00007fe13c65bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002d 10:22:08 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:22:08 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) listen(r0, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x841) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000100)={0x7, 0x400}) syncfs(r0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000164000)={0x3ff}, 0x8) accept(r3, &(0x7f0000001500)=@ll={0x0, 0x0, 0x0}, &(0x7f0000001580)=0x80) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000015c0)={r4, @multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x5, 0x1ff}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000000c0)={r5}, 0x8) close(r0) [ 212.257637] RAX: ffffffffffffffda RBX: 00007fe13c65c6d4 RCX: 00000000004559f9 [ 212.264897] RDX: ffffffffffffffbd RSI: 0000000020000140 RDI: 0000000000000014 [ 212.272154] RBP: 000000000072bea0 R08: 0000000000000000 R09: fffffffffffffc84 [ 212.279412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 212.286677] R13: 00000000004c05cd R14: 00000000004cfb50 R15: 0000000000000006 10:22:08 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x200000000000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:22:08 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:22:08 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x3, 0x80) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) close(r0) 10:22:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc8106d345f8f760070") r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000900)=@getstats={0x1c, 0x5e, 0x711, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}, 0x1}, 0x0) syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x80000000, 0x0) r2 = syz_open_dev$tun(&(0x7f0000001300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) recvmmsg(r1, &(0x7f0000006140)=[{{&(0x7f0000005ac0)=@rc, 0x80, &(0x7f0000006000), 0x0, &(0x7f0000006040)=""/193, 0xc1}}], 0x1, 0x0, &(0x7f0000006240)) 10:22:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x5, 0xa, [0x0, 0x1, 0xffffffff, 0x9, 0x9, 0x7ff80000000, 0x2, 0x7fffffff, 0x1, 0x3]}, &(0x7f0000000040)=0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r1, 0x0, 0x30}, &(0x7f00000000c0)=0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:22:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:22:08 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) [ 212.442959] binder: undelivered TRANSACTION_ERROR: 29201 10:22:08 executing program 2 (fault-call:7 fault-nth:7): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) [ 212.548238] binder: 13606:13607 got transaction to invalid handle [ 212.554643] binder: 13606:13607 transaction failed 29201/-22, size 0-0 line 2852 [ 212.603168] IPVS: ftp: loaded support on port[0] = 21 [ 212.616463] FAULT_INJECTION: forcing a failure. [ 212.616463] name failslab, interval 1, probability 0, space 0, times 0 [ 212.627762] CPU: 1 PID: 13613 Comm: syz-executor2 Not tainted 4.17.0+ #90 [ 212.634703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.644075] Call Trace: [ 212.646686] dump_stack+0x1b9/0x294 [ 212.651130] ? dump_stack_print_info.cold.2+0x52/0x52 [ 212.656353] should_fail.cold.4+0xa/0x1a [ 212.657210] binder: undelivered TRANSACTION_ERROR: 29201 [ 212.660438] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 212.660460] ? __get_user_pages_fast+0x3e0/0x3e0 [ 212.660477] ? kasan_kmalloc+0xc4/0xe0 [ 212.660495] ? sock_kmalloc+0x14e/0x1d0 [ 212.660510] ? af_alg_get_rsgl+0x1ce/0x940 [ 212.660527] ? skcipher_recvmsg+0x396/0x1200 [ 212.692583] ? graph_lock+0x170/0x170 [ 212.696410] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 212.701454] ? find_held_lock+0x36/0x1c0 [ 212.705543] ? __lock_is_held+0xb5/0x140 [ 212.709626] ? check_same_owner+0x320/0x320 [ 212.713968] ? rcu_note_context_switch+0x710/0x710 [ 212.718897] __should_failslab+0x124/0x180 [ 212.723122] should_failslab+0x9/0x14 [ 212.726915] __kmalloc+0x2c8/0x760 [ 212.730445] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 212.735452] ? iov_iter_advance+0x2e4/0x14c0 [ 212.739849] ? sg_init_table+0x28/0x60 [ 212.743741] ? sock_kmalloc+0x14e/0x1d0 [ 212.747720] sock_kmalloc+0x14e/0x1d0 [ 212.751521] ? __sk_mem_schedule+0xe0/0xe0 [ 212.755774] ? rcu_read_lock_sched_held+0x108/0x120 [ 212.760799] af_alg_get_rsgl+0x1ce/0x940 [ 212.764861] ? af_alg_make_sg+0x4d0/0x4d0 [ 212.769017] ? quarantine_put+0xeb/0x190 [ 212.773078] ? af_alg_alloc_areq+0x1e4/0x270 [ 212.777485] ? alg_accept+0x60/0x60 [ 212.781116] ? kasan_check_write+0x14/0x20 [ 212.785339] ? sock_kfree_s+0x47/0x60 [ 212.789134] skcipher_recvmsg+0x396/0x1200 [ 212.793383] ? skcipher_bind+0x30/0x30 [ 212.797383] ? skcipher_check_key.isra.3+0x6d/0x240 [ 212.802400] skcipher_recvmsg_nokey+0x69/0x90 [ 212.806905] ? skcipher_sendpage_nokey+0xa0/0xa0 [ 212.811651] sock_recvmsg+0xd0/0x110 [ 212.815354] __sys_recvfrom+0x311/0x5d0 [ 212.819332] ? __ia32_sys_send+0x100/0x100 [ 212.823571] ? kasan_check_read+0x11/0x20 [ 212.827719] ? rcu_is_watching+0x85/0x140 [ 212.831861] ? rcu_pm_notify+0xc0/0xc0 [ 212.835756] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 212.841291] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 212.846829] ? syscall_slow_exit_work+0x12d/0x4f0 [ 212.851661] ? lockdep_sys_exit_thunk+0x2e/0x2e [ 212.856316] ? tracehook_report_syscall_exit+0x2f0/0x2f0 [ 212.861941] ? __ia32_sys_read+0xb0/0xb0 [ 212.865992] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 212.870826] __x64_sys_recvfrom+0xe1/0x1a0 [ 212.875054] do_syscall_64+0x1b1/0x800 [ 212.878929] ? finish_task_switch+0x1ca/0x840 [ 212.883423] ? syscall_return_slowpath+0x5c0/0x5c0 [ 212.888361] ? syscall_return_slowpath+0x30f/0x5c0 [ 212.893296] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 212.898653] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 212.903490] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 212.908664] RIP: 0033:0x4559f9 [ 212.911847] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 212.931135] RSP: 002b:00007fe13c65bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 212.938838] RAX: ffffffffffffffda RBX: 00007fe13c65c6d4 RCX: 00000000004559f9 [ 212.946096] RDX: ffffffffffffffbd RSI: 0000000020000140 RDI: 0000000000000014 [ 212.953354] RBP: 000000000072bea0 R08: 0000000000000000 R09: fffffffffffffc84 [ 212.960618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 212.967878] R13: 00000000004c05cd R14: 00000000004cfb50 R15: 0000000000000007 [ 213.498365] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.504821] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.512506] device bridge_slave_0 entered promiscuous mode [ 213.547643] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.554084] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.561863] device bridge_slave_1 entered promiscuous mode [ 213.596101] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 213.631156] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 213.731694] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 213.760936] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 213.873318] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 213.880473] team0: Port device team_slave_0 added [ 213.905393] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 213.912539] team0: Port device team_slave_1 added [ 213.937600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.966268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.995205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.022431] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 214.029571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.037987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.266840] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.273221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.279871] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.286230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.293638] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 215.008155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.120930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.205007] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 215.288924] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 215.295112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.302803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.380566] 8021q: adding VLAN 0 to HW filter on device team0 10:22:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:22:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7600") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) 10:22:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000000)={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 10:22:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:22:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4000, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0xfe8c) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000100)=0x1, 0xfff4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10000002c) poll(&(0x7f0000000000)=[{r3}], 0x1ab, 0x0) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000080)) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f00000000c0)=0x400) 10:22:13 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf00}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:22:13 executing program 2 (fault-call:7 fault-nth:8): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:22:13 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x100, 0x0) accept4$packet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000180)=0x14, 0x80000) bind$inet6(r0, &(0x7f000070ffe3)={0xa, 0x800000000004e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f000023effe)="7f", 0x1, 0x0, &(0x7f000010e000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2}}, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x98) sendto$inet6(r0, &(0x7f0000000000)="90", 0x1, 0x0, 0x0, 0x0) [ 216.871405] binder: 13885:13887 got transaction to invalid handle [ 216.874384] FAULT_INJECTION: forcing a failure. [ 216.874384] name failslab, interval 1, probability 0, space 0, times 0 [ 216.877804] binder: 13885:13887 transaction failed 29201/-22, size 0-0 line 2852 [ 216.889088] CPU: 1 PID: 13893 Comm: syz-executor2 Not tainted 