r4 = getgid() setgid(r4) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000100)=""/45, &(0x7f0000000140)=0x2d) 03:38:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5000000, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1041.559363] binder: undelivered TRANSACTION_ERROR: 29201 03:38:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x543}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1041.660812] binder: 4024:4025 got reply transaction with no transaction stack [ 1041.668254] binder: 4024:4025 transaction failed 29201/-71, size 0-0 line 2759 [ 1041.684766] IPVS: ftp: loaded support on port[0] = 21 03:38:13 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) chdir(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) socketpair(0x10, 0xf, 0x6, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDDELIO(r2, 0x4b35, 0x7) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)=0x0) r4 = geteuid() getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) ioctl(r0, 0x8000, &(0x7f0000000340)="4c95bc2e4f258586d9a752e81009ad5dc51d7a5088346bd95209fd3578c4e4410315c5a448a3b0c5fa334cda66675c05c7ca4ff2515b1768377a45e462e30a39893cc4d3203392073fa18d30f6ff3a988a32862a8ecef09dcd80ccd623ee05561e95bc3e8daff6b2bcf9d3f1c47ccb80e0ddb5484eddcf3a92bb5a1fc8428b4cafbb46fb2e8b87723ebd20615e0bcc93befbe97e9445eecbe3838507a653a0185f20f73f5801ade9af2e2eebbea8561a2a497ca69ef4ce") setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300)={r3, r4, r5}, 0xc) [ 1041.709652] binder: 4024:4025 ioctl c0306201 200000c0 returned -14 [ 1041.728651] binder: 4024:4025 got reply transaction with no transaction stack [ 1041.736174] binder: 4024:4025 transaction failed 29201/-71, size 0-0 line 2759 03:38:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x88caffff00000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:13 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xffffffff, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000100)=0x14, 0x4) clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000200)) prctl$intptr(0x1a, 0x400) 03:38:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x7400, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1041.767503] binder: undelivered TRANSACTION_ERROR: 29201 [ 1041.863168] binder: 4046:4047 got reply transaction with no transaction stack [ 1041.870663] binder: 4046:4047 transaction failed 29201/-71, size 0-0 line 2759 03:38:13 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000006c0)='./file0\x00', 0x27f, 0x20) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000200)='\x00', &(0x7f0000000240)='.}vboxnet0,trusted\x00'], &(0x7f0000000340)=[&(0x7f00000002c0)="2aa62a5d776c616e3073656375726974795b736563757269747900", &(0x7f0000000300)='\x00']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getpid() sched_setparam(r2, &(0x7f0000000600)=0x3) syz_fuse_mount(&(0x7f0000000380)='./file0\x00', 0xe002, r0, r1, 0x2, 0x8) [ 1041.915493] binder: 4046:4047 ioctl c0306201 200000c0 returned -14 [ 1041.936720] binder: 4046:4047 got reply transaction with no transaction stack [ 1041.944240] binder: 4046:4047 transaction failed 29201/-71, size 0-0 line 2759 [ 1042.017575] binder: undelivered TRANSACTION_ERROR: 29201 [ 1042.022917] IPVS: ftp: loaded support on port[0] = 21 03:38:13 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000180)="99fb5832a6c0fb0821bfaab4f957a75a8171f751531728c6a6908e4c5a765f02eab700954901fc0efe0fb321f0464e733a3fe9a63efdfe0f1c7f990ad7c25f6d8c997032af3f06783a010ac5919be51f325eca8b1f0bcc9b61ae5cbfb7f459f86c2289f78a4d8d4aebad4bd2cc6f9ab2ee652f327a0eb4f69965d3", &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000280)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r1, &(0x7f00009f3000), 0x352, 0x0) read(r1, &(0x7f0000000300)=""/5, 0x5) lseek(r1, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:38:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x86ddffff00000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:13 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffe0}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x801, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0x99, "e578368246d343a29803a74e7b5193ba445a38ced76eaed944c7e84407d06f1cc0844f68fd2e623337a5450fc975ba96210f2153f92e1fd16c576acb4b043d4e04388b0f24504beaa1f78da65fe7ad52f495835ff6f551c1c5fbb72cf2f2065d94f3d61009115001ff41fd56feb66667708661043167ce6fa27a21d8a1cbbcafab201546efbc64a5ddaf00a814d9d2ca218a62fc0c4913389a"}, &(0x7f0000000100)=0xa1) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={r1, @in={{0x2, 0x4e21, @multicast2=0xe0000002}}}, 0x84) clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) pipe(&(0x7f00000000c0)) 03:38:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:13 executing program 6: chdir(&(0x7f0000000080)='./file0\x00') r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x80000001, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x800, 0xd, 0x800, 0x5, 0x100000001, 0x8, 0x40, 0x7a, 0x10001, 0x7f, 0x0, 0x101, 0x9, 0x3, 0x8, 0x8000, 0x7, 0x8001, 0x6, 0x8, 0x8, 0xd2, 0x1, 0x7be, 0x1f, 0x2, 0x8, 0x56, 0x0, 0x80000001, 0x0, 0x2, 0x2, @perf_config_ext={0x6}, 0x8000, 0x9, 0xedf, 0x0, 0x5, 0x2, 0x8}, 0x0, 0x8, 0xffffffffffffff9c, 0x0) fsync(r0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/34) [ 1042.338530] binder: 4070:4071 got reply transaction with no transaction stack [ 1042.346004] binder: 4070:4071 transaction failed 29201/-71, size 0-0 line 2759 [ 1042.402717] binder: 4070:4071 ioctl c0306201 200000c0 returned -14 [ 1042.432643] binder: 4070:4071 got reply transaction with no transaction stack [ 1042.440084] binder: 4070:4071 transaction failed 29201/-71, size 0-0 line 2759 03:38:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x4800}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:14 executing program 3: r0 = gettid() tkill(r0, 0x29) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000140), 0x4) getsockopt$inet_tcp_int(r2, 0x6, 0x3e, &(0x7f0000000080), &(0x7f0000000100)=0x4) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000240)=0x2000080000001, 0xfffffffffffffdac) 03:38:14 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x3dd}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x2000, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1042.486627] binder: undelivered TRANSACTION_ERROR: 29201 03:38:14 executing program 6: shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/34) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x145180, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000040)=""/17) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000000100)="7fa1e19a1a27394062c0ed2c380e13ae57d2dc1fb21d7d6884fed2755932ca8a0b86ed1bb371bbd595fd5cc5699fe6b5da4c8457a44777f5af30530e5740970b8aeac48e772cd73e5f63e4c89929b9ddb50c1e9fa156cc59803b7574bd99a0bec6cb499da86c10e30942f85cc8c5dcff3568325a8a60c5b36e396205edaa97cb88ae34f3114c603fd28e65d648f8b42b5eaea6bf18497dea6ec10fecfd4d6a815f11d351a4265d35b6de77d351a35f8ddb097a8fad009892") [ 1042.618944] binder: 4102:4104 got reply transaction with no transaction stack [ 1042.626459] binder: 4102:4104 transaction failed 29201/-71, size 0-0 line 2759 03:38:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) pipe(&(0x7f00000000c0)) 03:38:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x8864000000000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:14 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x20000000005}}, 0x14}, 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="e66fab000400"], 0x6) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1042.693097] binder: 4102:4104 ioctl c0306201 200000c0 returned -14 03:38:14 executing program 6: shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/34) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040)=0x2, 0x4) r1 = msgget(0x0, 0x40) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000280)=0xe8) getgroups(0x8, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee00, 0xee00, 0xee01, 0xee00, 0xee01]) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000300)=0x0) r7 = getpid() msgctl$IPC_SET(r1, 0x1, &(0x7f0000000340)={{0x0, r2, r3, r4, r5, 0x42, 0x20}, 0xeec, 0xa28, 0xffffffffffffff81, 0x800, 0x6, 0x80000000, r6, r7}) [ 1042.737852] binder: 4102:4104 got reply transaction with no transaction stack [ 1042.745389] binder: 4102:4104 transaction failed 29201/-71, size 0-0 line 2759 03:38:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x6c00000000000000, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1042.802365] binder: undelivered TRANSACTION_ERROR: 29201 [ 1042.898291] binder: 4129:4131 got reply transaction with no transaction stack [ 1042.905798] binder: 4129:4131 transaction failed 29201/-71, size 0-0 line 2759 [ 1042.960654] binder: 4129:4131 ioctl c0306201 200000c0 returned -14 [ 1042.968288] binder: 4129:4131 got reply transaction with no transaction stack [ 1042.975782] binder: 4129:4131 transaction failed 29201/-71, size 0-0 line 2759 [ 1042.993365] binder: undelivered TRANSACTION_ERROR: 29201 03:38:14 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1043, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x30000, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000200)={{0x6, 0x81}, {0xb7a, 0x8}, 0x9, 0x5, 0xffffffffffffffc1}) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f00000002c0)='./file0\x00', 0x80000, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000300)={0xa6, 0x29, 0x1, {0x5, [{{0x22, 0x0, 0x3}, 0x8509, 0x8, 0x7, './file0'}, {{0x80, 0xfffffffffffffffb, 0x8}, 0x62, 0x9, 0x7, './file0'}, {{0x0, 0x4, 0x8}, 0x204, 0x7, 0x7, './file0'}, {{0x0, 0x4, 0x1}, 0x4, 0x7c, 0x7, './file0'}, {{0x30, 0x2, 0x8}, 0x9c65, 0x6, 0x7, './file0'}]}}, 0xa6) 03:38:14 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x204, &(0x7f0000000440)="a691e722148295c481bb3eed80ff20f8717a13868c07c929668fb5b3665d576b5312d9cde18ebcd6581760196eeaac047f94e7bc61f9af86c265595f008e25eb20d5388ff43b678113079461cdb05b648cfb30545d765e1c1837cc98c5c61f255cf7549ae43c79101d4594a6dccf959e144ccf2f451aa67cdac1c882ace4ad9161f53b69f5e87d0000", &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000340)="a798767efa8797005c82b4e05b7e71e8c4c7ce7bfaaa94226e007bc631a9fba94917c73eeed02e9f8a6405bf0398b3926660a3b9b1") mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) syz_open_procfs(r0, &(0x7f0000000240)='oom_score_adj\x00') execve(&(0x7f0000001700)='./file0/file0\x00', &(0x7f00000016c0), &(0x7f0000001680)=[&(0x7f0000001600)='osx.', &(0x7f0000001640)='io\x00']) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)) pread64(r1, &(0x7f00009f3000), 0x0, 0x0) read(r1, &(0x7f0000000300)=""/5, 0x5) bind$bt_rfcomm(r1, &(0x7f0000000280)={0x1f, {0x4, 0x8001, 0x3, 0x9a, 0x9, 0x1000}, 0x81c}, 0xa) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000001580)='/dev/audio\x00', 0x80, 0x0) lseek(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0xffffffff80000000}, &(0x7f0000000040)=0x8) lgetxattr(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000380)=@random={'osx.', '%vboxnet0\x00'}, &(0x7f0000000580)=""/4096, 0x1000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e23, 0x2, @mcast2={0xff, 0x2, [], 0x1}, 0x466}}, [0xffffffffffff4ae7, 0xfffffffffffffeff, 0x1, 0x0, 0xfff, 0x8, 0x3de, 0x4, 0x3, 0x1, 0x7, 0x6, 0x3, 0x20, 0xff]}, &(0x7f0000000400)=0x100) syz_open_dev$usbmon(&(0x7f00000015c0)='/dev/usbmon#\x00', 0x10000, 0x8000) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:38:14 executing program 6: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xba6b, 0x0) getsockopt$nfc_llcp(r0, 0x118, 0x3, &(0x7f00000000c0)=""/156, 0x9c) r1 = shmget(0x2, 0x1000, 0x140, &(0x7f0000ffc000/0x1000)=nil) shmget(0x3, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x30, &(0x7f0000ffb000/0x4000)=nil) r2 = shmget(0x1, 0x4000, 0x54001208, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000180)=""/34) shmget$private(0x0, 0x3000, 0xf, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000080)=""/43) 03:38:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x8848000000000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x178, 0x4) sendto$inet6(r0, &(0x7f0000adb000), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000080)=""/49, 0x31, 0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x709000) 03:38:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x500000000000000, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1043.362958] binder: 4153:4155 got reply transaction with no transaction stack [ 1043.370515] binder: 4153:4155 transaction failed 29201/-71, size 0-0 line 2759 03:38:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x500000000000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1043.439892] binder: 4153:4155 ioctl c0306201 200000c0 returned -14 03:38:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x178, 0x4) sendto$inet6(r0, &(0x7f0000adb000), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000080)=""/49, 0x31, 0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x709000) 03:38:15 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x397}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 1043.480934] binder: 4153:4155 got reply transaction with no transaction stack [ 1043.488370] binder: 4153:4155 transaction failed 29201/-71, size 0-0 line 2759 03:38:15 executing program 6: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/34) 03:38:15 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r1, &(0x7f00009f3000), 0x352, 0x0) read(r1, &(0x7f0000000300)=""/5, 0x5) lseek(r1, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:38:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x1000000, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1043.569355] binder: undelivered TRANSACTION_ERROR: 29201 03:38:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202) chmod(&(0x7f0000000240)='./file0\x00', 0x80) write$P9_RSETATTR(r0, &(0x7f0000000200)={0x7, 0x1b, 0x2}, 0x7) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x282000, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={0x5, {0x2, 0x4e21, @loopback=0x7f000001}, {0x2, 0x4e24}, {0x2, 0x4e21, @loopback=0x7f000001}, 0x240, 0x6, 0x6, 0x1, 0x2, &(0x7f0000000280)='bpq0\x00', 0x6, 0x6, 0xd759}) 03:38:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000000ff0)={0x1c2, 0x0, 0x29, 0x2}, 0x1c2) [ 1043.719532] binder: 4187:4190 got reply