4.17.0+ #90 [ 216.905272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.914628] Call Trace: [ 216.917222] dump_stack+0x1b9/0x294 [ 216.920848] ? dump_stack_print_info.cold.2+0x52/0x52 [ 216.926038] ? get_user_pages_fast+0x223/0x440 [ 216.930632] should_fail.cold.4+0xa/0x1a [ 216.934687] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 216.939775] ? __get_user_pages_fast+0x3e0/0x3e0 [ 216.944534] ? kasan_kmalloc+0xc4/0xe0 [ 216.948410] ? sock_kmalloc+0x14e/0x1d0 [ 216.952372] ? af_alg_get_rsgl+0x1ce/0x940 [ 216.956679] ? skcipher_recvmsg+0x396/0x1200 [ 216.961076] ? graph_lock+0x170/0x170 [ 216.964865] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 216.969881] ? find_held_lock+0x36/0x1c0 [ 216.973930] ? __lock_is_held+0xb5/0x140 [ 216.977984] ? check_same_owner+0x320/0x320 [ 216.982307] ? rcu_note_context_switch+0x710/0x710 [ 216.987226] __should_failslab+0x124/0x180 [ 216.991449] should_failslab+0x9/0x14 [ 216.995235] __kmalloc+0x2c8/0x760 [ 216.998760] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 217.005166] ? iov_iter_advance+0x2e4/0x14c0 [ 217.009576] ? sg_init_table+0x28/0x60 [ 217.013451] ? sock_kmalloc+0x14e/0x1d0 [ 217.017431] sock_kmalloc+0x14e/0x1d0 [ 217.021219] ? __sk_mem_schedule+0xe0/0xe0 [ 217.025442] ? rcu_read_lock_sched_held+0x108/0x120 [ 217.030461] af_alg_get_rsgl+0x1ce/0x940 [ 217.034517] ? af_alg_make_sg+0x4d0/0x4d0 [ 217.038650] ? quarantine_put+0xeb/0x190 [ 217.042702] ? af_alg_alloc_areq+0x1e4/0x270 [ 217.047095] ? alg_accept+0x60/0x60 [ 217.050713] ? kasan_check_write+0x14/0x20 [ 217.054935] ? sock_kfree_s+0x47/0x60 [ 217.058724] skcipher_recvmsg+0x396/0x1200 [ 217.062952] ? skcipher_bind+0x30/0x30 [ 217.066827] ? skcipher_check_key.isra.3+0x6d/0x240 [ 217.071842] skcipher_recvmsg_nokey+0x69/0x90 [ 217.076333] ? skcipher_sendpage_nokey+0xa0/0xa0 [ 217.081075] sock_recvmsg+0xd0/0x110 [ 217.084774] __sys_recvfrom+0x311/0x5d0 [ 217.088744] ? __ia32_sys_send+0x100/0x100 [ 217.092967] ? wait_for_completion+0x870/0x870 [ 217.097539] ? __lock_is_held+0xb5/0x140 [ 217.101596] ? __sb_end_write+0xac/0xe0 [ 217.105562] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 217.111085] ? fput+0x130/0x1a0 [ 217.114354] ? ksys_write+0x1a6/0x250 [ 217.118144] ? __ia32_sys_read+0xb0/0xb0 [ 217.122193] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 217.127736] __x64_sys_recvfrom+0xe1/0x1a0 [ 217.131958] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 217.136963] do_syscall_64+0x1b1/0x800 [ 217.140836] ? finish_task_switch+0x1ca/0x840 [ 217.145322] ? syscall_return_slowpath+0x5c0/0x5c0 [ 217.150240] ? syscall_return_slowpath+0x30f/0x5c0 [ 217.155182] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 217.160540] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 217.165464] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 217.170654] RIP: 0033:0x4559f9 [ 217.173824] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 217.193853] RSP: 002b:00007fe13c65bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 217.201552] RAX: ffffffffffffffda RBX: 00007fe13c65c6d4 RCX: 00000000004559f9 [ 217.208824] RDX: ffffffffffffffbd RSI: 0000000020000140 RDI: 0000000000000014 10:22:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 217.216090] RBP: 000000000072bea0 R08: 0000000000000000 R09: fffffffffffffc84 [ 217.223348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 217.230606] R13: 00000000004c05cd R14: 00000000004cfb50 R15: 0000000000000008 10:22:13 executing program 2 (fault-call:7 fault-nth:9): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:22:13 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x100000000000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:22:13 executing program 4: r0 = socket(0x18, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000440)=@nat={'nat\x00', 0x19, 0x1, 0x170, [0x20000c00, 0x0, 0x0, 0x20000c30, 0x20000c60], 0x0, &(0x7f00000004c0), &(0x7f0000000c00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'dummy0\x00', 'bpq0\x00', 'team0\x00', 'syz_tun\x00', @random="31b508d91ff4", [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xa8, 0xe0}, [@snat={'snat\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}]}, @snat={'snat\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}}]}]}, 0x1e8) 10:22:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) [ 217.375222] binder: undelivered TRANSACTION_ERROR: 29201 [ 217.393667] FAULT_INJECTION: forcing a failure. [ 217.393667] name failslab, interval 1, probability 0, space 0, times 0 [ 217.405078] CPU: 1 PID: 13910 Comm: syz-executor2 Not tainted 4.17.0+ #90 [ 217.412022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.421390] Call Trace: [ 217.423985] dump_stack+0x1b9/0x294 [ 217.427607] ? dump_stack_print_info.cold.2+0x52/0x52 [ 217.432811] ? csum_and_copy_from_iter+0x14c0/0x14c0 [ 217.437919] should_fail.cold.4+0xa/0x1a [ 217.441975] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 217.447084] ? __lock_is_held+0xb5/0x140 [ 217.451135] ? graph_lock+0x170/0x170 [ 217.454939] ? find_held_lock+0x36/0x1c0 [ 217.458996] ? __lock_is_held+0xb5/0x140 [ 217.463058] ? check_same_owner+0x320/0x320 [ 217.467370] ? rcu_read_lock_sched_held+0x108/0x120 [ 217.472376] ? rcu_note_context_switch+0x710/0x710 [ 217.477307] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 217.482849] __should_failslab+0x124/0x180 [ 217.487071] should_failslab+0x9/0x14 [ 217.490857] __kmalloc+0x2c8/0x760 [ 217.494389] ? af_alg_make_sg+0x4d0/0x4d0 [ 217.498523] ? quarantine_put+0xeb/0x190 [ 217.502570] ? sock_kmalloc+0x14e/0x1d0 [ 217.506535] sock_kmalloc+0x14e/0x1d0 [ 217.510339] ? __sk_mem_schedule+0xe0/0xe0 [ 217.514569] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 217.520100] ? af_alg_count_tsgl+0x1bc/0x250 [ 217.524498] ? sock_kfree_s+0x47/0x60 [ 217.528300] skcipher_recvmsg+0x4e6/0x1200 [ 217.532552] ? skcipher_bind+0x30/0x30 [ 217.536441] ? skcipher_check_key.isra.3+0x6d/0x240 [ 217.541451] skcipher_recvmsg_nokey+0x69/0x90 [ 217.545947] ? skcipher_sendpage_nokey+0xa0/0xa0 [ 217.550702] sock_recvmsg+0xd0/0x110 [ 217.554419] __sys_recvfrom+0x311/0x5d0 [ 217.558389] ? __ia32_sys_send+0x100/0x100 [ 217.562612] ? kasan_check_read+0x11/0x20 [ 217.567098] ? rcu_is_watching+0x85/0x140 [ 217.571233] ? rcu_pm_notify+0xc0/0xc0 [ 217.575118] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 217.580658] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 217.586185] ? syscall_slow_exit_work+0x12d/0x4f0 [ 217.591023] ? lockdep_sys_exit_thunk+0x2e/0x2e [ 217.595683] ? tracehook_report_syscall_exit+0x2f0/0x2f0 [ 217.601121] ? __ia32_sys_read+0xb0/0xb0 [ 217.605177] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 217.610707] __x64_sys_recvfrom+0xe1/0x1a0 [ 217.614943] do_syscall_64+0x1b1/0x800 [ 217.618826] ? finish_task_switch+0x1ca/0x840 [ 217.623320] ? syscall_return_slowpath+0x5c0/0x5c0 [ 217.628239] ? syscall_return_slowpath+0x30f/0x5c0 [ 217.633160] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 217.638530] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 217.643362] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 217.648551] RIP: 0033:0x4559f9 [ 217.651733] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 10:22:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 217.671012] RSP: 002b:00007fe13c65bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 217.678727] RAX: ffffffffffffffda RBX: 00007fe13c65c6d4 RCX: 00000000004559f9 [ 217.685984] RDX: ffffffffffffffbd RSI: 0000000020000140 RDI: 0000000000000014 [ 217.693253] RBP: 000000000072bea0 R08: 0000000000000000 R09: fffffffffffffc84 [ 217.700509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 217.707763] R13: 00000000004c05cd R14: 00000000004cfb50 R15: 0000000000000009 10:22:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x40301, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000002c0)="66baf80cb89da0118def66bafc0cb00fee660fd6c2eaa741f0fd5300f2650f013fb91f020000b800080000ba000000000f300f0fdf8af7ac2900680000b805000000b950e900000f01c166baf80cb8a64f098eef66bafc0c66ed66baf80cb849069e84ef66bafc0cb012ee", 0x6b}], 0x1, 0x0, &(0x7f00000002c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000001c0)="660f388059349ae3210000fc0066bad104b00ceef2660f01dff659d4660f38821bf436672620c0c4e178139beaf500002e0f01bb77740000", 0x38}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000003c0)={"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"}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x6, 0x4) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x8) 10:22:14 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f000039a000)=[{0x3c}, {0x6}]}, 0x10) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'veth0\x00', 0x200}) sendmmsg(r0, &(0x7f0000003040)=[{{&(0x7f00000012c0)=@can={0x1d}, 0x80, &(0x7f0000001840)}}, {{&(0x7f00000018c0)=@ipx={0x4, 0x0, 0x0, "982a5c276750"}, 0x80, &(0x7f0000002f80)}}], 0x2, 0x0) 10:22:14 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x9effffff00000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) [ 217.792837] binder: 13920:13921 got transaction to invalid handle [ 217.799237] binder: 13920:13921 transaction failed 29201/-22, size 0-0 line 2852 [ 217.826191] device bridge_slave_1 left promiscuous mode [ 217.831905] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.882393] device bridge_slave_0 left promiscuous mode [ 217.885564] binder: undelivered TRANSACTION_ERROR: 29201 [ 217.887985] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.906489] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 217.962446] kvm: vcpu 0: requested 2048 ns lapic timer period limited to 200000 ns [ 218.002593] team0 (unregistering): Port device team_slave_1 removed [ 218.015801] team0 (unregistering): Port device team_slave_0 removed [ 218.026444] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 218.039453] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 218.065972] bond0 (unregistering): Released all slaves 10:22:14 executing program 2 (fault-call:7 fault-nth:10): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:22:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:22:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ppoll(&(0x7f0000000040)=[{r1}], 0x20000000000001aa, &(0x7f0000000080)={0x77359400}, &(0x7f0000000000)={0x1000000}, 