transaction with no transaction stack [ 1043.727097] binder: 4187:4190 transaction failed 29201/-71, size 0-0 line 2759 03:38:15 executing program 6: shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/34) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000040)) [ 1043.818798] binder: 4187:4190 ioctl c0306201 200000c0 returned -14 [ 1043.828716] binder: 4187:4190 got reply transaction with no transaction stack [ 1043.836467] binder: 4187:4190 transaction failed 29201/-71, size 0-0 line 2759 [ 1043.898271] binder: undelivered TRANSACTION_ERROR: 29201 03:38:15 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:38:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x48, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:15 executing program 6: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x121400, 0x0) shutdown(r0, 0x1) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000040)=0x5) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x863f, &(0x7f0000000140)={0x6}, 0x8) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/34) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0xc, 0x9, 0x0, "1f8dc03d1f7784eb724688d9"}) r1 = add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000300)=0xe8) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000400)}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) keyctl$chown(0x4, r1, r2, r3) write$P9_RMKNOD(r0, &(0x7f00000003c0)={0x14, 0x13, 0x2, {0x0, 0x4}}, 0x14) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 03:38:15 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000200)='./file0\x00', 0x8040, 0x580684da) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000240)="e56c834f8aad08ac5bd2411b1861a1a8532599d0b4d43b43efc91c6b2f14c037c30f1407fa124fd5df34a494ab2ef309cfe417ef15108e9d39755bf2b1246449c436fdf695ba2266d4056e220e15bb4791049be42acdb5fa83b8e0a4105faf8e5d42ce5fbbf07d1c9d893d8ed2c1ac660b7b24fbfc49cde30b741bf05bca276f08d29bcab949e175b93b38f44b9cd4ba49d534412a7b7a4206bc6de249c04c67d606348c6dd4deacc6a7a8fa13b9f2cead2a0f132ee52a86d373a70d3266c8f29df3941af2e0b30fb0f08e65f074fca1c8f521c9e54a4cf99ff48090b91a99864f335d6f87c17389d52ec23105") execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000340)=0x3f, 0x4) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000140)={0x3ff, 0x0, 0x8d4, 0x20, 0x5, 0x100}) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1044.066682] binder: 4211:4213 got reply transaction with no transaction stack [ 1044.074270] binder: 4211:4213 transaction failed 29201/-71, size 0-0 line 2759 [ 1044.120821] binder: 4211:4213 ioctl c0306201 200000c0 returned -14 [ 1044.150532] binder: 4211:4213 got reply transaction with no transaction stack [ 1044.157996] binder: 4211:4213 transaction failed 29201/-71, size 0-0 line 2759 [ 1044.163204] Unknown ioctl 19299 03:38:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0xffffffff00000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1044.189787] binder: undelivered TRANSACTION_ERROR: 29201 [ 1044.193048] Unknown ioctl 1 [ 1044.212426] Unknown ioctl -1072150264 [ 1044.217720] Unknown ioctl 19462 03:38:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1044.256217] Unknown ioctl 19299 [ 1044.274228] Unknown ioctl 1 [ 1044.280145] Unknown ioctl -1072150264 03:38:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x89060000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1044.304467] Unknown ioctl 19462 [ 1044.316759] binder: 4236:4237 got reply transaction with no transaction stack [ 1044.324270] binder: 4236:4237 transaction failed 29201/-71, size 0-0 line 2759 [ 1044.394689] binder: 4236:4237 ioctl c0306201 200000c0 returned -14 [ 1044.407676] binder: 4236:4237 got reply transaction with no transaction stack [ 1044.415325] binder: 4236:4237 transaction failed 29201/-71, size 0-0 line 2759 03:38:16 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x27a}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:16 executing program 6: shmget(0x2, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) shmget(0x2, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil) r0 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/34) [ 1044.456076] binder: undelivered TRANSACTION_ERROR: 29201 03:38:16 executing program 7: r0 = getpgid(0xffffffffffffffff) sched_setattr(r0, &(0x7f0000000180)={0x30, 0x0, 0x1, 0x100000001, 0x4, 0x2, 0x3, 0x8000}, 0x0) r1 = getpid() syz_mount_image$btrfs(&(0x7f00000001c0)='btrfs\x00', &(0x7f0000000200)='./file0\x00', 0x3, 0x3, &(0x7f0000000380)=[{&(0x7f0000000240)="130e8c4ae1eb4854f490afc3f48fb9a56879c9921bcc5cb5d984ebc0beab246db50e71614e56fa5c36981ceca1c181129cfe3167432f03b24d6e3510fd704a30c5af7b3777a269bc180e056a2a43221c196ab0297ca029d9d7f6f9747b29e168f7cb5bd39e762c004a3cae89a66affc4f51dd15b52e15e69ef041c0d3bd0a64a72e469835368c4ddf7c9544c973780047b789e37c5", 0x95, 0x7d6b}, {&(0x7f0000000340)="ca8f4ec873b8312bf300fcc69c54a87344525a5967d08c98c06a86e9f1532780c5e2061f5d1482c13a3aa87c", 0x2c, 0x80000001}, {&(0x7f0000000440)="b46b70a09a40c2377aec8778e2812cd7f66eb418dc9cfefd10f5d38277f8cdfc44277aa32f5c97abb262785297fc3392ae5ace71df65259e92b218e196a4bdfdd3f2bebba9f677d8b8de2739d3432fc7665eb88c79b8a2ca12975f483de2e223500bc1e23791e4e8ceb58123bfe235ff0248b791f05b57dc558a5bb8c1f749714123d4435e879f8985068a18f608dcf0de28d96560f5686f8af26c042d11d66dcd1f544bd0e0cd00f686e804462678fb9c800f464fc6d4177f208eb8d2ffbb0f8876de042f2625025023cc3c53502bc5202a8d395d6d57d85e7ea4eb74bfe3d2cbaa34b85b4de7590476", 0xea, 0x1}], 0x8000, &(0x7f0000000540)={[{@ref_verify='ref_verify', 0x2c}]}) sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r2 = syz_open_procfs(r1, &(0x7f0000000140)="726fbe688f63d3e4ae592018966a8b3eea3f198a13ca79424b00000000000000") r3 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r2, &(0x7f00009f3000), 0x352, 0x0) read(r2, &(0x7f0000000300)=""/5, 0x5) lseek(r3, 0x210000, 0x6) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:38:16 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x10000) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x48}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) execveat(r0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000600)=[&(0x7f00000003c0)='cpuset[\x00', &(0x7f0000000400)='(!%%\x00', &(0x7f0000000440)='security\x00', &(0x7f0000000480)='/dev/admmidi#\x00', &(0x7f00000004c0)='/dev/admmidi#\x00', &(0x7f0000000500)='attr/keycreate\x00', &(0x7f0000000540)='eth0,/\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='}\x00'], &(0x7f0000000740)=[&(0x7f0000000680)='attr/keycreate\x00', &(0x7f00000006c0)='-,^\x00', &(0x7f0000000700)='(\x00'], 0x800) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='attr/keycreate\x00') ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000280)={0x3, 0x5, 0x4, 0x0, 0xd0d7c2583a272ca4}) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xffffffffffff8a90, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000140)=[{0x3, 0x5, 0x5}, {0xd1, 0x6, 0x2, 0x3}]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000300)) open$dir(&(0x7f0000000040)='./file0\x00', 0x3, 0xfffffffffffffffc) 03:38:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x6000000000000000, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:16 executing program 6: shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmget(0x1, 0x4000, 0x522, &(0x7f0000ffc000/0x4000)=nil) shmget(0x1, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000100)={0x5db8, 0x1ff, 0x5, 0x6}, 0x6) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x4000, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7f, 0x100) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000080)) [ 1044.679797] binder: 4265:4273 got reply transaction with no transaction stack [ 1044.687311] binder: 4265:4273 transaction failed 29201/-71, size 0-0 line 2759 [ 1044.770654] binder: 4265:4273 ioctl c0306201 200000c0 returned -14 [ 1044.801635] binder: 4265:4273 got reply transaction with no transaction stack [ 1044.809126] binder: 4265:4273 transaction failed 29201/-71, size 0-0 line 2759 [ 1044.892874] binder: undelivered TRANSACTION_ERROR: 29201 03:38:16 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={0x7fff7fff}, 0x8, 0x0) r1 = getpgrp(0xffffffffffffffff) sched_setaffinity(r1, 0xfffffffffffffe44, &(0x7f0000000000)=0x8001) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xb, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0xff50}], 0x333) readv(r0, &(0x7f0000000080)=[{&(0x7f000004f000)=""/128, 0x80}], 0x1) timer_create(0x2, &(0x7f0000000040)={0x0, 0xb}, &(0x7f00000000c0)) timer_settime(0x0, 0x103, &(0x7f00000013c0)={{}, {0x0, 0x989680}}, 0x0) 03:38:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0xffff000000000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:16 executing program 6: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/34) 03:38:16 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r1, &(0x7f00009f3000), 0x352, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x100000001, 0x4, [0x6, 0x1, 0x81, 0x651]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r2, 0x889, 0x1}, &(0x7f0000000200)=0xc) read(r1, &(0x7f0000000300)=""/5, 0x5) lseek(r1, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:38:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x4c00000000000000, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1045.000225] binder: 4303:4307 got reply transaction with no transaction stack [ 1045.007732] binder: 4303:4307 transaction failed 29201/-71, size 0-0 line 2759 03:38:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x88480000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:16 executing program 6: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/34) [ 1045.051403] binder: 4303:4307 ioctl c0306201 200000c0 returned -14 [ 1045.075738] binder: 4303:4307 got reply transaction with no transaction stack [ 1045.083271] binder: 4303:4307 transaction failed 29201/-71, size 0-0 line 2759 03:38:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x8060000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1045.150050] binder: undelivered TRANSACTION_ERROR: 29201 03:38:16 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x261}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x68000000, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025cc83d6d345f8f762070") perf_event_open$cgroup(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000180), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/34) [ 1045.446806] binder: 4331:4332 got reply transaction with no transaction stack [ 1045.454960] binder: 4331:4332 transaction failed 29201/-71, size 0-0 line 2759 03:38:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x500}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:17 executing program 6: shmget(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000fff000/0x1000)=nil) shmget$private(0x0, 0x3000, 0x54000200, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/34) [ 1045.525195] binder: 4331:4332 ioctl c0306201 200000c0 returned -14 [ 1045.543088] binder: 4331:4332 got reply transaction with no transaction stack [ 1045.550614] binder: 4331:4332 transaction failed 29201/-71, size 0-0 line 2759 [ 1045.593648] binder: undelivered TRANSACTION_ERROR: 29201 03:38:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0xffffa888}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:17 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x501000, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000200)={0xfffffffffffffffb, 0x8}) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x2000000, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1045.783496] binder: 4357:4361 got reply transaction with no transaction stack [ 1045.790955] binder: 4357:4361 transaction failed 29201/-71, size 0-0 line 2759 [ 1045.821291] binder: 4357:4361 ioctl c0306201 200000c0 returned -14 [ 1045.838424] binder: 4357:4361 got reply transaction with no transaction stack [ 1045.845925] binder: 4357:4361 transaction failed 29201/-71, size 0-0 line 2759 [ 1045.863333] binder: undelivered TRANSACTION_ERROR: 29201 03:38:17 executing program 3: r0 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000100)="000000008c00000001000000008000", 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000004500)=""/4096, 0x1000}], 0x1, 0x0) sync_file_range(r1, 0x0, 0x17, 0x2) 03:38:17 executing program 6: shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/34) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x200) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x7fff, 0x2, 0x1c, 0x8, 0x1}, 0x14) 03:38:17 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x4424, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, @perf_config_ext={0x6, 0xfc02}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x8001, @local={0xfe, 0x80, [], 0xaa}, 0x8}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140)={r1, 0xfffffffffffffffd}, 0x8) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x40, 0x20) 03:38:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x88470000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x6c000000, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:17 executing program 7: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x80, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000180)) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r2, &(0x7f00009f3000), 0x3a3, 0xfffffffffffffffe) read(r2, &(0x7f0000000300)=""/5, 0x5) lseek(r2, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) write$P9_RSTATFS(r0, &(0x7f0000000240)={0x43, 0x9, 0x2, {0x8, 0x0, 0x8, 0x9e, 0x1f, 0x400, 0x4, 0x8, 0x8}}, 0x43) [ 1046.088767] binder: 4379:4384 got reply transaction with no transaction stack [ 1046.096232] binder: 4379:4384 transaction failed 29201/-71, size 0-0 line 2759 03:38:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x34000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1046.163479] binder: 4379:4384 ioctl c0306201 200000c0 returned -14 [ 1046.189160] binder: 4379:4384 got reply transaction with no transaction stack [ 1046.196739] binder: 4379:4384 transaction failed 29201/-71, size 0-0 line 2759 03:38:17 executing program 6: shmget(0x2, 0x3000, 0x8, &(0x7f0000ffb000/0x3000)=nil) r0 