0x8) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)) 10:22:14 executing program 3: r0 = add_key$keyring(&(0x7f0000000840)='keyring\x00', &(0x7f0000000880)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000080)="2d24adcea1b2c77fc8f999e8b136055e7efde7ca7a73aaa54bc4dacfc16535767f665a3c74ad5e695505d62fd72fa62ba9fa7e29664fb028f1cb9aeab34e5aa28340fd9e6b504e67a65a7bf39b00e1", 0xfffffffffffffd2d, r0) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000440)="e116cff94d8fcf51c31a87905775cc655d894d13172823489362e5f976704e0c9eaa641af4526e842cf55df1edbe36a0a13abd", 0x33, 0xfffffffffffffff9) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000100)=[{&(0x7f00000001c0)="52a5f4c0f59398f7f9c4ef391620980b00d3d0935ad86c539e7be7237191c0717de79e61d98031fd83cc370210e31177687b12e9aeddfe06164435b841d798c308ae060d0a7348b2b159bcf6d42f1e0e165dc0e674eaa6d1c6f0d094dbb5721d45ffd3432970a1b2ddc5965a90091522ef68925dc0755b768c803ef36d726e576649fc033a72454b0f2d14e7b9ba78e25e", 0x91}, {&(0x7f00000002c0)="21a01d35a4d007577492745691fb3c1ff08324d61a23718fb0c768a2a3efa8feebe7a62d86928f4c5e6aef207b816dc5af4e7caf52c74e69965405fd963264d7afa715af0c0f38f32f41ea2a0023e17962c285f47f72f64868300fbb9e0e4e0865d82721159d700746940af688aa9e88352950cbdbfd3d9870558c55134307e3a2fc6456f1e947f991ac08c2679c5d47d54b33ffa053135dcd0901336630f9c1a33aac3aeba5ec051b638a4e110571d4da67ccd4404e6b613c824e823bf10778e8", 0xc1}], 0x2, r2) r3 = socket$inet6(0xa, 0x1000000000004, 0x0) r4 = syz_open_dev$amidi(&(0x7f0000000600)='/dev/amidi#\x00', 0x96a, 0x200) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000800)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000226bd7000fddbdf250a0000005c0001000c0007001000000020000000140003000000000200000000000000000000000008000b0073697000080004004e2000000c00070000000000200000000c000700060000000800000008000b0073697000080008000600000054000200080004001f8a0000080008000ed8000008000600ff0000000800080001010000080002004e24000008000b000a000000080002004e2200000800060008000000080002004e2100000800080000000000010000000800030004000000080003000400000014000200080009000900000008000400ff000000"], 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) r6 = fcntl$dupfd(r4, 0x0, r3) read(r3, &(0x7f0000000980)=""/33, 0x21) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, &(0x7f00000008c0)={{0x9, 0x2}, 'port0\x00', 0x10, 0x80001, 0x5, 0x8, 0xfffffffffffffff9, 0x5, 0x1, 0x0, 0x3, 0x5}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x5) syslog(0xa, 0x0, 0xffffffffffffff40) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@ipv4={[], [], @rand_addr}, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000580)=0x19e) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000005c0)={@local={0xfe, 0x80, [], 0xaa}, 0x76, r7}) 10:22:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7600") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) 10:22:14 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f00000000c0)) r2 = dup2(r0, r1) clone(0x0, &(0x7f0000000040)="248c97c623e8978d2d76d7eb5ee21837000000004eaff634ea76bed12a4bf6c8ab22e902703950c288935fb2fa6ff0b3e60929a31409eb2d9115e506ca042af055db03fbd04b0b6ee44a51ded00bd9221dc3a1e603634907bb36e19415629293203765ef986a3280a19d658729a2ab1a59d2164b06acd0ae46", &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000740)) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0xb4d4, @mcast1={0xff, 0x1, [], 0x1}, 0x3}, 0x1c) write$cgroup_subtree(r2, &(0x7f0000000200)={[{0x2d, 'io', 0x20}, {0x2b, 'rdma', 0x20}, {0x2f, 'pids', 0x20}]}, 0x10) 10:22:14 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x9effffff}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:22:14 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}}, 0x0, @in=@rand_addr, 0x0, 0x0, 0x0, 0x80000001}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:22:14 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 218.331628] binder: 13951:13953 got transaction to invalid handle [ 218.338043] binder: 13951:13953 transaction failed 29201/-22, size 0-0 line 2852 10:22:14 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0xfffffffffffffc84) 10:22:14 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf0ffff}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:22:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:22:14 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvmsg(0xffffffffffffffff, &(0x7f0000346fc8)={&(0x7f0000baefec)=@ll, 0x14, &(0x7f0000ca3000)=[{&(0x7f00000b4000)=""/15, 0xf}, {&(0x7f0000f6afa9)=""/87, 0x57}, {&(0x7f00008e3f35)=""/203, 0xcb}, {&(0x7f0000cd5ffe)=""/2, 0x2}], 0x4, &(0x7f0000a01f13)=""/237, 0xed}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x201a7f1b, 0x0, 0x6, 0x1, 0x0, 0x40}], {0x95}}, &(0x7f0000f59000)='GPL\x00', 0x200003ff, 0xfe32, &(0x7f00005d4000)=""/251}, 0x48) [ 218.465514] binder: undelivered TRANSACTION_ERROR: 29201 [ 218.600216] binder: 13980:13984 got transaction to invalid handle [ 218.606592] binder: 13980:13984 transaction failed 29201/-22, size 0-0 line 2852 [ 218.696998] IPVS: ftp: loaded support on port[0] = 21 [ 218.703674] binder: undelivered TRANSACTION_ERROR: 29201 [ 219.354165] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.360790] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.368165] device bridge_slave_0 entered promiscuous mode [ 219.407510] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.413940] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.421282] device bridge_slave_1 entered promiscuous mode [ 219.458936] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 219.496752] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 219.609365] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 219.650806] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 219.813990] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 219.821832] team0: Port device team_slave_0 added [ 219.856229] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 219.863691] team0: Port device team_slave_1 added [ 219.900855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.930142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.956737] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 219.963873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.972401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.993730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.237192] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.243618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.250304] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.256857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.102333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.181649] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 221.262920] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 221.269133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.276219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.351651] 8021q: adding VLAN 0 to HW filter on device team0 10:22:19 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x700, 0x0, 0xfffffffffffffc84) 10:22:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x100000001, 0x200) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}) syslog(0xa, 0x0, 0xffffffffffffff40) 10:22:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:22:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) 10:22:19 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:22:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = memfd_create(&(0x7f0000000580)='dev ', 0x3) write(r1, &(0x7f0000000040)="16", 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xffff) fcntl$addseals(r1, 0x409, 0xc) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000000)={0xfe4}) fremovexattr(r1, &(0x7f00000003c0)=@known='security.capability\x00') clone(0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000100)="8ffa16fec12dceb72c3785730ce9ab1cc2ff3d8e33cdcbf5efd0d7fa0aed388df4b015") ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f760070") 10:22:19 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @broadcast=0xffffffff}, 0x10) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000001c0)=[{{&(0x7f00000005c0)=@hci, 0x80, &(0x7f00000049c0), 0x0, &(0x7f0000004a40)=""/241, 0xf1}}], 0x70, 0x0, &(0x7f0000000200)={0x77359400}) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x0, 0x0, 0x0, 0x0, {0xd}}, 0x5580}, 0x1}, 0x0) 10:22:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:22:19 executing program 3: socket$inet6(0xa, 0x7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:22:19 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x10, 0x0, 0xfffffffffffffc84) [ 222.813199] binder: 14270:14272 got transaction with invalid offset (0, min 0 max 0) or object. [ 222.841587] binder: 14270:14272 transaction failed 29201/-22, size 0-8 line 3030 10:22:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:22:19 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xfffff000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) [ 222.873877] binder: 14270:14272 got transaction to invalid handle [ 222.880455] binder: 14270:14272 transaction failed 29201/-22, size 0-0 line 2852 [ 222.888166] binder: undelivered TRANSACTION_ERROR: 29201 10:22:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) [ 223.063555] binder: undelivered TRANSACTION_ERROR: 29201 [ 223.144583] device bridge_slave_1 left promiscuous mode [ 223.150241] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.190956] device bridge_slave_0 left promiscuous mode [ 223.191770] IPVS: ftp: loaded support on port[0] = 21 [ 223.196549] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.268697] team0 (unregistering): Port device team_slave_1 removed [ 223.281944] team0 (unregistering): Port device team_slave_0 removed [ 223.294282] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 223.309808] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 223.349596] bond0 (unregistering): Released all slaves [ 224.229706] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.236286] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.243674] device bridge_slave_0 entered promiscuous mode [ 224.281161] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.287605] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.295014] device bridge_slave_1 entered promiscuous mode [ 224.332705] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 224.369905] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 224.480899] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 224.521916] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 224.698549] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 224.706015] team0: Port device team_slave_0 added [ 224.740388] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 224.747569] team0: Port device team_slave_1 added [ 224.783831] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.824162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.855517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.896154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.145664] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.152175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.158854] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.165232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.172933] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 225.953507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.042488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.128187] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 226.213443] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 226.219641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 226.226769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.307742] 8021q: adding VLAN 0 to HW filter on device team0 10:22:23 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:22:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:22:23 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:22:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x8dffffff00000000, 0x0, 0xfffffffffffffc84) 10:22:23 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(r1, &(0x7f0000003380)=""/4096, 0xf) 10:22:23 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:22:23 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x2, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r2, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000600000010d10200cf", 0x1f) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f00000001c0)) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x9, 0x9, 0x10000, 0x26, 0x2, r1}) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r1, r4, 0x2, 0xffffffffffffffff, &(0x7f0000000100)) 10:22:23 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x2) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x56, 0xa300) getsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x4, 0x0, 0xffffffffffffff9f) [ 226.836794] binder: 14580:14583 got transaction with invalid offset (0, min 0 max 0) or object. [ 226.867265] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. 10:22:23 executing program 6: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) prctl$setendian(0x14, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x2, 0x0) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000040)={0x3f}, 0x1) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) bind$packet(r0, &(0x7f0000000240)={0x11, 0x3, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2}}, &(0x7f0000000000)) listen(r2, 0xff) 10:22:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x7000000, 0x0, 0xfffffffffffffc84) 10:22:23 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 226.911022] netlink: 'syz-executor4': attribute type 6 has an invalid length. [ 226.915250] binder: 14580:14583 transaction failed 29201/-22, size 0-8 line 3030 10:22:23 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xffffff9e}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) [ 226.951790] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. [ 226.972901] binder: undelivered TRANSACTION_ERROR: 29201 [ 226.979869] binder: 14580:14583 got transaction to invalid handle [ 226.986262] binder: 14580:14583 transaction failed 29201/-22, size 0-0 line 2852 10:22:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000340)="4011fb0ab62aee9a5c5192e4fc058700cdb1346a012a0a226b366330e77661b5a47adfc137bf005c31c9381b8e99f0b7a9089b2c1abac3ccfc738abd58bdfc0936951210f11e561a4c77226272b3675d0be0ea32c0e029347319dd079090f9d4788a36d897efa0a7b063e8a11f58592ed907a8476eb234a7a295888a6c1eca38e936afb5e1b4bbb63d771a38208645f2bfefc11a43367a22529187b093b26dc58f65b6e64582c46d52b350") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) r1 = gettid() r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000440)={0x0, 0x6, 0x8, [0x0, 0x12, 0x0, 0x9, 0x4, 0x3, 0x1ff, 0x8]}, &(0x7f0000000480)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000005c0)={r4, 0x2c, &(0x7f00000004c0)=[@in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xe}, 0x8}, @in={0x2, 0x4e22, @loopback=0x7f000001}]}, &(0x7f0000000600)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xf, 0x6, &(0x7f0000000280)=@raw=[@alu={0x7, 0xec4, 0x9, 0x2, 0x3, 0xfffffff4, 0x10}, @call={0x85, 0x0, 0x0, 0x47}, @ldst={0x1, 0x3, 0x0, 0x7, 0x7, 0xffffffff, 0x10}], &(0x7f0000000400)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x1, [], r3, 0xc}, 0x48) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @multicast2=0xe0000002}}, 0x9, 0x0, 0x5, 0x4610237d, 0x9}, &(0x7f00000002c0)=0x98) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000300)={r5, 0x0, 0xd0, 0x8}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={r5, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x7}]}, &(0x7f00000000c0)=0x10) ptrace$getsig(0x4202, r1, 0x10001, &(0x7f0000000040)) [ 227.026255] netlink: 'syz-executor4': attribute type 6 has an invalid length. 10:22:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x2000, 0x0, 0xfffffffffffffc84) 10:22:23 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:22:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200), &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:22:23 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(0xffffffffffffffff, &(0x7f0000003380)=""/4096, 0xf) 10:22:23 executing program 6: ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000240)=0x20000005) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={"643071300000000000000020001600", 0x3}) r0 = socket(0x8, 0x803, 0x1) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000800)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000200)=""/173, 0xad}, {&(0x7f0000002680)=""/4096, 0x1000}], 0x2, &(0x7f0000000b80)=""/205, 0xcd}}, {{&(0x7f0000002600)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000005d40), 0x0, &(0x7f0000005dc0)=""/205, 0xcd}}], 0x2, 0x0, &(0x7f00000000c0)={0x77359400}) 10:22:23 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x2, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r2, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000600000010d10200cf", 0x1f) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f00000001c0)) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x9, 0x9, 0x10000, 0x26, 0x2, r1}) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r1, r4, 0x2, 0xffffffffffffffff, &(0x7f0000000100)) [ 227.135314] binder: undelivered TRANSACTION_ERROR: 29201 10:22:23 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xdd01000000000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) [ 227.248383] binder: 14629:14632 got transaction with invalid offset (0, min 0 max 0) or object. [ 227.276309] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. 10:22:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x1000000000000000, 0x0, 0xfffffffffffffc84) [ 227.293335] binder: 14629:14632 transaction failed 29201/-22, size 0-8 line 3030 [ 227.322140] netlink: 'syz-executor4': attribute type 6 has an invalid length. [ 227.337459] binder: undelivered TRANSACTION_ERROR: 29201 [ 227.348792] binder: 14629:14632 got transaction to invalid handle [ 227.355304] binder: 14629:14632 transaction failed 29201/-22, size 0-0 line 2852 [ 227.439106] binder: undelivered TRANSACTION_ERROR: 29201 10:22:24 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:22:24 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000200000400000001bc276c89b3ddf97cbca000000000000000000021e05533d4e740000001c000000000000ea22be71ec9f7faa240000000000000000"]) 10:22:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e22, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @rand_addr=0x1}, @in={0x2, 0x4e21, @loopback=0x7f000001}, @in6={0xa, 0x4e24, 0x100000001, @local={0xfe, 0x80, [], 0xaa}, 0x1}, @in={0x2, 0x4e24, @rand_addr}, @in6={0xa, 0x4e21, 0xa, @dev={0xfe, 0x80, [], 0x20}, 0x1}], 0x78) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:22:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:22:24 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xffffff7f00000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:22:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0xf0ffffff, 0x0, 0xfffffffffffffc84) 10:22:24 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(0xffffffffffffffff, &(0x7f0000003380)=""/4096, 0xf) 10:22:24 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x4, 0x2, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000000)) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x2, 0x9, 0x7fff, 0x565b}]}, 0x10) [ 228.209753] binder: 14669:14671 got transaction with invalid offset (0, min 0 max 24) or object. 