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ff9000/0x4000)=nil) prctl$setname(0xf, &(0x7f0000000040)='\x00') r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x10000) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e20}, {0x307, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x20, {0x2, 0x4e22, @multicast1=0xe0000001}, 'ip6gre0\x00'}) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000080)=""/34) [ 1046.233722] binder: undelivered TRANSACTION_ERROR: 29201 03:38:17 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x3f7}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="025cc83d6d345f8f762070") mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe7, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0xf3, &(0x7f0000000380), &(0x7f0000000280)=""/243, 0x0, 0x8}, 0x28) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 03:38:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x68, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x2000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:17 executing program 6: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x4, 0x10000, 0x10001, "eb0e46b4d8eb2cccbb67d4fdab5d3ddaa8b954f2ce5d0feaabe3d0383de9e1e972cae07745bd451638697bb968546f351b8342f69a77a7a34667d42ce72ca1", 0x3b}, 0x60) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xe0100, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/34) [ 1046.451498] binder: 4411:4415 got reply transaction with no transaction stack [ 1046.458999] binder: 4411:4415 transaction failed 29201/-71, size 0-0 line 2759 03:38:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x4888}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1046.513885] binder: 4411:4415 ioctl c0306201 200000c0 returned -14 [ 1046.536302] binder: 4411:4415 got reply transaction with no transaction stack [ 1046.543751] binder: 4411:4415 transaction failed 29201/-71, size 0-0 line 2759 [ 1046.560591] binder: undelivered TRANSACTION_ERROR: 29201 03:38:18 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$eventfd(r0, &(0x7f0000000200), 0x8) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x200000, 0x1) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000080)) 03:38:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000), 0x4) 03:38:18 executing program 6: shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/34) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x402842, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 03:38:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x4800000000000000, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1046.746557] binder: 4437:4446 got reply transaction with no transaction stack [ 1046.754176] binder: 4437:4446 transaction failed 29201/-71, size 0-0 line 2759 [ 1046.826407] binder: 4437:4446 ioctl c0306201 200000c0 returned -14 [ 1046.855452] binder: 4437:4446 got reply transaction with no transaction stack [ 1046.863029] binder: 4437:4446 transaction failed 29201/-71, size 0-0 line 2759 03:38:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x8060000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:18 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) 03:38:18 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept(0xffffffffffffff9c, &(0x7f0000000200)=@ipx, &(0x7f0000000040)=0x80) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000380)={'filter\x00', 0x0, 0x3, 0xfc, [], 0x2, &(0x7f0000000140)=[{}, {}], &(0x7f0000000280)=""/252}, &(0x7f0000000400)=0x78) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1046.932494] binder: undelivered TRANSACTION_ERROR: 29201 03:38:18 executing program 6: msgget(0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x280000, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/34) 03:38:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@hopopts={0x0, 0x2, [], [@enc_lim={0x4, 0x1}, @calipso={0x7, 0x8}, @pad1={0x0, 0x1}]}, 0x18) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x0) 03:38:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x600000000000000, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1047.055345] binder: 4471:4473 got reply transaction with no transaction stack [ 1047.062792] binder: 4471:4473 transaction failed 29201/-71, size 0-0 line 2759 [ 1047.127840] binder: 4471:4473 ioctl c0306201 200000c0 returned -14 [ 1047.139747] binder: 4471:4473 got reply transaction with no transaction stack [ 1047.147233] binder: 4471:4473 transaction failed 29201/-71, size 0-0 line 2759 [ 1047.161695] binder: undelivered TRANSACTION_ERROR: 29201 03:38:18 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x33d}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:18 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) r1 = open(&(0x7f0000000100)='./file0\x00', 0x8000, 0x40000000000092) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000180)=0x8) mknod(&(0x7f0000000140)='./file0\x00', 0x11040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r2, &(0x7f00009f3000), 0x352, 0x0) read(r2, &(0x7f0000000300)=""/5, 0x5) lseek(r1, 0xfffffffffffffbfe, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:38:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x8864}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000080)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f0000000140)}) 03:38:18 executing program 6: r0 = shmget(0x2, 0x7000, 0x100, &(0x7f0000ff6000/0x7000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/34) 03:38:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x3000000, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1047.370059] binder: 4488:4495 BC_FREE_BUFFER u0000000000000000 no match [ 1047.384927] binder: 4494:4497 got reply transaction with no transaction stack [ 1047.392436] binder: 4494:4497 transaction failed 29201/-71, size 0-0 line 2759 [ 1047.449126] binder: 4494:4497 ioctl c0306201 200000c0 returned -14 [ 1047.461312] binder: 4494:4497 got reply transaction with no transaction stack [ 1047.469196] binder: 4494:4497 transaction failed 29201/-71, size 0-0 line 2759 [ 1047.527071] binder: undelivered TRANSACTION_ERROR: 29201 03:38:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) socketpair(0x6, 0x3, 0x8, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000280)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fremovexattr(r1, &(0x7f0000000200)=@known='security.ima\x00') fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000140)) 03:38:19 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000200)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x2, 0x0) 03:38:19 executing program 6: shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/34) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)="6e6565001e481dab2acde1b30abc85502fb684a2e4fafbae35eff3b89128d6fe1aff5a726cf8389d501df3548a9cd4492c713ff0c67d037d3874ec164b335aa7dcd7c211c490c0f14cce4932ece34cb19b80a743dd6ab5f1a60f483264ecab2b513c6cf2f519bbfab858270e50ceb12c7510bff2e622a425a13f01eecdb58eae00d7e9546052e681e3e4bafb91db87bc808301f81e5fb8bc30a2128e059c1e79931909b39b1a9cf8f97c7d71f7709621d5c16f2f856596f3e216939e5a2e271e9e810c4304239718e975") ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) 03:38:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x81000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x4c000000, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1047.641703] binder: 4514:4516 got reply transaction with no transaction stack [ 1047.649186] binder: 4514:4516 transaction failed 29201/-71, size 0-0 line 2759 [ 1047.664092] ALSA: seq fatal error: cannot create timer (-22) 03:38:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x5000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:19 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)=0x80000001) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x20000800, 0x400, 0x10000, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200000, 0xa) open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) 03:38:19 executing program 6: r0 = shmget$private(0x0, 0x2000, 0x78000340, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ffb000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000001c0)=""/34) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200400, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x1000, 0x4) [ 1047.736190] ALSA: seq fatal error: cannot create timer (-22) [ 1047.759256] binder: 4514:4516 ioctl c0306201 200000c0 returned -14 03:38:19 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$VHOST_SET_MEM_TABLE(r0, 0x4004af07, &(0x7f0000000180)) [ 1047.810296] binder: 4514:4516 got reply transaction with no transaction stack [ 1047.817874] binder: 4514:4516 transaction failed 29201/-71, size 0-0 line 2759 03:38:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x6488}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1047.900737] binder: undelivered TRANSACTION_ERROR: 29201 03:38:19 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x368}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:19 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r1, &(0x7f0000000140), 0x6f2, 0x0) read(r1, &(0x7f0000000300)=""/5, 0x5) lseek(r1, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:38:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x700, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x3, &(0x7f0000000400)=[{&(0x7f0000000200)="34ffbf4d4023d5571b995ada7da8af9b99e60afc2ac43166343abd4bcc04fe9ed3f8fdf559cbc3f2749f0674dcbb3c1d39da6f10610c1b66bf2ee86ae967e8581bbf5ddd7bb51dd945f2287fb119e007785bd5c7d96de9ce395bef780c95a3d2d8b983e75a3f600227f74f3853201ad45caaeb4097a35b61bfd476934eda184bae6b72ef77b7e36e4798f8288c5ae20deacb899becba8c793dabf100d93a9ec1408c34671e7a6f37bfb5c4c1c27604676be7c16b7d2c31a60a3580", 0xbb, 0x7625ece9}, {&(0x7f00000002c0)="5f03047d8797b819edd2994675fa53f6aab0d2845e22c6f171d3b7b2f7d47441a4bd01e4d85f5bbf89ac99940ef0499d274c0f929447c486a48c059a95d2e0ff7b033557a71cf6ce09e34e521b7733e883dee2216d63493630e422347ddef6fb07f866b207f0388c540de50d9846f07f22e5b04117268fbe3fb0ce51e82f30947334111f72030065cf5e7ed9efadf5d5cd6872fb11", 0x95}, {&(0x7f0000000380)="ac4f4eb8ad05d71b6e09bd64e0c3d8bab5955333f476d45cc15485dc88844f4f48e32d1c40aa171037f7a137d8777d0179cb10b99c911580a7e532fc690e30dc070b1a19821122bf8cd832cab75723ad32e94bab", 0x54, 0x8850}], 0x800000, &(0x7f0000000680)=ANY=[@ANYBLOB="686f73746440f2114831dae6cbaf7f4dd36174613d2c646174613d6f7264657265642c6572723207733d77697468647261772c00"]) r0 = syz_open_dev$sndpcmc(&(0x7f00000004c0)='/dev/snd/pcmC#D#c\x00', 0x1f, 0x80) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000500)=""/250) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000600)=0x0) sched_getparam(r1, &(0x7f0000000640)) 03:38:19 executing program 6: r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/34) 03:38:19 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f00000001c0)=ANY=[]) [ 1048.291220] binder: 4596:4597 got reply transaction with no transaction stack [ 1048.298713] binder: 4596:4597 transaction failed 29201/-71, size 0-0 line 2759 [ 1048.361024] binder: 4596:4597 ioctl c0306201 200000c0 returned -14 [ 1048.386684] binder: 4596:4597 got reply transaction with no transaction stack [ 1048.394312] binder: 4596:4597 transaction failed 29201/-71, size 0-0 line 2759 [ 1048.404355] binder: undelivered TRANSACTION_ERROR: 29201 [ 1048.414830] XFS (loop3): Mounting V4 Filesystem [ 1048.434122] XFS (loop3): totally zeroed log [ 1048.452101] XFS (loop3): Metadata corruption detected at xfs_agi_verify+0x188/0x5a0, xfs_agi block 0x2 [ 1048.462537] XFS (loop3): Unmount and run xfs_repair [ 1048.467666] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1048.474393] 0000000065752b19: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1048.483285] 00000000d8d3ee76: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1048.492212] 00000000f28ec17c: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1048.501133] 00000000f8a3546a: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 03:38:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x8035000000000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000200)=0x104081, 0x4) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000240)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:20 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/rt_cache\x00') getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000080)=0x9b) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r1}, &(0x7f0000000280)=0x8) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x80, 0x4) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/34) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff9000/0x1000)=nil) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000000)={0xffff}, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={r2, 0x6d4, 0x10}, 0xc) 03:38:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x400000000000000, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1048.510073] 000000001d79334a: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1048.518996] 00000000777674a5: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1048.527928] 00000000fce23930: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1048.536830] 000000001f49b2b1: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1048.554434] XFS (loop3): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x2 len 1 error 117 [ 1048.564209] XFS (loop3): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 1048.573476] XFS (loop3): Failed to read root inode 0x80, error 117 03:38:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x88caffff00000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1048.629497] binder: 4628:4630 got reply transaction with no transaction stack [ 1048.636999] binder: 4628:4630 transaction failed 29201/-71, size 0-0 line 2759 03:38:20 executing program 6: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffc000/0x2000)=nil) shmget(0x2, 0x3000, 0x1082, &(0x7f0000ffc000/0x3000)=nil) shmget$private(0x0, 0x4000, 0xc49, &(0x7f0000ffb000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x54000211, &(0x7f0000ffc000/0x4000)=nil) shmget(0x2, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) shmget(0x3, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) shmget(0x3, 0x1000, 0x54001000, &(0x7f0000ffc000/0x1000)=nil) r1 = shmget$private(0x0, 0x2000, 0xb6ba0e85335f2d2d, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000040)=""/34) [ 1048.698792] XFS (loop3): Mounting V4 Filesystem [ 1048.727460] binder: 4628:4630 ioctl c0306201 200000c0 returned -14 [ 1048.741988] XFS (loop3): totally zeroed log [ 1048.759392] binder: 4628:4630 got reply transaction with no transaction stack [ 1048.761780] XFS (loop3): Metadata corruption detected at xfs_agi_verify+0x188/0x5a0, xfs_agi block 0x2 [ 1048.766927] binder: 4628:4630 transaction failed 29201/-71, size 0-0 line 2759 [ 1048.776453] XFS (loop3): Unmount and run xfs_repair [ 1048.776464] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1048.776478] 00000000cc3f07a5: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1048.776487] 000000006c7ef323: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1048.776504] 000000000250ddc8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1048.803004] binder: undelivered TRANSACTION_ERROR: 29201 [ 1048.804627] 000000004f2f219c: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1048.804638] 0000000006249284: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1048.804648] 000000009fabe63b: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1048.804658] 0000000094c7ec64: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1048.804667] 000000004ab6190f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 03:38:20 executing program 6: shmget$private(0x0, 0x3000, 0x78000514, &(0x7f0000ffa000/0x3000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000180)=""/34) 03:38:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x6800, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0xffff000000000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1048.807929] XFS (loop3): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x2 len 1 error 117 [ 1048.882174] XFS (loop3): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 1048.890792] XFS (loop3): Failed to read root inode 0x80, error 117 03:38:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x8864000000000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1048.961749] binder: 4660:4662 got reply transaction with no transaction stack [ 1048.969337] binder: 4660:4662 transaction failed 29201/-71, size 0-0 line 2759 [ 1049.007863] binder: 4660:4662 ioctl c0306201 200000c0 returned -14 [ 1049.021564] binder: 4660:4662 got reply transaction with no transaction stack [ 1049.029097] binder: 4660:4662 transaction failed 29201/-71, size 0-0 line 2759 [ 1049.039483] binder: undelivered TRANSACTION_ERROR: 29201 03:38:20 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x268}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 1049.115591] gfs2: invalid mount option: hostd@òH1Úæ˯MÓata= [ 1049.121707] gfs2: can't parse mount arguments 03:38:20 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x60) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000200)=r0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r2 = syz_open_procfs(r0, &(0x7f0000000080)="696fef") pread64(r2, &(0x7f00009f3000), 0x352, 0x0) read(r2, &(0x7f0000000300)=""/5, 0x5) lseek(r2, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:38:20 executing program 6: socketpair(0xa, 0x5, 0x81, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0xdb41, 0x4) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/34) 03:38:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x7a00, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:20 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f00000001c0)=ANY=[]) 03:38:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:20 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x3040, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1049.291462] binder: 4687:4696 got reply transaction with no transaction stack [ 1049.298955] binder: 4687:4696 transaction failed 29201/-71, size 0-0 line 2759 [ 1049.363120] binder: 4687:4696 ioctl c0306201 200000c0 returned -14 [ 1049.371458] XFS (loop3): Mounting V4 Filesystem [ 1049.394357] XFS (loop3): totally zeroed log [ 1049.417094] binder: 4687:4696 got reply transaction with no transaction stack [ 1049.424663] binder: 4687:4696 transaction failed 29201/-71, size 0-0 line 2759 [ 1049.435206] XFS (loop3): Metadata corruption detected at xfs_agi_verify+0x188/0x5a0, xfs_agi block 0x2 [ 1049.445016] XFS (loop3): Unmount and run xfs_repair [ 1049.450220] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1049.456991] 00000000919677a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1049.466449] 00000000b6078092: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1049.475409] 000000000da72904: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1049.484383] 00000000d3fe1aa0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1049.493373] 000000004651b745: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1049.502299] 000000002b4d2e30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 03:38:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000200)="33f4022959966bf5ee7ee86036d18515628a1d3996855c9f92884109eb219869a30ed9b96320610000000000000000000000", &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000280)="930a7cd8b1a55dd46dc2034f9bba39a0fc8246c85eb8a201cfea1ca8b62b7a4cfcd2e5d9828c10c71ad84411dc6479020d3d1959b759c8bf20e021c32a1f15c06e713064ab0bc3b93932dbb07f2f3d1937905f9771bc730800174661f58c52349fec2d32b5b44e7669c1f8735b0bda5709bd41e0b10fd09e36afabfa88c8269185871879f2046a7da4fc15324f08a5b883e3eaace01f2278cce07c36c8dc2306a70a9379fd5cf4d0c0") mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x43050000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:21 executing program 6: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x101) r1 = shmget(0x1, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f00000000c0)=""/34) 03:38:21 executing program 1: lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="6b79b26c3a7cd1a3"], &(0x7f0000000200)=""/122, 0x7a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1049.511285] 000000008c6c9fa6: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1049.520275] 00000000f7447f18: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1049.525262] binder: undelivered TRANSACTION_ERROR: 29201 [ 1049.535778] XFS (loop3): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x2 len 1 error 117 [ 1049.545304] XFS (loop3): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 1049.553925] XFS (loop3): Failed to read root inode 0x80, error 117 03:38:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x86ddffff}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1049.662859] binder: 4733:4736 got reply transaction with no transaction stack [ 1049.670457] binder: 4733:4736 transaction failed 29201/-71, size 0-0 line 2759 03:38:21 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f00000001c0)=ANY=[]) [ 1049.713308] binder: 4733:4736 ioctl c0306201 200000c0 returned -14 [ 1049.750692] binder: 4733:4736 got reply transaction with no transaction stack 03:38:21 executing program 6: shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/34) r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x7, 0x8000) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/22) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000100)={"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"}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000500)={0x3, [0x401, 0xe49b, 0x8001]}, 0xa) 03:38:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x200000000000000, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1049.758168] binder: 4733:4736 transaction failed 29201/-71, size 0-0 line 2759 [ 1049.780722] binder: undelivered TRANSACTION_ERROR: 29201 [ 1049.887911] binder: 4759:4760 got reply transaction with no transaction stack [ 1049.895399] binder: 4759:4760 transaction failed 29201/-71, size 0-0 line 2759 [ 1049.904796] XFS (loop3): Mounting V4 Filesystem [ 1049.913385] binder: 4759:4760 ioctl c0306201 200000c0 returned -14 [ 1049.925155] binder: 4759:4760 got reply transaction with no transaction stack [ 1049.932634] binder: 4759:4760 transaction failed 29201/-71, size 0-0 line 2759 [ 1049.942332] XFS (loop3): totally zeroed log [ 1049.949832] binder: undelivered TRANSACTION_ERROR: 29201 [ 1049.951110] XFS (loop3): Metadata corruption detected at xfs_agi_verify+0x188/0x5a0, xfs_agi block 0x2 [ 1049.965441] XFS (loop3): Unmount and run xfs_repair [ 1049.971361] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1049.978185] 00000000133efc79: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1049.987372] 00000000e12f2794: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1049.996364] 00000000fd7403f1: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1050.005383] 000000002d9b8699: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1050.014340] 000000002ae98a55: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1050.023293] 00000000feb9e6d9: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 03:38:21 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x3cc}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 1050.032267] 000000008ebea780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1050.041194] 0000000039fe78d8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1050.051016] XFS (loop3): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x2 len 1 error 117 [ 1050.060551] XFS (loop3): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 1050.069199] XFS (loop3): Failed to read root inode 0x80, error 117 03:38:21 executing program 6: r0 = shmget$private(0x0, 0x4000, 0x28, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000000c0)=""/34) 03:38:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x8035}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0xffffff7f00000000, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x5}, 0xfc94) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x201a7f1b, 0x85ffffff, 0x201a7fd7, 0xa, 0xab01, 0xffffffc0}], {0x95}}, &(0x7f0000000000)="47504cc000", 0x8, 0x1ac, &(0x7f00001a7f05)=""/251}, 0x48) 03:38:21 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000140), {[{{@ipv6={@remote={0xfe, 0x80, [], 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, [0x0, 0x0, 0xff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff], 'lo\x00', 'teql0\x00', {0xff}, {0xff}, 0x2d, 0x10000, 0x2, 0x41}, 0x0, 0xc8, 0xf0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x5, 0xfffffffffffffffb, 0x200}, {0x7fff, 0xfff, 0xffffffff}}}}, {{@ipv6={@loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, [0xff000000, 0xff000000, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffff00, 0xff0000ff, 0x393c5cf101aa9dd1], 'ip_vti0\x00', 'gre0\x00', {}, {}, 0x2f, 0x3, 0x6, 0x10}, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0x80000001}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x360) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) read(r1, &(0x7f0000000300)=""/5, 0x5) lseek(r1, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) [ 1050.188289] binder: 4779:4781 got reply transaction with no transaction stack [ 1050.195791] binder: 4779:4781 transaction failed 29201/-71, size 0-0 line 2759 [ 1050.234343] binder: 4779:4781 ioctl c0306201 200000c0 returned -14 03:38:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x4800}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1050.276983] binder: 4779:4781 got reply transaction with no transaction stack [ 1050.284723] binder: 4779:4781 transaction failed 29201/-71, size 0-0 line 2759 [ 1050.327411] binder: undelivered TRANSACTION_ERROR: 29201 03:38:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x4788}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:22 executing program 6: shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/34) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) ptrace$getregs(0xe, r0, 0x12, &(0x7f0000000200)=""/240) 03:38:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x6800000000000000, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") personality(0x1bb2baf3005ac137) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) 03:38:22 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x4000, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000140)=0x6) 03:38:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x0, 0x80000) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) [ 1050.514875] binder: 4813:4815 got reply transaction with no transaction stack [ 1050.522418] binder: 4813:4815 transaction failed 29201/-71, size 0-0 line 2759 [ 1050.548078] binder: 4813:4815 ioctl c0306201 200000c0 returned -14 03:38:22 executing program 6: shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/34) r0 = shmget(0x2, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x5000) 03:38:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x806000000000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020707031dfffd9402a2830020200a000900e000001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1050.580382] binder: 4813:4815 got reply transaction with no transaction stack [ 1050.587900] binder: 4813:4815 transaction failed 29201/-71, size 0-0 line 2759 [ 1050.604597] binder: undelivered TRANSACTION_ERROR: 29201 03:38:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x89060000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:22 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r1, &(0x7f00009f3000), 0x352, 0x0) read(r1, &(0x7f0000000300)=""/5, 0x5) lseek(r1, 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) fcntl$dupfd(r2, 0x0, r2) 03:38:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x6000000, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:22 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xa4, &(0x7f0000000080), &(0x7f0000000140)=0x4) 03:38:22 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x191}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:22 executing program 6: shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/34) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xfffffffffffffd75) 03:38:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1051.318247] binder: 4857:4858 got reply transaction with no transaction stack [ 1051.325731] binder: 4857:4858 transaction failed 29201/-71, size 0-0 line 2759 03:38:22 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x10) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0xffffdd86}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:22 executing program 3: 03:38:22 executing program 