10:22:24 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:22:24 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x40000000014, 0x0, 0xfffffffffffffffe) sendto$inet(0xffffffffffffffff, &(0x7f0000f7db7f), 0x0, 0x0, &(0x7f0000000200)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvmsg$netrom(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@full={{0x3, {"d65dbd60e90a34"}}, [{"16518904d939b6"}, {"6d6ee729c7f422"}, {"3781af1341086f"}, {"638d66e8b1a672"}, {"4b109a36da46d3"}, {"5403209b8e0c90"}, {"839f97be4774ca"}, {"f324d6b9216419"}]}, 0x48, &(0x7f00000000c0)}, 0x0) prctl$void(0x1f) 10:22:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34c865cb6870") openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x200, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:22:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x20000000, 0x0, 0xfffffffffffffc84) [ 228.255348] binder: 14669:14671 transaction failed 29201/-22, size 24-8 line 3030 10:22:24 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x1dd}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) [ 228.302871] binder: undelivered TRANSACTION_ERROR: 29201 [ 228.308826] binder: 14669:14671 got transaction to invalid handle [ 228.315226] binder: 14669:14671 transaction failed 29201/-22, size 0-0 line 2852 10:22:24 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000200000400000001bc276c89b3ddf97cbca000000000000000000021e05533d4e740000001c000000000000ea22be71ec9f7faa240000000000000000"]) 10:22:24 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:22:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x58, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) syslog(0xa, 0x0, 0xffffffffffffff40) [ 228.526315] binder: undelivered TRANSACTION_ERROR: 29201 [ 228.587352] device bridge_slave_1 left promiscuous mode [ 228.592951] bridge0: port 2(bridge_slave_1) entered disabled state 10:22:24 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:22:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:22:24 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) read(0xffffffffffffffff, &(0x7f0000003380)=""/4096, 0xf) 10:22:24 executing program 4: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f0000000080)=0x2, 0x0, 0x100000000000, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000e7fffc)=0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x0, &(0x7f0000623000), &(0x7f00002cfffc), &(0x7f00000000c0), &(0x7f0000553000)) tkill(r0, 0x1000000000016) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200)={0x0, 0x8}, 0x8) 10:22:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x40000, 0x0, 0xfffffffffffffc84) 10:22:24 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:22:24 executing program 6: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000100)) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) 10:22:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffdff) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000000c0)=0x6, 0x8) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xd5, 0x10000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000040)=0x1, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x8}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYBLOB="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"], 0xf0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0x95) [ 228.634419] device bridge_slave_0 left promiscuous mode [ 228.640093] bridge0: port 1(bridge_slave_0) entered disabled state 10:22:25 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x3) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") init_module(&(0x7f0000000040)='lo\x00', 0x3, &(0x7f0000000080)="28a56b657972696e6770726f632600") seccomp(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x81}, {0x16}]}) 10:22:25 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x610000) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) socketpair(0x11, 0x80a, 0x7, &(0x7f0000000080)) [ 228.794495] team0 (unregistering): Port device team_slave_1 removed [ 228.833388] team0 (unregistering): Port device team_slave_0 removed [ 228.851655] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 228.853003] IPVS: ftp: loaded support on port[0] = 21 [ 228.871036] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 228.900056] bond0 (unregistering): Released all slaves 10:22:25 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf0ffffffffffff}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) [ 228.922234] binder: 14722:14726 got transaction with invalid offset (0, min 0 max 24) or object. [ 228.931359] audit: type=1326 audit(1528453345.166:5): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14736 comm="syz-executor6" exe="/root/syz-executor6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4559f9 code=0x0 [ 228.939018] binder: 14722:14726 transaction failed 29201/-22, size 24-8 line 3030 10:22:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x7, 0x0, 0xfffffffffffffc84) 10:22:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f660070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000000f000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000140)="0f01c8260fc77b002e0f01d9baf80c66b8becbf88b66efbafc0cb80800efd9e10f43f60f0866b854c787cf0f23c80f21f86635080040000f23f8260f00de66b9800000c00f326635000800000f30", 0x4e}], 0x1, 0x10, &(0x7f0000000200), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="66ba2000ed48b801000000000000000f23d80f21f835000000200f23f8470f2200b96b0200000f3266410f3881adc91f0000430f01cb440f01cb66ba200066edc4414456d02ec6f800", 0x49}], 0x1, 0x0, &(0x7f0000000140), 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x401, 0x20000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000240)={0x0, 0x80000}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000002c0)={r5, 0x0, r6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 228.988451] binder: undelivered TRANSACTION_ERROR: 29201 [ 228.995493] binder: 14722:14726 got transaction to invalid handle [ 229.001866] binder: 14722:14726 transaction failed 29201/-22, size 0-0 line 2852 [ 229.096364] binder: undelivered TRANSACTION_ERROR: 29201 [ 229.805063] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.811514] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.820219] device bridge_slave_0 entered promiscuous mode [ 229.859477] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.865908] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.873660] device bridge_slave_1 entered promiscuous mode [ 229.910901] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 229.949114] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 230.059994] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 230.100928] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 230.260925] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 230.268869] team0: Port device team_slave_0 added [ 230.307397] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 230.314797] team0: Port device team_slave_1 added [ 230.347491] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.386911] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 230.393882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.409288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.439500] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 230.446602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.455100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.476762] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 230.483885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.492448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.726571] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.732987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.739639] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.746061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.753438] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 231.392269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.620792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.705328] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 231.790228] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 231.796444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.804132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.884064] 8021q: adding VLAN 0 to HW filter on device team0 10:22:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:22:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:22:29 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xdd010000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:22:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0xffffff8d, 0x0, 0xfffffffffffffc84) 10:22:29 executing program 6: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) rt_tgsigqueueinfo(r0, r1, 0x20, &(0x7f0000000080)={0x12, 0x3bf, 0x3}) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000100)="cf6a4e623b37bb7544871d106de94494982644d9f56f043406e11496cc4037ffa46e37b908590aedef15abea56f50c3be2185e71a17bfb0a0b25a70710259a5a27b63d5503a04701ca9fcb891457ba2989c46beaea58e28b5643b9d2d74484ecfc3b8e107055a972115c60131a6ce75934c23dd6cf4faf01785a87b71223c3c32255a175") mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000007, 0x40012, r2, 0x0) ioctl$KDDISABIO(r2, 0x4b37) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000001c0)={0x5, 0x3, 0x8200, 0x9, 0x1ff, 0xd7d6, 0x25}, 0x20) r3 = openat(r2, &(0x7f0000000200)='./file0\x00', 0x400000, 0x21) getsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$KDADDIO(r3, 0x4b34, 0x1000) connect$vsock_stream(r2, &(0x7f0000000340)={0x28, 0x0, 0xffffffff, @any=0xffffffff}, 0x10) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000380)=0x3) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f00000003c0)={0x5, 0x0, &(0x7f0000ffe000/0x2000)=nil}) msgget(0x2, 0x20) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000400), &(0x7f0000000440)=0x4) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000500)={'vcan0\x00', {0x2, 0x4e22, @loopback=0x7f000001}}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000540)=0x200000, 0x4) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000580)={0xbf, 0x101000}) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000005c0)={0x5, 0x42, 0x39d4}) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f00000017c0)={0x2, &(0x7f0000000600)=""/4096, &(0x7f0000001780)=[{0xffffffff00000001, 0x86, 0x10000, &(0x7f0000001600)=""/134}, {0x78, 0x83, 0x7fff, &(0x7f00000016c0)=""/131}]}) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000001800)={0x7ce9, 0x6d0f, 0x8, 0x1, 0x80000000}) write$vnet(r2, &(0x7f00000018c0)={0x1, {&(0x7f0000001840)=""/64, 0x40, &(0x7f0000001880)=""/51, 0x2, 0x3}}, 0x68) fallocate(r2, 0x3, 0xfffffffffffffff7, 0x7fff) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000001940)=""/146) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000001a00)=0x9) getsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000001b00)={@remote, @empty, 0x0}, &(0x7f0000001b40)=0xc) bind$packet(r3, &(0x7f0000001b80)={0x11, 0x15, r4, 0x1, 0xc1, 0x6}, 0x14) 10:22:29 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x0, 0x0) readv(r1, &(0x7f0000afd000)=[{&(0x7f0000309f9d)=""/1, 0x1}], 0x1) 10:22:29 