6: shmget(0x1, 0x4000, 0x410, &(0x7f0000ffc000/0x4000)=nil) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000180)=0x1c, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) shmget$private(0x0, 0x2000, 0x120, &(0x7f0000ffd000/0x2000)=nil) r1 = shmget(0x2, 0x3000, 0x810, &(0x7f0000ffd000/0x3000)=nil) r2 = semget(0x0, 0x6, 0x40) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) semtimedop(r2, &(0x7f0000000000)=[{0x0, 0x5, 0x1000}, {0x4, 0x8eea, 0x800}, {0x2, 0x9, 0x1800}, {0x7, 0xeb, 0x800}], 0x4, &(0x7f0000000100)={r3, r4+10000000}) rmdir(&(0x7f0000000040)='./file0\x00') mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x1000000, &(0x7f00000002c0)={[{@mode={'mode', 0x3d, [0x36, 0x30, 0x36, 0x36]}, 0x2c}]}) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000080)=""/34) [ 1051.419154] binder: 4857:4858 ioctl c0306201 200000c0 returned -14 [ 1051.458706] binder: 4857:4858 got reply transaction with no transaction stack [ 1051.466181] binder: 4857:4858 transaction failed 29201/-71, size 0-0 line 2759 03:38:23 executing program 3: 03:38:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000200)={'ipddp0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) 03:38:23 executing program 6: shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/34) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000040)={0x3, 0x7, 0x1, 0x1, 'syz1\x00', 0x6}) 03:38:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0xd000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1051.540994] binder: undelivered TRANSACTION_ERROR: 29201 03:38:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:23 executing program 3: [ 1051.709325] binder: 4905:4907 got reply transaction with no transaction stack [ 1051.716988] binder: 4905:4907 transaction failed 29201/-71, size 0-0 line 2759 [ 1051.737738] binder: 4905:4907 ioctl c0306201 200000c0 returned -14 [ 1051.762621] binder: 4905:4907 got reply transaction with no transaction stack [ 1051.770180] binder: 4905:4907 transaction failed 29201/-71, size 0-0 line 2759 [ 1051.802432] binder: undelivered TRANSACTION_ERROR: 29201 03:38:23 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x100000, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r1, &(0x7f00009f3000), 0x352, 0x0) read(r1, &(0x7f0000000300)=""/5, 0x5) lseek(r1, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:38:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x88a8ffff}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:23 executing program 3: 03:38:23 executing program 6: shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/34) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="510000009becfcaa6145020000003c54307dc5955f19fc0d354db3771a97a86fb96af8f69de03e919adf08d83f60ac9e44bd1240de99af7f7c40b5b94e3c63c3aea67dc226b775740bd72b"], &(0x7f0000000240)=0x59) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000280)={r1, 0x6, 0x7, 0x9}, 0x10) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x20000) accept4$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x2711, @any=0xffffffff}, 0x10, 0x80800) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x2) mq_timedreceive(r2, &(0x7f0000000040)=""/112, 0x70, 0x8, &(0x7f0000000180)={r3, r4+30000000}) 03:38:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x6c00, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:23 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x29b}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) inotify_init1(0x80000) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:23 executing program 3: [ 1052.383232] binder: 4928:4934 got reply transaction with no transaction stack [ 1052.390880] binder: 4928:4934 transaction failed 29201/-71, size 0-0 line 2759 [ 1052.414378] binder: 4928:4934 ioctl c0306201 200000c0 returned -14 03:38:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x8) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1052.434207] binder: 4928:4934 got reply transaction with no transaction stack [ 1052.441799] binder: 4928:4934 transaction failed 29201/-71, size 0-0 line 2759 03:38:24 executing program 6: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200000, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/34) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x80800, 0x0) 03:38:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x34000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:24 executing program 3: 03:38:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1052.539414] binder: undelivered TRANSACTION_ERROR: 29201 03:38:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:24 executing program 3: 03:38:24 executing program 6: [ 1052.640263] binder: 4960:4962 got reply transaction with no transaction stack [ 1052.647733] binder: 4960:4962 transaction failed 29201/-71, size 0-0 line 2759 [ 1052.688435] binder: 4960:4962 ioctl c0306201 200000c0 returned -14 [ 1052.698564] binder: 4960:4962 got reply transaction with no transaction stack [ 1052.706213] binder: 4960:4962 transaction failed 29201/-71, size 0-0 line 2759 [ 1052.717319] binder: undelivered TRANSACTION_ERROR: 29201 03:38:24 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f00000001c0)="f100caf75eae12685ac9228a57a5b343cc4bf08f03dd8e00fd10556e1c2d5925e08021246a5264476fb4f2f2bb09143abded1988ac56fb33f1cd00000100000000001375dd1e83a680c242e38a6174fc3a5d46e98383a52c591e45c557e52eacc3a2bb8a02a966983da3f027d59a47c8a0ef690def740f10118a3aaaffe41502815f97d3e3bacaa0d15e8cda98abc9cbdea3313b01930e4dacbe1d47d5a4a02a3f27c74e460855f2d78114eabd57c5ff5c8bb390d56606607cde6d1b8f9875442732127521d2fb4f2e4406656cbee44837761306e94d9ea79c94", &(0x7f0000000180), &(0x7f00000002c0), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r1, &(0x7f00009f3000), 0x352, 0x0) read(r1, &(0x7f0000000300)=""/5, 0x5) lseek(r1, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:38:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x100000000000000, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x543}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:24 executing program 6: 03:38:24 executing program 3: 03:38:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x100, 0x4) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:24 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x1b2}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:24 executing program 3: [ 1053.276267] binder: 4986:4988 got reply transaction with no transaction stack [ 1053.283811] binder: 4986:4988 transaction failed 29201/-71, size 0-0 line 2759 [ 1053.351277] binder: 4986:4988 ioctl c0306201 200000c0 returned -14 [ 1053.380479] binder: 4986:4988 got reply transaction with no transaction stack [ 1053.387968] binder: 4986:4988 transaction failed 29201/-71, size 0-0 line 2759 03:38:24 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x40) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f00000002c0)={0x5, 0x2, 0x0, 0x0, 0xff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000280)='./file0\x00', 0x8, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x10000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={r1, 0x0, 0x1, 0x3, &(0x7f0000000140)=[0x0], 0x1}, 0x20) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:24 executing program 6: 03:38:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:25 executing program 3: 03:38:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x48000000, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1053.427723] binder: undelivered TRANSACTION_ERROR: 29201 03:38:25 executing program 6: 03:38:25 executing program 3: 03:38:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x48000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1053.561099] binder: 5012:5014 got reply transaction with no transaction stack [ 1053.568609] binder: 5012:5014 transaction failed 29201/-71, size 0-0 line 2759 [ 1053.658783] binder: 5012:5014 ioctl c0306201 200000c0 returned -14 [ 1053.689781] binder: 5012:5014 got reply transaction with no transaction stack [ 1053.697362] binder: 5012:5014 transaction failed 29201/-71, size 0-0 line 2759 [ 1053.727110] binder: undelivered TRANSACTION_ERROR: 29201 03:38:25 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x5f45, 0x70000, 0x5, 0xfffffffffffffc00, 0x0, 0xffff, 0x100, 0xa, 0x3, 0x5, 0x7, 0x2dca, 0xffffffff, 0x3, 0x1f, 0x8f7, 0x8, 0x7e6, 0x2, 0x0, 0x10000, 0x8, 0x9, 0x8, 0x400, 0x75, 0x7, 0x1, 0x0, 0x0, 0x43baea63, 0xc49c, 0x80000001, 0x7, 0x9, 0x9, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x12400, 0xe82, 0x2, 0x6, 0x2, 0x401, 0x8}, r0, 0x5, 0xffffffffffffff9c, 0x8) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r1, &(0x7f00009f3000), 0x352, 0x0) read(r1, &(0x7f0000000300)=""/5, 0x5) lseek(r1, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:38:25 executing program 3: 03:38:25 executing program 6: 03:38:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x74000000, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x9, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="513e605a2afb67b6d0a6ea038889d4a0fec094ff8658ccc0a8fc685f2eefd951cd8548fee3ef6f0b149883760392233e3dd8be7d682ea28ed4e7279a35964d708c8e9772968e1974294f67eb3c6f0ff4a28dc0857963ab0182e774c473b60a3c24c5f6ac25604f49067b2ab283ca5aaf28ba2e1448e82f09305509", 0x7b, 0x7}, {&(0x7f0000000280)="d6f59cc4a6d162965596eda93253008f55e4ac506f7b2be36fb2e34ef70122261e8e7e9913165c528d4d10f0479273056a8ceac9ddadf5cb2671f68d47f16f9f2200debbd40b18ae478074451e144664e1df76c57043f9a30acfe468aa5f225887a14993f37158e889015d6d304a4220c75bfd40a9896ecb7e5ad62c656cc5204fe80a9ec2f9859480f95e87", 0x8c, 0x9}, {&(0x7f0000000340)="3814", 0x2, 0x9}], 0x800, &(0x7f0000000400)={[{@nodots='nodots', 0x2c}, {@dots='dots', 0x2c}, {@nodots='nodots', 0x2c}, {@dots='dots', 0x2c}, {@fat=@gid={'gid', 0x3d, [0x30, 0x35, 0x33, 0x31]}, 0x2c}, {@dots='dots', 0x2c}, {@nodots='nodots', 0x2c}, {@nodots='nodots', 0x2c}, {@nodots='nodots', 0x2c}, {@dots='dots', 0x2c}]}) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:25 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0xfffffffffffffffc) getgroups(0x2, &(0x7f0000000140)=[0xee01, 0x0]) open(&(0x7f0000000200)='./file0\x00', 0x400, 0x108) setgid(r0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:25 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x1a4}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:25 executing program 3: [ 1054.264019] binder: 5048:5049 got reply transaction with no transaction stack [ 1054.271603] binder: 5048:5049 transaction failed 29201/-71, size 0-0 line 2759 03:38:25 executing program 6: [ 1054.318235] FAT-fs (loop1): bogus number of reserved sectors [ 1054.324499] FAT-fs (loop1): Can't find a valid FAT filesystem 03:38:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0xffff0000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1054.359469] binder: 5048:5049 ioctl c0306201 200000c0 returned -14 [ 1054.375490] binder: 5048:5049 got reply transaction with no transaction stack [ 1054.382948] binder: 5048:5049 transaction failed 29201/-71, size 0-0 line 2759 [ 1054.400560] FAT-fs (loop1): bogus number of reserved sectors [ 1054.406754] FAT-fs (loop1): Can't find a valid FAT filesystem 03:38:26 executing program 3: [ 1054.454797] binder: undelivered TRANSACTION_ERROR: 29201 03:38:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x4800, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:26 executing program 3: 03:38:26 executing program 6: 03:38:26 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x80, 0x10000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="df000000a612c41671eb4e2129763d11622008429cba60ab43290467024f125a4648d9141e4a1067dd709086e573773c5eb90bac373f6611a0c7cbeefd27020c9ae407b734b3481a2ea4d8ba0c5599dea27fc90cd7f46830f4b949d825fedef0ceefe651aaa16498bae2ff0a14853a493551440df70c4a1c1aca1d65ff2bf544f248c43ee6c52742e68fbe42c65ce3297f5b38bb58951ae98898d87a45fe115f656bdd7bbb63491165e3c7931b67e87e86065b11afbb164ce76c788630880445b757af8548062867ce5fc1cf5d539e2e343efc87c514740e32640c336993f36979dd3b"], &(0x7f0000000140)=0xe7) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000300)=@assoc_value={r1, 0x2}, 0x8) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1054.587872] binder: 5085:5086 got reply transaction with no transaction stack [ 1054.595409] binder: 5085:5086 transaction failed 29201/-71, size 0-0 line 2759 [ 1054.617528] binder: 5085:5086 ioctl c0306201 200000c0 returned -14 [ 1054.665884] binder: 5085:5086 got reply transaction with no transaction stack [ 1054.673391] binder: 5085:5086 transaction failed 29201/-71, size 0-0 line 2759 [ 1054.687363] binder: undelivered TRANSACTION_ERROR: 29201 03:38:26 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r1, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'nr0\x00', 0x0}) syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x100000001, 0x80000) shmget(0x2, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) sendmsg(r1, &(0x7f0000001bc0)={&(0x7f00000007c0)=@hci={0x1f, r2, 0x3}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000840)="467c3c694e8912ff505be3a6ca6073068df7bf9820bd36d13e708daee3aa4196ded5e6d5763154f058b6593019b105c47b91a52b545590b7e5577061326b1fe5604c6fc097b1a953abfdea7ceb1f40e66d64adb4fd58777c07575ff8c19dee06843d104e6c0fe95922adba23be5a7694a9a78cdd93a372a6f1156fbd13156d155250ed2c8e8d613319d53aa44f4354330275c476a579d352f20a9e7981003923849a9e07c1f98bb697f805644847eb00efae4f619a0ae70b760db14f121372241450d3e1b657b0657f4db2413f47694b355009b668e65cef7922813ad86bc1c74ec162a7f5cfbb162a58fbb624b7cad80653ea3f6545535932d6a8ef9432609201e18584e21bc853050840f6839b3e93e671701cac8f497c6331e2625ffb39977b21efbf5465cd8f4bb76c354c662faad1bec834b551aa92ac03011246b8e70d015be3c6c7f7e633badef2bf28ed1b1f7b0d6b5eaa9e1b0c5dcd2adbc001ab6dafa7d6588274ccc57f5e9556f68c2fd45d56d6b3a35f574a4436981203a255e5146ba97d26dbd4d724963ec6a23b88a0fc6790a3a2f16a5c919e9cfc90961fdcc233cd9c2bdf9ca14f75cf000b419bf4b12eda54d2d656e08a8c0a9c38216690e365a9b43050d327e0ed5826cdbf59d39d31ce4eb7afc686bc0e997436db76fb56e154b12b2efecee22ad8a3cfcab45ad24735af748e1fdf76ee75027a5e57331f12fb1ca55cd2a3b4bce95fd704b6dc00dc375f56d97f866ed203602dbc5c6dcaa18a273495a3ff40b9c016ac1343952d846e21e6c61675c11026108a7fa67bd260ede394ffdc2cc48a6bfff69ce23b3920b347ea949ede12cf52525b466e629cb877bae7bd9d6b684174f53c340838656e40f715b9460a350d0d780038230ea9442c4ce4f850b0009d67b2c40866d176ba96fdd2b692b92f95f87032c120e8ec6b2827544b4515597b1b871bd07c8c416fe8cbf5a35ca4f9ae6d919efa471f31c27d4763bc30798e45b0c8f6aeb6103870433c57a3f7c53c4fab6b3c3bd5ab238a5e5ddc18e2df5bf7b3e9b88b0f78711b57fa2aff81f0d981a35aa309ee38f4704ef7a9ff44b6d87b53be49655e46e16e7496268c6849b1660cfc734929ca2cd3bdedb6063fffd3201442a7960892bed458f30e90851d22c1f399826dda9257902b63f0a2dc41cebcc64bc85558accebc9f5229e8590e026d79ff31562fe41dbea49563b3e8a3e652c6d5ee99da55d30cd42349313a019c4aa4d3f075cb8359542d945ce34891c2a24359df2fe2f5cc7278e19e8f8bfdb402b0ae6bab16672d5a805ef5b9e94d972154205e4ee09bf658cad2c66f58a2e38457db89c73e2b3418c76b3fc168dc028e04641dcdcea576087520a7ba0674b02657b36a4c94cb7ce1ee69172b7b1c5c7a154da6c4dbd213b42d004e4674747ef7f34380d868d1ac3eb883d9c6a0d066a982ae9c3efd9f66cfc520cdffe0cf43e2188bdfb0f542ac8a23a5e7fab448370a8dd9bbcc1dc6fcfb22759d7d8cfb0d6d954a1e1e915e73138584210c5f6847fb65c26436c8add98d409ff21081523044bf41a91f8877bfcad944affc8b0ecbeccc5104e7332fc0541efa6fe3395776e9b2f4924a07a4f75e3408b9ed307aba5d6150e6340bf907c876145a73580aa2e9b2cdd885aab555ba560de17abc4f871f01a64a4ee74f87e0a26bf39397fb1dea73b067cdb07d546d12b18f64dbc1e4587a931091ffa39a740fdd2486cc9eea0f07049c40dc78e9a2555a19f76b071217d91bbcd01d0b8512dfc01fa9e5aab154eb470fc6adc83e3bdc824c935ccef0997f0e14fd64a9419409ad26366b9a7fd33a20a8e35e2e62e41628dcfe796e14f3ab0e3a96c12db2efc67a48debff097e375c915917841505a59fe8e805ce8f2c0564ed62d960279cb0daf84a3fc39eaeb5608cb526fbc1d2885e99f36c659ce830209a6086669e63360ffd117463d74d7e8409a2eb260037d42d401aee20d788a2c5a8a9adcc5784f5142993f0b533cadf6e3bec0c6628a332c67b637b527c669347a2230327971f40d80f53b89bfbd011f32fd7932040e2b76051edc367e4ee4c0624a4123848928905ce2c966770c892b6b08db1459f7c8096cc06d188f402d69e7347f35a8ea6284f3e9a4f51f09c3c544c6d2384b650571d47a09f77dcc06744a95ef62a321080da3f1a4364053477509d6522999c10900496f8f136e28843858ee7689d437d704bee3e37229956ca7155bcf613d0fa159dea6c4fa1b6bac301c8df0638bf57d5aa74503f4dbe0e504d6263eff4241314ee776247362e26c9af247c8f2d68ce34852e980060a3ce60fe2ba9c4b13f40ad948fa865f7d4701b1a40cb8f4ae5b25f3df528eaaf07b0dd54a781bf850d8fdd4734ef9a7534ea1705a1a866da0f0cad31e773889e66b85aade9aaaa8f2434b39bc7d814955ab8a52231a30a9f2592c26e6e95833ad6700d852ac51e61ae3be314949134421d46dda119f13d51c226ddd64e01977ba78f3fa426ddf348b63416f666ea6f47c3f0a691092ae22bf2c08716467110514673fb6db18466db61033b99d07cc651b98cedb859ad6f5c30dd1e625cf3b2dfd7e3089d499caef72768c321db54eea85416e8764e679dae650ee6179878b6eac7057f440e33ab9a1c6d100a63ba1d2e47460f418d38be840d74bde751de1bff3361d8c42d6a5f754baa20b255162ee1afde7f54a787bcafe02bb842126b976f661bdcac63584f94508b424815fae769db1d15cab780f1e721ce6ad58164b32913ea4aa3cad89438bc875b473553e9158696d8e51e701148f26a44a0ad3c3bebe2c93caed51cd90ac709c012794cc66ab37945b62ed89175e6a3400cb88556680cfca5198d266765f504fd5949b96403e23ad6d1d73a059a67f70c264a1f765b17d5e3d678ac5b331eba20d90409e9053f927a2001c3bcbf6dfa0909c676e4471a4c339e361af2fed8c173ea692e7cb6d2be718bd53cf73d9d4fb7f1bc1ab6ef34806b34e361ec440ecc1c3dc827f083bb2e4a18a3046dedaa9d374f14b71e2252cea69cb6afc24a949d8954d04314fe8776f757bb95f7a2f2cbe60ef09c38c8386a5fc501ad9b9d99f5c992be621d5e2a391d958b7990fefc3635c6a8454895682b5a882ea775260a46bcd237d8aae15fed897f1059f5fcf6e11c89df35b48ce3f794f48ed32140999ffed4490334106bfdd38d6a5467becd1637c53b53fbce1b90cded37ee6daf05c3ea74fc430a8b5213f256b1f4006672a246d4ccc257cabc4ce8c08c81c929df1b82c3fe5eb4c103bd082589833b70c5d1188f7e8734bf754d17a4e520255aeb411eadaafab8f18df7ed5d9f736cc525b697b1ec00aa24360262a859d885ad61b4361eec2b627adfeb21645fc59ddf0485d262bed8894707a69c0b9d09dfdee0e63717cbeb18d7af4076f03a160c0327b30fd6589322ecd1800430f45a8d1f1bb5edc163ef349cdf20e09e2caf4c00ac801d521b655ce453998d2bc93703ad6c0c30a970c5639feb677ce7c0dd2b829ac83e0eb043c7de5328b1b6d97fcf419727a361900e27645b534c4c8c4b73017c41e2113fe072aa2c38aa46d5a9f8b84a1f6e4dc022cdc6eb315b856e39d58f6d60996be9bf6c2e65acb7cd2f463cccfdcde97c38a5e7de619521f7309dcabb8423bc30003a4a979a405bdd32529df28a85f391dc34e1f828bb03467d86961bfe3b5dd732f162c5ee33017a8406e961ca130fd16b50148c6f1ce439d26f72eda46dea802e52767a50b3b19a10ab08ac99356ed66c97ddb8d981d6addf49c93dc8f9fffd8ea0322313e2debd0b3d04d4d49b9d78f4d559f5ab530be97deb882a6ec3b7a9ec2ace791d3a55d40018e35accc8bdd58a0bf90802adb220202714be4a935b55508ee7c65e820423979327c010141d1e51c5424f454a806d5cd112c21d8d3693fdd8c66fdeab285dea17e91cf735e490735d4eace349de35b066a8e4ee8fd6068308b835f235c98a2cd35fefd61a42c1448490cc0bff1bd817254323ae0a57c8b1ed22cbc5f689b0da51de545b82f80543445ab6857dddb631aa115b18b24b3ef5c7f30d98f6a83b34db25abefe8b04a1a3d7cc4d9e089c36e847d5c0410f7cca3c31ac0c947dd70bbab9941f92731d8eee3238a3768d94b2d4c2bce8db1c4dd6da1575305f126bbcdf4a4a48ee7979af847a1c02b01407e2077f23a9b7c5d8979aef980080e0b65c1f398e9eea4d293c54e959e544eaeb5a99de7f7e0af2b7cbe034300beaea95f39fff6059471bb274069569706c5724e3993a64f731ffa65b174b223df598b84b7d9e02e880b5eaa733265a580bf4954fd3628859d04880005c031a2366065a76cb41404f11f2946cbf698a3ad7f2d9a575855faa80428f3150c52e3e4bda5f547e676da5b517be7d6d9518e1f1243160c5d634aa64d9437f5c5ee76ef3fb4a3602a526b6a77000b51c39ede3ee47c06751a6a930c795499f9866be26191bda9199b416b29fd9d20728b917c55fb4f0e0e86671d75b5673213397acdda83361b9dbb4ea654814391025fa9801e094794426410a2dfdcbeca8c6b0d90033c7bc47519d9bc5d9b4dc8d98e2b58acec37ddd534e13d57c92500f64bc8f65215e8cf60a24a812d5f8598049bcc2c82854c78a8f33dceff847f49d7729c7a89e5728d7b4e787aeb1088ff3b0b7a5d76eb33096040045ee23fa53ac541ab82dfe683496de080e54e5ada121c0ec8445fe88085de81726ea84c7489d5b3bce725a192b53d7f18761eb5128ac8674ba83e752b02c66aa8846781e579c09d39203947602d3de56a5a809aee07954462d1c0cd65651a190f40eb308d931419f98113f86ea8e9c4fa30bd5f4a991e9a4277d18d79c4de5cceff6571c64f1d95476772efbc196fecdab2a06dcaaa866deff04ba84967c5af0657689fb04969055d3276c6447c7f781ff08b8026d907f92fe7808cffea58e275eddd4567f18be45ef4a07a5cf3896e86ea6489a213e429c5f05f3b51060b8c60c832e22cf3396bfed21db9411a7d4d97bcb6972f77817932c77bda53a2f56d8903f7389a029e349b725b7240f50d0939e2f3c4d37a896ae00fd18e9c3ce755d8719469c788156f1f76e2f947ba85c48706d05363b4f33c5ab3bca7efdc58d3ce9b96092ac40f8a8b1af1b9f9d2dcb689208fb63c68ac3632c9df729c5d53566b076f08aaf3d7d6e699322664c2293e1df06014875989acbd96f04182c5f14fbf9234d6426fa5718e37258782c1ab45371a40d1699d286f136679b5f5b876c337810034a5c07064e4df3ff05bb982181a70de78ab020d07e39c26f2dcb996da0b2c79e02a205f73eb81893e360985aa5d9feb6a65da7d2d60a4efff886b79e08bfc9fcbcbb54d6ef7a0739556feb14a32b54976833f42d2ec0cdb555d837e9de077997561abd29f0935f3e7aed8bcdf29d6af34f17380b99d386e93502629ee3681bc28d5d9b642613225ba5dfcdf21d705c12a01dc13e18b91fc3f71e0adb393869b5fad3b278fa6d4992f255b2ad15eb9ac2ef865cf79d7f1f624b36a12e1157b6034e0f1aa57c912a062bbfa4de44bb962492ab702a01b3681c2bc33539b9cc64cd49e5d1d3693e34892f6b04519c5ce5757511ac6f129bcbc408a492c53c99eac364b2a3a518f4cade9d323add12db82bee4c3b04d346a59c956565c29168f5b16c0bbf2c0688f794959bb67e811ac87bc48948caa1ebbd1ef30314664499b311b1b9837fb484d3949c18e84844a32c5", 0x1000}, {&(0x7f0000001840)="642132d6f3348cd0d1cadc7a1ab5509cffc34a01562d32fd1cd0b9e9e7c07c04e69a4f28699c2f3d1f7cb22ccf71c07268d57efae4da2cb86e984b0c89b1b5e3cca038c32c07d76b059793ffa09f7fe1d3b3812b3a94b3d49ff2e45705a1dbac73eb46a5722aefcd22ab8b3d545e24621869a5afc33744729b0634cd4094043af7a5c8a579aa13c9f93501665d02339d1301612170e3fc98d3207eaa27d29b089818967fa408b3", 0xa7}, {&(0x7f0000001900)="f9413b55bd7721b5095421c1b66a623670fb5845944d8aef7507d2b6ecf3a47367a18d89cc0c6d22401fb7c88dbf1679ea3e091c90a38b5956be9ad8949175b9d063e234f9ebe242eba48d9114491c4be599d6eea947b4ed1e2932b0e899a548fbb8fd5a360f02ae6b6f7fc9f3394769f34b8387013f01bdcf4184c3c55afd968a716bb086c21f0addd80740fc808fd579218c2b86181e1a3aab8949e3d2b36f0ca00ad6866d7037a290b2cb655d46571a3bbf543807b2d601e241f9f0e98c0c88d1ebd09cf7f6699cdcda04b0a4dd58ef9e28a848ae3b9b24027836ad6d47d53aea9de8022262d55bcbdcc7d44ff296ec5271c26f", 0xf5}, {&(0x7f0000001a00)="5f521a1a4133db1ba3ae5ab614dccc6fbb111304c937fa083aa20f2cd617acfd7eada7d4412402a1046581520e48e35da494f199fcbc17b34851ac5c24ad5eb7de4c42d21fe4b8834bb2a30a6deada885d", 0x51}], 0x4, &(0x7f0000001ac0)=[{0xc8, 0x19f, 0x2, "fd3f59561ceeae102132c0b10ef95893371efc8e86cbe0250e937f191ad3b2fb9fdad8924990a4920adade9dc1fbf37d37d1fd0c1f16657f9b1df26cce56abb4fb94d8302cb1d639c3bdbd46a1b1551683f9c293a56137f457d3d07c2dd1926a7883e657352f1034945575a4d507762102386f2bed065cc571b9ab4da1de90b8c5457733eec4590b1c6d9a68bb1711191fe6536365dbdf2046744e9ee6ee020d1ff8e49f40558a2aebf31142517605e07d"}], 0xc8, 0x51}, 0x4000000) read(r1, &(0x7f0000000300)=""/5, 0x5) lseek(r1, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:38:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x48}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:26 executing program 3: 03:38:26 executing program 6: 03:38:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x449b667b, 0x2000) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') getpeername$packet(0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000380)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f00000003c0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000540)={0x0, @empty, @dev}, &(0x7f0000000580)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000002cc0)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002d00)={0x0, @multicast2, @rand_addr}, &(0x7f0000002d40)=0xc) recvmsg(0xffffffffffffff9c, &(0x7f00000030c0)={&(0x7f0000002d80)=@can={0x0, 0x0}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002e00)=""/195, 0xc3}, {&(0x7f0000002f00)=""/223, 0xdf}], 0x2, &(0x7f0000003040)=""/99, 0x63}, 0x40000000) accept$packet(0xffffffffffffff9c, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000003580)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000035c0)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f00000036c0)=0xe8) getsockname(0xffffffffffffff9c, &(0x7f0000003700)=@hci={0x0, 0x0}, &(0x7f0000003780)=0x80) accept4$packet(0xffffffffffffff9c, &(0x7f0000003900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000003940)=0xc0, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000003a00)={'vcan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000003a40)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000003b40)=0xe8) getpeername(0xffffffffffffff9c, &(0x7f0000003b80)=@xdp={0x0, 0x0, 0x0}, &(0x7f0000003c00)=0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003c40)={{{@in6=@mcast2, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000003d40)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000005400)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000005500)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000005e00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40300020}, 0xc, &(0x7f0000005dc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="80080000132c1811c153d477c81a0f6591ec7e8d5100c8d14251a0ff63f932ab029616d3e6d50d8c8115b8dab1e357cd1dd3da78a0402e2601e5d30b0524104b07dac753d7", @ANYRES16=r1, @ANYBLOB="000229bd7000ffdbdf250200000008000100", @ANYRES32=r2, @ANYBLOB="f000020038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400e70c000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400090000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040079000000080007000000000008000100", @ANYRES32=r4, @ANYBLOB="4401020040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63650038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400fffdffff3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000008000100", @ANYRES32=r6, @ANYBLOB="7c00020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000600000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400fffeffff08000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="480102003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400010001003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r9, @ANYBLOB="5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c000400f9ff020320000000080040540100000036bf08060200000005000438e32e0000010004060700000002000100", @ANYRES32=r10, @ANYBLOB="7c00020038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004008000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040005000000080007000000000008000100", @ANYRES32=r11, @ANYBLOB="cc0102003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000014000400030002060200000009000802030000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r14, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d00004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r15, @ANYBLOB="f401020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000000002008000600", @ANYRES32=r16, @ANYBLOB="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"], 0x880}, 0x1, 0x0, 0x0, 0x24004090}, 0x4000010) open$dir(&(0x7f0000000100)='./file0\x00', 0x10004, 0xfffffffffffffffd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:26 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x3e2}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:26 executing program 3: [ 1055.395896] binder: 5114:5116 got reply transaction with no transaction stack [ 1055.403553] binder: 5114:5116 transaction failed 29201/-71, size 0-0 line 2759 03:38:27 executing program 6: 03:38:27 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0xa020, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x200, 0x2) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x4e21, 0x9, @remote={0xfe, 0x80, [], 0xbb}, 0x100000000}, {0xa, 0x4e20, 0x400, @empty, 0x8}, 0x9, [0x6, 0x40, 0x6, 0xe768cbc, 0x6, 0x0, 0x4, 0x5]}, 0x5c) listxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=""/4096, 0x1000) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x113, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), r3, r1}}, 0x18) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001380)=0x0) tkill(r4, 0x16) 03:38:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0xe80}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1055.503598] binder: 5114:5116 ioctl c0306201 200000c0 returned -14 03:38:27 executing program 3: 03:38:27 executing program 6: [ 1055.551831] binder: 5114:5116 got reply transaction with no transaction stack [ 1055.559337] binder: 5114:5116 transaction failed 29201/-71, size 0-0 line 2759 03:38:27 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002e00)=ANY=[@ANYRES64=r0, @ANYBLOB="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"]) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)) 03:38:27 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x4, 