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0xfffffffffffffe00, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32], &(0x7f0000000200)=0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000240)={r2}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0c0583b, &(0x7f0000000040)={0x0, &(0x7f0000000040)}) 10:22:29 executing program 1 (fault-call:4 fault-nth:0): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 233.325687] binder: 15031:15033 got transaction with invalid offset (0, min 0 max 24) or object. [ 233.332427] FAULT_INJECTION: forcing a failure. [ 233.332427] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 233.342516] binder: 15031:15033 transaction failed 29201/-22, size 24-8 line 3030 [ 233.346776] CPU: 1 PID: 15036 Comm: syz-executor1 Not tainted 4.17.0+ #90 [ 233.361178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 233.370541] Call Trace: 10:22:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x700000000000000, 0x0, 0xfffffffffffffc84) [ 233.373146] dump_stack+0x1b9/0x294 [ 233.376798] ? dump_stack_print_info.cold.2+0x52/0x52 [ 233.378592] binder: undelivered TRANSACTION_ERROR: 29201 [ 233.382011] should_fail.cold.4+0xa/0x1a [ 233.382036] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 233.382056] ? print_usage_bug+0xc0/0xc0 [ 233.382084] ? debug_check_no_locks_freed+0x310/0x310 [ 233.382098] ? __lock_acquire+0x7f5/0x5140 [ 233.382118] ? __lock_acquire+0x7f5/0x5140 [ 233.382138] ? __lock_acquire+0x7f5/0x5140 [ 233.393789] binder: 15031:15033 got transaction to invalid handle 10:22:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) ioctl$VT_DISALLOCATE(r1, 0x5608) [ 233.396744] ? debug_check_no_locks_freed+0x310/0x310 [ 233.396766] ? debug_check_no_locks_freed+0x310/0x310 [ 233.396783] ? perf_trace_lock+0xd6/0x900 [ 233.396803] __alloc_pages_nodemask+0x34e/0xd70 [ 233.396827] ? __alloc_pages_slowpath+0x2d50/0x2d50 [ 233.400922] binder: 15031:15033 transaction failed 29201/-22, size 0-0 line 2852 [ 233.406233] ? zap_class+0x720/0x720 [ 233.406251] ? __lock_acquire+0x7f5/0x5140 [ 233.406264] ? zap_class+0x720/0x720 [ 233.406282] ? graph_lock+0x170/0x170 [ 233.467578] binder: undelivered TRANSACTION_ERROR: 29201 [ 233.468446] ? lock_acquire+0x1dc/0x520 [ 233.468469] ? __lock_acquire+0x7f5/0x5140 [ 233.468488] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 233.468510] alloc_pages_current+0x10c/0x210 [ 233.468533] skb_page_frag_refill+0x453/0x6a0 [ 233.468550] ? sock_kzfree_s+0x60/0x60 [ 233.504180] ? rcu_is_watching+0x85/0x140 [ 233.508335] ? rcu_report_qs_rnp+0x790/0x790 [ 233.512742] tun_build_skb.isra.53+0x354/0x2250 [ 233.517397] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 233.522420] ? print_usage_bug+0xc0/0xc0 [ 233.526470] ? tun_device_event+0x1010/0x1010 [ 233.530952] ? perf_trace_lock+0xd6/0x900 [ 233.535088] ? print_usage_bug+0xc0/0xc0 [ 233.539140] ? zap_class+0x720/0x720 [ 233.542842] ? lock_acquire+0x1dc/0x520 [ 233.546805] ? alloc_set_pte+0x1013/0x1600 [ 233.551037] ? graph_lock+0x170/0x170 [ 233.554823] ? print_usage_bug+0xc0/0xc0 [ 233.558875] ? reacquire_held_locks+0xbc/0x3e0 [ 233.563443] ? alloc_set_pte+0x1013/0x1600 [ 233.567683] ? print_usage_bug+0xc0/0xc0 [ 233.571747] ? print_usage_bug+0xc0/0xc0 [ 233.575797] ? lock_downgrade+0x8e0/0x8e0 [ 233.579938] ? print_usage_bug+0xc0/0xc0 [ 233.583988] ? print_usage_bug+0xc0/0xc0 [ 233.588052] ? __lock_acquire+0x7f5/0x5140 [ 233.592275] ? debug_check_no_locks_freed+0x310/0x310 [ 233.597473] ? print_usage_bug+0xc0/0xc0 [ 233.601527] ? debug_check_no_locks_freed+0x310/0x310 [ 233.606703] ? __lock_acquire+0x7f5/0x5140 [ 233.610932] tun_get_user+0xc47/0x42c0 [ 233.614907] ? debug_check_no_locks_freed+0x310/0x310 [ 233.620087] ? perf_trace_lock+0xd6/0x900 [ 233.624230] ? tun_build_skb.isra.53+0x2250/0x2250 [ 233.629147] ? perf_trace_lock+0xd6/0x900 [ 233.633284] ? graph_lock+0x170/0x170 [ 233.637072] ? zap_class+0x720/0x720 [ 233.640771] ? zap_class+0x720/0x720 [ 233.644470] ? lock_acquire+0x1dc/0x520 [ 233.648435] ? find_held_lock+0x36/0x1c0 [ 233.652494] ? lock_downgrade+0x8e0/0x8e0 [ 233.656635] ? rcu_is_watching+0x85/0x140 [ 233.660793] ? tun_get+0x22b/0x360 [ 233.664323] ? tun_chr_close+0x180/0x180 [ 233.668392] tun_chr_write_iter+0xb9/0x154 [ 233.672618] do_iter_readv_writev+0x859/0xa50 [ 233.677116] ? vfs_dedupe_file_range+0xa00/0xa00 [ 233.681872] ? rw_verify_area+0x118/0x360 [ 233.686013] do_iter_write+0x185/0x5f0 [ 233.689895] ? dup_iter+0x270/0x270 [ 233.693517] vfs_writev+0x1c7/0x330 [ 233.697143] ? vfs_iter_write+0xb0/0xb0 [ 233.701108] ? wait_for_completion+0x870/0x870 [ 233.705687] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 233.711220] ? __fdget_pos+0xd6/0x1e0 [ 233.715032] ? __fdget_raw+0x20/0x20 [ 233.718736] ? __sb_end_write+0xac/0xe0 [ 233.722704] do_writev+0x112/0x2f0 [ 233.726238] ? vfs_writev+0x330/0x330 [ 233.730033] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 233.735563] __x64_sys_writev+0x75/0xb0 [ 233.739528] do_syscall_64+0x1b1/0x800 [ 233.743401] ? finish_task_switch+0x1ca/0x840 [ 233.747886] ? syscall_return_slowpath+0x5c0/0x5c0 [ 233.752806] ? syscall_return_slowpath+0x30f/0x5c0 [ 233.757727] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 233.763091] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 233.767925] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 233.773101] RIP: 0033:0x4558b1 [ 233.776291] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 54 bb fb ff c3 48 83 ec 08 e8 da 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 23 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 233.795563] RSP: 002b:00007f482bf19ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 233.803365] RAX: ffffffffffffffda RBX: 0000000000000230 RCX: 00000000004558b1 [ 233.810633] RDX: 0000000000000001 RSI: 00007f482bf19bf0 RDI: 00000000000000fc [ 233.817919] RBP: 0000000020007000 R08: 00000000000000fc R09: 0000000000000000 10:22:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:22:30 executing program 6: [ 233.825191] R10: 0000000000000230 R11: 0000000000000293 R12: 0000000000000014 [ 233.832445] R13: 00000000004c1b5f R14: 00000000004d2748 R15: 0000000000000000 10:22:30 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:22:30 executing program 4: 10:22:30 executing program 3: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34a772760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) [ 233.905279] binder: 15050:15055 got transaction to invalid handle [ 233.911683] binder: 15050:15055 transaction failed 29201/-22, size 0-0 line 2852 10:22:30 executing program 6: 10:22:30 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0xfffffff0, 0x0, 0xfffffffffffffc84) [ 233.965556] binder: release 15050:15055 transaction 304 out, still active [ 233.972714] binder: undelivered TRANSACTION_COMPLETE 10:22:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:22:30 executing program 4: 10:22:30 executing program 6: [ 234.044900] binder: undelivered TRANSACTION_ERROR: 29201 [ 234.050616] binder: send failed reply for transaction 304, target dead 10:22:30 executing program 6: [ 234.127362] binder: 15076:15077 got transaction to invalid handle [ 234.133751] binder: 15076:15077 transaction failed 29201/-22, size 0-0 line 2852 [ 234.141436] binder: release 15076:15077 transaction 307 out, still active [ 234.148576] binder: undelivered TRANSACTION_COMPLETE [ 234.224734] binder: undelivered TRANSACTION_ERROR: 29201 [ 234.230363] binder: send failed reply for transaction 307, target dead 10:22:30 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0xf0ffffff00000000, 0x0, 0xfffffffffffffc84) 10:22:30 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000000)={0x2}, 0x8, 0x0) msgsnd(r1, &(0x7f0000000440)={0x3, "c94727eb36a6eff6ee01aca5f01d941382b543cad76c868c73df936cdb3b6a6121d862a4536eaf08c3a9be8c87b3cbbffd63dd03a740d7669adfcd5aac231333c27954133c02969da387563479aee86108777dd93cdeb7574b99f9d8a485b10c26a78c7fe5afebb5230295df54531f71e99affbb4cdeff"}, 0x7f, 0x0) msgrcv(0x0, &(0x7f0000001480)={0x0, ""/118}, 0x7e, 0x3, 0x1000) 10:22:30 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xffffff7f}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:22:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x9, &(0x7f0000000040)="a54c555bfa537c7c990e5802ee7f26b863a43475431c5ddba29754be120300b7389b9509f77e6055f0d12e6f") syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:22:30 executing program 1 (fault-call:4 fault-nth:1): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:22:30 executing program 6: 10:22:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:22:30 executing program 4: [ 234.340617] FAULT_INJECTION: forcing a failure. [ 234.340617] name failslab, interval 1, probability 0, space 0, times 0 [ 234.351950] CPU: 1 PID: 15097 Comm: syz-executor1 Not tainted 4.17.0+ #90 [ 234.358891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.363874] binder: 15092:15103 got transaction to invalid handle [ 234.368426] Call Trace: [ 234.368455] dump_stack+0x1b9/0x294 [ 234.368474] ? dump_stack_print_info.cold.2+0x52/0x52 [ 234.368491] ? debug_check_no_locks_freed+0x310/0x310 [ 234.368509] ? __lock_acquire+0x7f5/0x5140 [ 234.374809] binder: 15092:15103 transaction failed 29201/-22, size 0-0 line 2852 [ 234.377343] should_fail.cold.4+0xa/0x1a [ 234.377364] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 234.377389] ? debug_check_no_locks_freed+0x310/0x310 [ 234.381084] binder: release 15092:15103 transaction 310 out, still active [ 234.386187] ? rcu_pm_notify+0xc0/0xc0 [ 234.386213] ? rcu_read_lock_sched_held+0x108/0x120 [ 234.386230] ? __alloc_pages_nodemask+0xacf/0xd70 [ 234.391451] binder: undelivered TRANSACTION_COMPLETE [ 234.395635] ? graph_lock+0x170/0x170 [ 234.395649] ? print_usage_bug+0xc0/0xc0 [ 234.395667] ? __alloc_pages_slowpath+0x2d50/0x2d50 [ 234.457708] ? print_usage_bug+0xc0/0xc0 [ 234.461791] ? find_held_lock+0x36/0x1c0 [ 234.464089] binder: undelivered TRANSACTION_ERROR: 29201 [ 234.465864] __should_failslab+0x124/0x180 [ 234.465882] should_failslab+0x9/0x14 [ 234.465897] kmem_cache_alloc+0x47/0x760 [ 234.465919] __build_skb+0xa3/0x410 [ 234.465932] ? skb_try_coalesce+0x1c70/0x1c70 [ 234.465950] ? graph_lock+0x170/0x170 [ 234.471430] binder: send failed reply for transaction 310, target dead [ 234.475625] ? lock_acquire+0x1dc/0x520 [ 234.475641] ? tun_build_skb.isra.53+0x494/0x2250 [ 234.475660] build_skb+0x6f/0x2e0 [ 234.475675] ? __build_skb+0x410/0x410 [ 234.518192] tun_build_skb.isra.53+0x899/0x2250 [ 234.522856] ? tun_device_event+0x1010/0x1010 [ 234.527462] ? print_usage_bug+0xc0/0xc0 [ 234.531527] ? __lockdep_init_map+0x105/0x590 [ 234.536034] ? lock_acquire+0x1dc/0x520 [ 234.539998] ? alloc_set_pte+0x1013/0x1600 [ 234.544237] ? graph_lock+0x170/0x170 [ 234.548032] ? print_usage_bug+0xc0/0xc0 [ 234.552098] ? reacquire_held_locks+0xbc/0x3e0 [ 234.556686] ? alloc_set_pte+0x1013/0x1600 [ 234.560923] ? print_usage_bug+0xc0/0xc0 [ 234.564978] ? print_usage_bug+0xc0/0xc0 [ 234.569036] ? lock_downgrade+0x8e0/0x8e0 [ 234.573183] ? print_usage_bug+0xc0/0xc0 [ 234.577234] ? print_usage_bug+0xc0/0xc0 [ 234.581295] ? __lock_acquire+0x7f5/0x5140 [ 234.585527] ? debug_check_no_locks_freed+0x310/0x310 [ 234.590710] ? print_usage_bug+0xc0/0xc0 [ 234.594762] ? debug_check_no_locks_freed+0x310/0x310 [ 234.599937] ? __lock_acquire+0x7f5/0x5140 [ 234.604162] tun_get_user+0xc47/0x42c0 [ 234.608047] ? debug_check_no_locks_freed+0x310/0x310 [ 234.613230] ? tun_build_skb.isra.53+0x2250/0x2250 [ 234.618147] ? print_usage_bug+0xc0/0xc0 [ 234.622193] ? graph_lock+0x170/0x170 [ 234.625983] ? graph_lock+0x170/0x170 [ 234.629772] ? lock_acquire+0x1dc/0x520 [ 234.633734] ? __fdget_pos+0x1a9/0x1e0 [ 234.637609] ? find_held_lock+0x36/0x1c0 [ 234.641662] ? lock_downgrade+0x8e0/0x8e0 [ 234.645804] ? kasan_check_read+0x11/0x20 [ 234.650933] ? rcu_is_watching+0x85/0x140 [ 234.655081] ? tun_get+0x22b/0x360 [ 234.658608] ? tun_chr_close+0x180/0x180 [ 234.662672] tun_chr_write_iter+0xb9/0x154 [ 234.666898] do_iter_readv_writev+0x859/0xa50 [ 234.671383] ? vfs_dedupe_file_range+0xa00/0xa00 [ 234.676130] ? rw_verify_area+0x118/0x360 [ 234.680277] do_iter_write+0x185/0x5f0 [ 234.684153] ? dup_iter+0x270/0x270 [ 234.687772] vfs_writev+0x1c7/0x330 [ 234.691397] ? vfs_iter_write+0xb0/0xb0 [ 234.695355] ? rcu_pm_notify+0xc0/0xc0 [ 234.699234] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 234.704769] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 234.710303] ? __fdget_pos+0xd6/0x1e0 [ 234.714104] ? __fdget_raw+0x20/0x20 [ 234.717806] ? syscall_get_arguments.part.6+0x10/0x10 [ 234.722988] do_writev+0x112/0x2f0 [ 234.726528] ? vfs_writev+0x330/0x330 [ 234.730315] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 234.735840] __x64_sys_writev+0x75/0xb0 [ 234.739812] do_syscall_64+0x1b1/0x800 [ 234.743695] ? finish_task_switch+0x1ca/0x840 [ 234.748175] ? syscall_return_slowpath+0x5c0/0x5c0 [ 234.753095] ? syscall_return_slowpath+0x30f/0x5c0 [ 234.758017] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 234.763375] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 234.768219] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 234.773393] RIP: 0033:0x4558b1 [ 234.776571] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 54 bb fb ff c3 48 83 ec 08 e8 da 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 23 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 234.795802] RSP: 002b:00007f482bf19ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 234.803497] RAX: ffffffffffffffda RBX: 0000000000000230 RCX: 00000000004558b1 [ 234.810763] RDX: 0000000000000001 RSI: 00007f482bf19bf0 RDI: 00000000000000fc [ 234.818025] RBP: 0000000020007000 R08: 00000000000000fc R09: 0000000000000000 [ 234.825287] R10: 0000000000000230 R11: 0000000000000293 R12: 0000000000000014 [ 234.832555] R13: 00000000004c1b5f R14: 00000000004d2748 R15: 0000000000000001 [ 234.874420] IPVS: ftp: loaded support on port[0] = 21 [ 234.968327] device bridge_slave_1 left promiscuous mode [ 234.973886] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.986625] device bridge_slave_0 left promiscuous mode [ 234.992169] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.023968] team0 (unregistering): Port device team_slave_1 removed [ 235.033877] team0 (unregistering): Port device team_slave_0 removed [ 235.045971] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 235.062395] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 235.091394] bond0 (unregistering): Released all slaves [ 235.650070] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.656520] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.663938] device bridge_slave_0 entered promiscuous mode [ 235.702949] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.709435] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.717301] device bridge_slave_1 entered promiscuous mode [ 235.754344] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 235.792694] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 235.906150] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 235.947091] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 236.122099] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 236.130384] team0: Port device team_slave_0 added [ 236.168609] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 236.175851] team0: Port device team_slave_1 added [ 236.203082] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 236.210103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.225525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.257401] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 236.264332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.279733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.301490] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 236.308648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.317190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.344549] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 236.351790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.367147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.608798] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.615211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.621869] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.628259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.635598] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 237.152201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 237.494756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.577811] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 237.660705] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 237.666930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.674549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.755558] 8021q: adding VLAN 0 to HW filter on device team0 10:22:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast1=0xe0000001, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) 10:22:34 executing program 6: mq_open(&(0x7f0000000000)='%+,.\x00', 0x42, 0x0, &(0x7f0000000040)) 10:22:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000480)}) 10:22:34 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x40000000000, 0x0, 0xfffffffffffffc84) 10:22:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000000)="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") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0xa, 0x0, 0xffffffffffffff40) 10:22:34 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") socket(0x0, 0x3, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x400300}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x700}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 10:22:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000000)={0x2}, 0x8, 0x0) msgsnd(r1, &(0x7f0000000440)={0x3, "c94727eb36a6eff6ee01aca5f01d941382b543cad76c868c73df936cdb3b6a6121d862a4536eaf08c3a9be8c87b3cbbffd63dd03a740d7669adfcd5aac231333c27954133c02969da387563479aee86108777dd93cdeb7574b99f9d8a485b10c26a78c7fe5afebb5230295df54531f71e99affbb4cdeff"}, 0x7f, 0x0) msgrcv(0x0, &(0x7f0000001480)={0x0, ""/118}, 0x7e, 0x3, 0x1000) 10:22:34 executing program 1 (fault-call:4 fault-nth:2): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0xff}, 0x0, @in=@rand_addr}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:22:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000002300)=ANY=[@ANYBLOB="2f00e500a509327fa44cd41fb54c011adf231cf7c2d72e92d1392be8720e6fb26059b523"], &(0x7f0000002340)=0x1) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f0000002200), 0xe9da, r1) 10:22:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8943, &(0x7f0000000280)={'vcan0\x00'}) close(r2) close(r1) [ 238.308478] FAULT_INJECTION: forcing a failure. [ 238.308478] name failslab, interval 1, probability 0, space 0, times 0 [ 238.319898] CPU: 1 PID: 15381 Comm: syz-executor1 Not tainted 4.17.0+ #90 [ 238.326838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.336202] Call Trace: [ 238.338811] dump_stack+0x1b9/0x294 [ 238.342457] ? dump_stack_print_info.cold.2+0x52/0x52 [ 238.347656] ? kasan_check_write+0x14/0x20 [ 238.351903] ? prep_compound_page+0x229/0x370 [ 238.356417] should_fail.cold.4+0xa/0x1a [ 238.360493] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 238.365623] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 238.371174] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 238.376720] ? do_csum+0x345/0x410 [ 238.380262] ? __lock_acquire+0x7f5/0x5140 [ 238.384489] ? csum_partial_ext+0x25/0x30 [ 238.388629] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 238.394166] ? graph_lock+0x170/0x170 [ 238.397963] ? __lock_is_held+0xb5/0x140 [ 238.402020] ? skb_send_sock+0x50/0x50 [ 238.405907] __should_failslab+0x124/0x180 [ 238.410134] should_failslab+0x9/0x14 [ 238.413922] kmem_cache_alloc+0x47/0x760 [ 238.417987] ? inet_netconf_dump_devconf+0xf60/0xf60 [ 238.423080] dst_alloc+0xbb/0x1d0 [ 238.426534] rt_dst_alloc+0xfa/0x500 [ 238.430247] ? fnhe_flush_routes+0x460/0x460 [ 238.434646] ? fib_validate_source+0x34d/0x600 [ 238.439307] ? ip_mc_validate_source+0x261/0x2c0 [ 238.444061] ? ip_mc_validate_source+0x122/0x2c0 [ 238.448810] ip_route_input_rcu+0x503/0xd50 [ 238.453122] ? ip_route_input_slow+0x3d30/0x3d30 [ 238.458386] ? lock_acquire+0x1dc/0x520 [ 238.462347] ? ip_route_input_rcu+0xd50/0xd50 [ 238.466835] ? kasan_check_read+0x11/0x20 [ 238.470970] ? rcu_is_watching+0x85/0x140 [ 238.475118] ? rcu_report_qs_rnp+0x790/0x790 [ 238.479785] ? __local_bh_enable_ip+0x161/0x230 [ 238.484442] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 238.489971] ip_route_input_noref+0x122/0x250 [ 238.494456] ? ip_route_input_rcu+0xd50/0xd50 [ 238.498955] ? tcp_v4_send_synack+0x4a0/0x4a0 [ 238.503445] ip_rcv_finish+0x3f5/0x2200 [ 238.507404] ? tcp_v4_send_synack+0x4a0/0x4a0 [ 238.511888] ? ip_local_deliver_finish+0xd80/0xd80 [ 238.516810] ? lock_downgrade+0x8e0/0x8e0 [ 238.520954] ? tcp_v4_send_synack+0x4a0/0x4a0 [ 238.525447] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 238.530972] ? kasan_check_read+0x11/0x20 [ 238.535127] ? rcu_is_watching+0x85/0x140 [ 238.539265] ? rcu_report_qs_rnp+0x790/0x790 [ 238.543661] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 238.548666] ? nf_hook_slow+0x11e/0x1c0 [ 238.552630] ip_rcv+0x9fe/0x125c [ 238.556001] ? ip_local_deliver+0x720/0x720 [ 238.560337] ? __save_stack_trace+0x7e/0xd0 [ 238.564665] ? ip_local_deliver_finish+0xd80/0xd80 [ 238.569598] ? ip_local_deliver+0x720/0x720 [ 238.573913] __netif_receive_skb_core+0x2468/0x3650 [ 238.578922] ? nf_ingress+0xa00/0xa00 [ 238.582714] ? __lock_acquire+0x7f5/0x5140 [ 238.586950] ? print_usage_bug+0xc0/0xc0 [ 238.591000] ? __alloc_pages_slowpath+0x2d50/0x2d50 [ 238.596014] ? debug_check_no_locks_freed+0x310/0x310 [ 238.601201] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 238.606393] ? __skb_flow_dissect+0xba1/0x45e0 [ 238.610961] ? kmem_cache_alloc+0x5fa/0x760 [ 238.615280] ? find_held_lock+0x36/0x1c0 [ 238.619335] ? lock_downgrade+0x8e0/0x8e0 [ 238.623475] ? pvclock_read_flags+0x160/0x160 [ 238.627959] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 238.632963] ? tun_build_skb.isra.53+0xaee/0x2250 [ 238.637792] ? __local_bh_enable_ip+0x161/0x230 [ 238.642459] ? ktime_get_with_offset+0x395/0x4a0 [ 238.647989] ? lock_acquire+0x1dc/0x520 [ 238.651955] ? netif_receive_skb_internal+0xa2/0x7b0 [ 238.657050] ? kasan_check_read+0x11/0x20 [ 238.661186] ? rcu_is_watching+0x85/0x140 [ 238.665322] ? rcu_report_qs_rnp+0x790/0x790 [ 238.669734] __netif_receive_skb+0x2c/0x1e0 [ 238.674048] netif_receive_skb_internal+0x126/0x7b0 [ 238.679054] ? dev_cpu_dead+0xad0/0xad0 [ 238.683023] ? kasan_check_read+0x11/0x20 [ 238.687183] ? rcu_is_watching+0x85/0x140 [ 238.691330] ? reacquire_held_locks+0xbc/0x3e0 [ 238.695896] ? rcu_pm_notify+0xc0/0xc0 [ 238.699788] netif_receive_skb+0xba/0x400 [ 238.703924] ? netif_receive_skb_internal+0x7b0/0x7b0 [ 238.709104] ? find_held_lock+0x36/0x1c0 [ 238.713165] ? tun_rx_batched.isra.54+0x494/0x8c0 [ 238.717995] tun_rx_batched.isra.54+0x4ba/0x8c0 [ 238.722652] ? tun_sock_write_space+0x390/0x390 [ 238.727305] ? kasan_check_read+0x11/0x20 [ 238.731452] ? __local_bh_enable_ip+0x161/0x230 [ 238.736109] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 238.741110] ? tun_get_user+0x2fd5/0x42c0 [ 238.745247] tun_get_user+0x2ad0/0x42c0 [ 238.749209] ? debug_check_no_locks_freed+0x310/0x310 [ 238.754394] ? tun_build_skb.isra.53+0x2250/0x2250 [ 238.759310] ? print_usage_bug+0xc0/0xc0 [ 238.763374] ? graph_lock+0x170/0x170 [ 238.767167] ? graph_lock+0x170/0x170 [ 238.770956] ? lock_acquire+0x1dc/0x520 [ 238.774916] ? __fdget_pos+0x1a9/0x1e0 [ 238.778793] ? find_held_lock+0x36/0x1c0 [ 238.782850] ? kasan_check_read+0x11/0x20 [ 238.786986] ? rcu_is_watching+0x85/0x140 [ 238.791125] ? tun_get+0x22b/0x360 [ 238.794649] ? tun_chr_close+0x180/0x180 [ 238.798704] tun_chr_write_iter+0xb9/0x154 [ 238.802938] do_iter_readv_writev+0x859/0xa50 [ 238.807425] ? vfs_dedupe_file_range+0xa00/0xa00 [ 238.812172] ? rw_verify_area+0x118/0x360 [ 238.816309] do_iter_write+0x185/0x5f0 [ 238.820195] ? dup_iter+0x270/0x270 [ 238.823816] vfs_writev+0x1c7/0x330 [ 238.827443] ? vfs_iter_write+0xb0/0xb0 [ 238.831406] ? rcu_pm_notify+0xc0/0xc0 [ 238.835288] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 238.840816] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 238.846355] ? __fdget_pos+0xd6/0x1e0 [ 238.850152] ? __fdget_raw+0x20/0x20 [ 238.853867] ? syscall_get_arguments.part.6+0x10/0x10 [ 238.859052] do_writev+0x112/0x2f0 [ 238.862583] ? vfs_writev+0x330/0x330 [ 238.866381] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 238.871911] __x64_sys_writev+0x75/0xb0 [ 238.875881] do_syscall_64+0x1b1/0x800 [ 238.879761] ? finish_task_switch+0x1ca/0x840 [ 238.884258] ? syscall_return_slowpath+0x5c0/0x5c0 [ 238.889183] ? syscall_return_slowpath+0x30f/0x5c0 [ 238.894119] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 238.899479] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 238.904316] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 238.909502] RIP: 0033:0x4558b1 [ 238.912685] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 54 bb fb ff c3 48 83 ec 08 e8 da 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 23 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 238.931918] RSP: 002b:00007f482bf19ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 238.939617] RAX: ffffffffffffffda RBX: 0000000000000230 RCX: 00000000004558b1 [ 238.946873] RDX: 0000000000000001 RSI: 00007f482bf19bf0 RDI: 00000000000000fc [ 238.954129] RBP: 0000000020007000 R08: 00000000000000fc R09: 0000000000000000 10:22:35 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$llc(r1, &(0x7f0000000380)="59030e17ff1a272ea988b42a183dbec553e5cea414477d9ed051cf0200000000", 0x20, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") recvfrom$ipx(r1, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x2000000000000000, 0x0, 0xfffffffffffffc84) [ 238.961386] R10: 0000000000000230 R11: 0000000000000293 R12: 0000000000000014 [ 238.968640] R13: 00000000004c1b5f R14: 00000000004d2748 R15: 0000000000000002 [ 238.989720] binder_alloc: 15386: binder_alloc_buf, no vma [ 238.995424] binder: 15386:15387 transaction failed 29189/-3, size 0-0 line 2967 [ 239.031983] ------------[ cut here ]------------ [ 239.031987] precision 59591 too large [ 239.031993] WARNING: CPU: 1 PID: 15395 at lib/vsprintf.c:2164 set_precision+0xc3/0xe0 [ 239.031996] Kernel panic - not syncing: panic_on_warn set ... [ 239.031998] [ 239.032002] CPU: 1 PID: 15395 Comm: syz-executor6 Not tainted 4.17.0+ #90 [ 239.032008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.032010] Call Trace: [ 239.032013] dump_stack+0x1b9/0x294 [ 239.032016] ? dump_stack_print_info.cold.2+0x52/0x52 [ 239.032018] ? set_precision+0xb0/0xe0 [ 239.032021] panic+0x22f/0x4de [ 239.032024] ? add_taint.cold.5+0x16/0x16 [ 239.032027] ? __warn.cold.8+0x148/0x1b3 [ 239.032030] ? set_precision+0xc3/0xe0 [ 239.032033] __warn.cold.8+0x163/0x1b3 [ 239.032035] ? set_precision+0xc3/0xe0 [ 239.032038] report_bug+0x252/0x2d0 [ 239.032041] do_error_trap+0x1fc/0x4d0 [ 239.032044] ? printk_safe_log_store+0x237/0x2d0 [ 239.032046] ? math_error+0x3f0/0x3f0 [ 239.032049] ? printk_deferred+0xc6/0xc6 [ 239.032051] ? vprintk_func+0xd0/0xe7 [ 239.032054] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 239.032058] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 239.032060] do_invalid_op+0x1b/0x20 [ 239.032063] invalid_op+0x14/0x20 [ 239.032065] RIP: 0010:set_precision+0xc3/0xe0 [ 239.032067] Code: fc ff df 80 3c 02 00 75 32 66 41 89 5d 06 eb 9d e8 62 c9 fb f9 89 de 48 c7 c7 40 5c 86 88 c6 05 49 a1 1a 02 01 e8 ad e0 c7 f9 <0f> 0b eb a7 4c 89 ef e8 51 bd 38 fa e9 5a ff ff ff 4c 89 ef e8 44 [ 239.032168] RSP: 0018:ffff8801c590f6d8 EFLAGS: 00010086 [ 239.032174] RAX: 0000000000000019 RBX: 000000000000e8c7 RCX: ffffc900078c9000 [ 239.032178] RDX: 000000000000036d RSI: ffffffff8161f530 RDI: 0000000000000001 [ 239.032181] RBP: ffff8801c590f6f0 R08: ffff8801b4152100 R09: ffffed003b5e42cd [ 239.032185] R10: ffffed003b5e42cd R11: ffff8801daf2166f R12: 0000000000000000 [ 239.032188] R13: ffff8801c590f768 R14: ffffffff8884212e R15: ffff8801c590f7a8 [ 239.032190] ? vprintk_func+0xd0/0xe7 [ 239.032193] ? set_precision+0xc3/0xe0 [ 239.032195] vsnprintf+0x3b3/0x1b40 [ 239.032197] ? pointer+0x930/0x930 [ 239.032200] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 239.032202] ? search_nested_keyrings+0x608/0x11d0 [ 239.032205] ? kasan_check_write+0x14/0x20 [ 239.032207] vscnprintf+0x2d/0x80 [ 239.032209] vprintk_emit+0x1a3/0xde0 [ 239.032212] ? wake_up_klogd+0x100/0x100 [ 239.032214] ? lock_downgrade+0x8e0/0x8e0 [ 239.032216] ? mark_held_locks+0xc9/0x160 [ 239.032219] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 239.032228] vprintk_default+0x28/0x30 [ 239.032230] vprintk_func+0x7a/0xe7 [ 239.032233] printk+0x9e/0xba [ 239.032235] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 239.032238] dns_resolver_preparse.cold.3+0x71/0x252 [ 239.032242] ? dns_resolver_free_preparse+0x40/0x40 [ 239.032245] ? security_key_permission+0x94/0xc0 [ 239.032249] ? dns_resolver_free_preparse+0x40/0x40 [ 239.032251] key_create_or_update+0x569/0x1100 [ 239.032254] ? key_type_lookup+0xd0/0xd0 [ 239.032257] ? join_session_keyring+0x340/0x340 [ 239.032260] ? lock_release+0xa10/0xa10 [ 239.032263] ? check_same_owner+0x320/0x320 [ 239.032266] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 239.032269] ? __check_object_size+0x95/0x5d9 [ 239.032273] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 239.032275] ? _copy_from_user+0xdf/0x150 [ 239.032278] __x64_sys_add_key+0x3cf/0x4e0 [ 239.032282] ? key_get_type_from_user.constprop.7+0x110/0x110 [ 239.032284] ? do_syscall_64+0x92/0x800 [ 239.032287] do_syscall_64+0x1b1/0x800 [ 239.032290] ? syscall_return_slowpath+0x5c0/0x5c0 [ 239.032293] ? syscall_return_slowpath+0x30f/0x5c0 [ 239.032297] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 239.032299] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 239.032303] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 239.032305] RIP: 0033:0x4559f9 [ 239.032307] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 239.032405] RSP: 002b:00007f4092c1bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 239.032413] RAX: ffffffffffffffda RBX: 00007f4092c1c6d4 RCX: 00000000004559f9 [ 239.032418] RDX: 0000000020002200 RSI: 0000000020000080 RDI: 0000000020000100 [ 239.032422] RBP: 000000000072bea0 R08: 00000000388bbf57 R09: 0000000000000000 [ 239.032426] R10: 000000000000e9da R11: 0000000000000246 R12: 00000000ffffffff [ 239.032430] R13: 00000000004bb42d R14: 00000000004c7a20 R15: 0000000000000000 [ 239.032432] Dumping ftrace buffer: [ 239.032434] (ftrace buffer empty) [ 239.032436] Kernel Offset: disabled