0x800) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x7, {{0xa, 0x4e20, 0x5, @loopback={0x0, 0x1}, 0x3ff}}}, 0x88) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1055.686857] binder: undelivered TRANSACTION_ERROR: 29201 03:38:27 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r1, &(0x7f00009f3000), 0x352, 0x0) read(r1, &(0x7f0000000300)=""/5, 0x5) lseek(r1, 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x40240, 0xfffffffffffffffc) 03:38:27 executing program 3: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x1c) 03:38:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)=']\x00'}, 0x10) connect$rds(r0, &(0x7f0000000240)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x6000, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:27 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0xf0ffff}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x0, {0x0, 0xf0ffff, 0x700}}, 0x14}, 0x1}, 0x0) 03:38:27 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x171}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 1056.386491] binder: 5177:5179 got reply transaction with no transaction stack [ 1056.393945] binder: 5177:5179 transaction failed 29201/-71, size 0-0 line 2759 03:38:28 executing program 3: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 03:38:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x8847000000000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:28 executing program 6: socket$inet6(0xa, 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000005700)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000056c0)={&(0x7f0000000080)=@setlink={0x34, 0x13, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1fffff}, [@IFLA_IFNAME={0x14, 0x4, 'C\x00\x00\x001\x00'}]}, 0x34}, 0x1}, 0x0) [ 1056.438321] binder: 5177:5179 ioctl c0306201 200000c0 returned -14 [ 1056.462491] binder: 5177:5179 got reply transaction with no transaction stack [ 1056.470059] binder: 5177:5179 transaction failed 29201/-71, size 0-0 line 2759 [ 1056.514625] binder: undelivered TRANSACTION_ERROR: 29201 03:38:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x800e0000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x755f489f, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:28 executing program 3: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 03:38:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1056.652158] binder: 5206:5210 got reply transaction with no transaction stack [ 1056.659659] binder: 5206:5210 transaction failed 29201/-71, size 0-0 line 2759 [ 1056.679700] netlink: 'syz-executor6': attribute type 4 has an invalid length. 03:38:28 executing program 3: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) [ 1056.704935] device lo entered promiscuous mode [ 1056.724483] binder: 5206:5210 ioctl c0306201 200000c0 returned -14 [ 1056.727406] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1056.745401] binder: 5206:5210 got reply transaction with no transaction stack 03:38:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x500}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1056.752884] binder: 5206:5210 transaction failed 29201/-71, size 0-0 line 2759 [ 1056.826061] netlink: 'syz-executor6': attribute type 4 has an invalid length. [ 1057.065249] binder: undelivered TRANSACTION_ERROR: 29201 03:38:29 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') ioctl$TCXONC(r1, 0x540a, 0x5) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) read(r1, &(0x7f0000000300)=""/5, 0x5) lseek(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x3123}, &(0x7f0000000180)=0x8) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='\x00', r1}, 0x10) write$P9_RFSYNC(r3, &(0x7f0000000340)={0x7, 0x33, 0x1}, 0x7) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f00000002c0)='io\x00') getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={r2, 0x200, 0x100000001, 0x4, 0xf, 0x7}, &(0x7f0000000200)=0x14) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:38:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x3a8, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:29 executing program 3: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 03:38:29 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x24a}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:29 executing program 6: r0 = socket$inet6(0x10, 0x8000000003, 0x0) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@nl=@kern={0x10}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000300)="550000001e007f5300fe01b2a4a280f20006000000a8430891000000080009000a000c0000dc9b131338d54400009b84136ef75afb83de448daa7227c43ab8221000060cec4fab91d4000000000000000000000000", 0x55}], 0x1, &(0x7f0000001400)}, 0x0) 03:38:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x4305}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:29 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x2, 0x212000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0xb0, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x6, @local={0xfe, 0x80, [], 0xaa}, 0x1}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, @in6={0xa, 0x4e24, 0x1, @loopback={0x0, 0x1}, 0x7fffffff}, @in6={0xa, 0x4e20, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0x200000000}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in={0x2, 0x4e24, @rand_addr=0x100}, @in6={0xa, 0x4e22, 0x4, @empty, 0x4}, @in={0x2, 0x4e24, @multicast2=0xe0000002}]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000340)={0x46, 0x4, 0x6, 0x723f, r1}, &(0x7f0000000380)=0x10) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)="7ceab4ad7c432813afb5dee787eb21687f984b9b88c1cf062437b5f0a87a1f2a990b5e4c221461c129b8faa0bcadeff352b652638724f8c50e30dd1c732c78fb809ee428a9d7132a979ff2096efb2add", 0x50}, {&(0x7f00000003c0)="24f71eb536d5f07f3934ec426d6018a7ff30d475d1b3", 0x16}, {&(0x7f00000004c0)="adb00b32a6ea167f15137b4e88a2e2f7ee07e5a5519a5105140219f2308174b006a2773f5be37c4b341f772a72fd3b43f9cd9f16a69189a7c4e399", 0x3b}], 0x3, &(0x7f0000000540)=[@iv={0xf8, 0x117, 0x2, 0xdd, "950a55c05a8e4808ddb7158a82376a471b1c69fcdba5eaddb11adbc4b00a2a1c18373ffcb6c0bd3ee52aa265b4f3fdc40e9033b17899d855d1299387c5b4a0b0146a2b672b4c7cfec6c5dd3eb0b857ec46126992a47a6bb05618fdedcc8b7813503c22e82cfdd4c9c60a8c314a889eca13a436a9fe4d80905a9e700089ea168ac8a26e35cc20f36a4dafed21775af4d4ba91b69094c500de37681c62d6dc1ddb4eb1f6ebccb829a6a0cafcb4dd373ae3a7ccd0c2d3ede9d096c659729e2035f20d2d2c918771c258ea6a317f6b25d796861f7a76ef63d3952d276747e7"}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x81}], 0x128, 0x10}], 0x1, 0x1) 03:38:29 executing program 1: perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x3e5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x3, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1057.591796] binder: 5249:5262 got reply transaction with no transaction stack [ 1057.599386] binder: 5249:5262 transaction failed 29201/-71, size 0-0 line 2759 03:38:29 executing program 3: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)) 03:38:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1057.646633] binder: 5249:5262 ioctl c0306201 200000c0 returned -14 [ 1057.656765] netlink: 49 bytes leftover after parsing attributes in process `syz-executor6'. [ 1057.665505] netlink: 49 bytes leftover after parsing attributes in process `syz-executor6'. [ 1057.684952] binder: 5249:5262 got reply transaction with no transaction stack 03:38:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x201, 0x0) r2 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r2, 0x0) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000100)="98", 0x1}], 0x1) [ 1057.692630] binder: 5249:5262 transaction failed 29201/-71, size 0-0 line 2759 [ 1057.702563] binder: undelivered TRANSACTION_ERROR: 29201 03:38:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x755f4899, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:29 executing program 3: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)) 03:38:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:29 executing program 3: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)) [ 1057.858666] binder: 5281:5283 got reply transaction with no transaction stack [ 1057.866148] binder: 5281:5283 transaction failed 29201/-71, size 0-0 line 2759 [ 1057.895262] binder: 5281:5283 ioctl c0306201 200000c0 returned -14 [ 1057.916632] binder: 5281:5283 got reply transaction with no transaction stack [ 1057.924079] binder: 5281:5283 transaction failed 29201/-71, size 0-0 line 2759 03:38:29 executing program 6: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)=0x80000001) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x20000800, 0x400, 0x10000, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200000, 0xa) open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) [ 1057.966704] binder: undelivered TRANSACTION_ERROR: 29201 03:38:30 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r1, &(0x7f00009f3000), 0x352, 0x0) read(r1, &(0x7f0000000300)=""/5, 0x5) fcntl$addseals(r1, 0x409, 0x1) sendmsg$netlink(r1, &(0x7f0000000380)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfc, 0x20000000}, 0xc, &(0x7f0000000340)=[{&(0x7f0000000440)={0x2d0, 0x21, 0x0, 0x70bd27, 0x25dfdbfe, "", [@typed={0x8, 0x92, @u32=0x8}, @typed={0x4, 0x4d}, @nested={0x2b4, 0x47, [@generic="658955a4d24c201bf4751eed0910450a864711aee671298cfce45489297986dbddc2408f9be2c510fb88b9a1d06375ff5323069c45c1672719136b8371cb24b331d7dc", @generic="c0b143312d3697b918b0990f0e8aa2d21ddf8e042ceb228f0dc41860b8fd99366fa999fc0138568d9563dcecd5b665fc6f884ec93f53fb98278da2880a16a6429371f7cb041b5fe5011f6b487a1f91a2339fdfd975981f249d2e76aba17c52ee2398f06828c087f16851472f0950f0f67d55ac8d1f0625b9abf7786654c62ea27fe98c48e92eccbccb78ad8a412809a5ee0d46a9415ed86130e8d2af3b38272ea01c3fe83b6a731755efa46d3017c3997b970df6eaa3e38b32846e4ecdcb3c7131328cc402ea3d308f2ffca4f7085befc9acbfbe", @generic="1103b8ab7bf476b3675be283b82b16066945abe1c195ff855f9b186fa4f12068df9f736eb289f4a635f4605a9ac702e2fd5361c6028a43435b7d832c26cc53a219e333024c271ef03254f6c65765fc0201de1e0667a245a6bb83e740080cb39e5b8825335a340897c0355de53ebcf15cdb1702caa4714c8dc7e1329453842172158b93f623ee3f1e5acbb730ad0a98d88d9149eae06ba6be4ab1e7d76b0170b43a783ea304d2721b170d523d2cb83b00e1c8c9890b263f24718817595233295ae5b1f3ef95acb86ea227", @typed={0x8, 0x2b, @u32}, @generic="fd2992d6c417ae4e6bd90e09c42f3d67e870a0cd0668ec018bba3d99d00bd0734e30c6807d643fd939f3d0ffa6efed27eae7be3e44907389b13d5f736912b3f27e3e8aa048f130a68e7e8e78a9e47ec458d050a169d0124a8006cfabeb9ec7d96eab3a799f47a040b8ea1ca75c8f637772f94b13d564e8236a7b14fa0d9019be50db1ae08f7688dcbce047f73e286bcc7e6ff9aadd17135adb493af679caffe74e7050c12dbc808e48daa68133214e792563c18a1bda8bc525a204ae91123b3a59bb5c982d"]}]}, 0x2d0}, {&(0x7f0000000180)={0x158, 0x16, 0x804, 0x70bd27, 0x25dfdbfb, "", [@generic="6f6b519322cd82b7e27fe35e6e920f5b051d3b69b53d5aa14206dc87be3d3cf857becd6585dde592", @nested={0x120, 0x81, [@generic="e25ffabbac9213758fa7f2bf13e479f10f03c8728aba009719f54d392fb786c335f9084bdefa6d94281c17a5c05c5b6079989b98b2cf31677af41460461f4bfbaea63c425f16d24ebbf384f40297b8cfd39be85dcffa6533ae24b7cfd6d03c5de125024c59103630cb34dde768a1cfe56f8bae75ebfc42090731e7f8bb34bd7d75477c9dc3833c23611a13bcb686c98dd22e9cafbf6042e93753", @generic="e1554a64eac58f9fd1a54b30152c34bd", @generic="ca239ec3663201b121589a2e060459114ce884c160153553f08c42b38570d2ae5f8152f8a4e78499d86ddb8eeb2b390fc3e0b09464e976d2677fe1a89aeefb412aa9d398255872b3e61f97cacd42429e390c4427977a6b2067c207982ebda39a6c557a11c8ffcf402dcba7d488dd6e8518"]}]}, 0x158}], 0x2, 0x0, 0x0, 0x4000000}, 0x558b27ca8ecc7423) socket$vsock_dgram(0x28, 0x2, 0x0) lseek(r1, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:38:30 executing program 3: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x0, r0}, &(0x7f0000000080)) 03:38:30 executing program 6: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)=0x80000001) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x20000800, 0x400, 0x10000, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200000, 0xa) open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) 03:38:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x88480000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x3d2, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) r0 = socket$inet(0x2, 0x2, 0x10001) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200000, 0x0) mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x10) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140), 0x10) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f0000000240)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:30 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x1000, 0x40080) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, r0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0xfffffffd) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000300)={0x303, 0x33}, 0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0x7, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0xffffffffffffffff}}, 0x60, 0x7, 0x1, "6c81b5e37f4908a7ca705980d3249cc3aa8bb2ee52c3fb077d4e758bd629c54435fda2d6e03b46716e6c1d2b3e5d8bb34c772bfd40ddfc65fe7caa772688b8cd5248b666baaf8de20be765ceb5b7c4b4"}, 0xd8) mkdir(&(0x7f0000000180)='./file0\x00', 0x17) 03:38:30 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x222}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:30 executing program 3: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x0, r0}, &(0x7f0000000080)) [ 1058.627526] binder: 5320:5324 got reply transaction with no transaction stack [ 1058.635183] binder: 5320:5324 transaction failed 29201/-71, size 0-0 line 2759 03:38:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:30 executing program 6: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)=0x80000001) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x20000800, 0x400, 0x10000, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200000, 0xa) open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) [ 1058.685563] binder: 5320:5324 ioctl c0306201 200000c0 returned -14 [ 1058.718738] binder: 5320:5324 got reply transaction with no transaction stack [ 1058.726308] binder: 5320:5324 transaction failed 29201/-71, size 0-0 line 2759 03:38:30 executing program 3: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x0, r0}, &(0x7f0000000080)) 03:38:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x4, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1058.780825] binder: undelivered TRANSACTION_ERROR: 29201 03:38:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x8906}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:30 executing program 3: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)) 03:38:30 executing program 6: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)=0x80000001) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x20000800, 0x400, 0x10000, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200000, 0xa) [ 1058.876268] binder: 5347:5349 got reply transaction with no transaction stack [ 1058.883732] binder: 5347:5349 transaction failed 29201/-71, size 0-0 line 2759 [ 1058.932879] binder: 5347:5349 ioctl c0306201 200000c0 returned -14 [ 1058.954960] binder: 5347:5349 got reply transaction with no transaction stack [ 1058.962478] binder: 5347:5349 transaction failed 29201/-71, size 0-0 line 2759 [ 1058.976360] binder: undelivered TRANSACTION_ERROR: 29201 03:38:31 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() syz_fuse_mount(&(0x7f0000000140)='./file0\x00', 0xe000, r1, r2, 0x4, 0x840040) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r3, &(0x7f00009f3000), 0x352, 0x0) read(r3, &(0x7f0000000300)=""/5, 0x5) lseek(r3, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:38:31 executing program 3: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)) 03:38:31 executing program 6: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)=0x80000001) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x20000800, 0x400, 0x10000, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) 03:38:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x8847}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x25, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000040)=0x68) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:31 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0xc0045103, &(0x7f0000a07fff)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x4003, 0xfffffffffffffffc) preadv(r0, &(0x7f0000001500)=[{&(0x7f0000000200)=""/213, 0xd5}, {&(0x7f0000000140)=""/33, 0x21}, {&(0x7f0000000300)=""/4, 0x4}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000340)=""/94, 0x5e}, {&(0x7f00000003c0)=""/57, 0x39}, {&(0x7f0000001440)=""/185, 0xb9}], 0x7, 0x0) 03:38:31 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x2ca}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:31 executing program 3: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)) [ 1059.747713] binder: 5385:5390 got reply transaction with no transaction stack [ 1059.755216] binder: 5385:5390 transaction failed 29201/-71, size 0-0 line 2759 [ 1059.768216] binder: 5385:5390 ioctl c0306201 200000c0 returned -14 03:38:31 executing program 6: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)=0x80000001) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x20000800, 0x400, 0x10000, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) 03:38:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x800e}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x3be, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1059.807129] binder: 5385:5390 got reply transaction with no transaction stack [ 1059.814579] binder: 5385:5390 transaction failed 29201/-71, size 0-0 line 2759 [ 1059.830170] binder: undelivered TRANSACTION_ERROR: 29201 03:38:31 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x2, 0x212000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0xb0, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x6, @local={0xfe, 0x80, [], 0xaa}, 0x1}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, @in6={0xa, 0x4e24, 0x1, @loopback={0x0, 0x1}, 0x7fffffff}, @in6={0xa, 0x4e20, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0x200000000}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in={0x2, 0x4e24, @rand_addr=0x100}, @in6={0xa, 0x4e22, 0x4, @empty, 0x4}, @in={0x2, 0x4e24, @multicast2=0xe0000002}]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000340)={0x46, 0x4, 0x6, 0x723f, r1}, &(0x7f0000000380)=0x10) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)="7ceab4ad7c432813afb5dee787eb21687f984b9b88c1cf062437b5f0a87a1f2a990b5e4c221461c129b8faa0bcadeff352b652638724f8c50e30dd1c732c78fb809ee428a9d7132a979ff2096efb2add", 0x50}, {&(0x7f00000003c0)="24f71eb536d5f07f3934ec426d6018a7ff30d475d1b3", 0x16}, {&(0x7f00000004c0)="adb00b32a6ea167f15137b4e88a2e2f7ee07e5a5519a5105140219f2308174b006a2773f5be37c4b341f772a72fd3b43f9cd9f16a69189a7c4e399", 0x3b}], 0x3, &(0x7f0000000540)=[@iv={0xf8, 0x117, 0x2, 0xdd, "950a55c05a8e4808ddb7158a82376a471b1c69fcdba5eaddb11adbc4b00a2a1c18373ffcb6c0bd3ee52aa265b4f3fdc40e9033b17899d855d1299387c5b4a0b0146a2b672b4c7cfec6c5dd3eb0b857ec46126992a47a6bb05618fdedcc8b7813503c22e82cfdd4c9c60a8c314a889eca13a436a9fe4d80905a9e700089ea168ac8a26e35cc20f36a4dafed21775af4d4ba91b69094c500de37681c62d6dc1ddb4eb1f6ebccb829a6a0cafcb4dd373ae3a7ccd0c2d3ede9d096c659729e2035f20d2d2c918771c258ea6a317f6b25d796861f7a76ef63d3952d276747e7"}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x81}], 0x128, 0x10}], 0x1, 0x1) 03:38:31 executing program 6: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)=0x80000001) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x20000800, 0x400, 0x10000, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) [ 1059.946962] binder: 5405:5408 got reply transaction with no transaction stack [ 1059.954535] binder: 5405:5408 transaction failed 29201/-71, size 0-0 line 2759 [ 1059.968716] binder: 5405:5408 ioctl c0306201 200000c0 returned -14 [ 1059.989371] binder: 5405:5408 got reply transaction with no transaction stack 03:38:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x4800000000000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1300, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1059.996942] binder: 5405:5408 transaction failed 29201/-71, size 0-0 line 2759 [ 1060.024661] binder: undelivered TRANSACTION_ERROR: 29201 [ 1060.117272] binder: 5423:5424 got reply transaction with no transaction stack [ 1060.125058] binder: 5423:5424 transaction failed 29201/-71, size 0-0 line 2759 [ 1060.146841] binder: 5423:5424 ioctl c0306201 200000c0 returned -14 [ 1060.156731] binder: 5423:5424 got reply transaction with no transaction stack [ 1060.164294] binder: 5423:5424 transaction failed 29201/-71, size 0-0 line 2759 [ 1060.176484] binder: undelivered TRANSACTION_ERROR: 29201 03:38:32 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x4) execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)=[&(0x7f0000000180)='eth1\'^^\x00', &(0x7f00000001c0)='io\x00', &(0x7f0000000200)='trustedvboxnet1proc\\em0mime_type}#vboxnet1em0-^\x00', &(0x7f0000000240)='io\x00', &(0x7f0000000280)='eth0)posix_acl_accessem1\x00', &(0x7f00000002c0)='#)),\x00', &(0x7f0000000340)='io\x00', &(0x7f0000000380)='em1..#\x00', &(0x7f00000003c0)=']&$eth1(*em1^systemvboxnet0em0}\x00'], &(0x7f00000005c0)=[&(0x7f00000004c0)='io\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='selfmd5sum[vmnet1\x00', &(0x7f0000000580)='io\x00']) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r1, &(0x7f00009f3000), 0x352, 0x0) read(r1, &(0x7f0000000300)=""/5, 0x5) lseek(r1, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:38:32 executing program 6: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)=0x80000001) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x20000800, 0x400, 0x10000, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) 03:38:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x800e000000000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x2, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:32 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000140), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:32 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x2a2}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000300)={0x1d000, 0x108000}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x3}, 0x10) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000200)=""/243) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1060.787787] binder: 5442:5443 got reply transaction with no transaction stack [ 1060.795265] binder: 5442:5443 transaction failed 29201/-71, size 0-0 line 2759 03:38:32 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x2, 0x212000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0xb0, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x6, @local={0xfe, 0x80, [], 0xaa}, 0x1}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, @in6={0xa, 0x4e24, 0x1, @loopback={0x0, 0x1}, 0x7fffffff}, @in6={0xa, 0x4e20, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0x200000000}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in={0x2, 0x4e24, @rand_addr=0x100}, @in6={0xa, 0x4e22, 0x4, @empty, 0x4}, @in={0x2, 0x4e24, @multicast2=0xe0000002}]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000340)={0x46, 0x4, 0x6, 0x723f, r1}, &(0x7f0000000380)=0x10) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)="7ceab4ad7c432813afb5dee787eb21687f984b9b88c1cf062437b5f0a87a1f2a990b5e4c221461c129b8faa0bcadeff352b652638724f8c50e30dd1c732c78fb809ee428a9d7132a979ff2096efb2add", 0x50}, {&(0x7f00000003c0)="24f71eb536d5f07f3934ec426d6018a7ff30d475d1b3", 0x16}, {&(0x7f00000004c0)="adb00b32a6ea167f15137b4e88a2e2f7ee07e5a5519a5105140219f2308174b006a2773f5be37c4b341f772a72fd3b43f9cd9f16a69189a7c4e399", 0x3b}], 0x3, &(0x7f0000000540)=[@iv={0xf8, 0x117, 0x2, 0xdd, "950a55c05a8e4808ddb7158a82376a471b1c69fcdba5eaddb11adbc4b00a2a1c18373ffcb6c0bd3ee52aa265b4f3fdc40e9033b17899d855d1299387c5b4a0b0146a2b672b4c7cfec6c5dd3eb0b857ec46126992a47a6bb05618fdedcc8b7813503c22e82cfdd4c9c60a8c314a889eca13a436a9fe4d80905a9e700089ea168ac8a26e35cc20f36a4dafed21775af4d4ba91b69094c500de37681c62d6dc1ddb4eb1f6ebccb829a6a0cafcb4dd373ae3a7ccd0c2d3ede9d096c659729e2035f20d2d2c918771c258ea6a317f6b25d796861f7a76ef63d3952d276747e7"}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x81}], 0x128, 0x10}], 0x1, 0x1) 03:38:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x8906000000000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1060.864258] binder: 5442:5443 ioctl c0306201 200000c0 returned -14 [ 1060.888909] binder: 5442:5443 got reply transaction with no transaction stack [ 1060.896392] binder: 5442:5443 transaction failed 29201/-71, size 0-0 line 2759 03:38:32 executing program 6: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)=0x80000001) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x20000800, 0x400, 0x10000, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) [ 1060.911639] binder: undelivered TRANSACTION_ERROR: 29201 03:38:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x46, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1061.016241] binder: 5472:5473 got reply transaction with no transaction stack [ 1061.023780] binder: 5472:5473 transaction failed 29201/-71, size 0-0 line 2759 [ 1061.051879] binder: 5472:5473 ioctl c0306201 200000c0 returned -14 03:38:32 executing program 6: fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x20000800, 0x400, 0x10000, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) 03:38:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x4305000000000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1061.067295] binder: 5472:5473 got reply transaction with no transaction stack [ 1061.074846] binder: 5472:5473 transaction failed 29201/-71, size 0-0 line 2759 [ 1061.086139] binder: undelivered TRANSACTION_ERROR: 29201 03:38:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000600, &(0x7f0000000280)='\b'}) 03:38:32 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x20000800, 0x400, 0x10000, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) 03:38:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0xd00}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1061.194748] binder: 5484:5485 got reply transaction with no transaction stack [ 1061.202311] binder: 5484:5485 transaction failed 29201/-71, size 0-0 line 2759 [ 1061.216788] binder: 5484:5485 ioctl c0306201 200000c0 returned -14 [ 1061.230893] binder: 5484:5485 got reply transaction with no transaction stack [ 1061.238473] binder: 5484:5485 transaction failed 29201/-71, size 0-0 line 2759 [ 1061.276472] binder: undelivered TRANSACTION_ERROR: 29201 03:38:33 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000140)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r1, &(0x7f00009f3000), 0x352, 0x0) read(r1, &(0x7f0000000300)=""/5, 0x5) lseek(r1, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:38:33 executing program 6: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x20000800, 0x400, 0x10000, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) 03:38:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c002000, &(0x7f0000000280)='\b'}) 03:38:33 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x18d}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x806}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x8) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:33 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) 03:38:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025cc83d6d345f8f762070") perf_event_open$cgroup(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000180), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/34) [ 1061.965157] binder: 5513:5516 got reply transaction with no transaction stack [ 1061.972599] binder: 5513:5516 transaction failed 29201/-71, size 0-0 line 2759 03:38:33 executing program 6: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x20000800, 0x400, 0x10000, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) [ 1062.014023] binder: 5513:5516 ioctl c0306201 200000c0 returned -14 [ 1062.036381] binder: 5513:5516 got reply transaction with no transaction stack [ 1062.043919] binder: 5513:5516 transaction failed 29201/-71, size 0-0 line 2759 03:38:33 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x80100, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) r1 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000040)=""/34) creat(&(0x7f0000000000)='./file0\x00', 0x1) bind$bt_sco(r0, &(0x7f0000000140)={0x1f, {0x5, 0x9, 0x3, 0x8001, 0xd2c, 0x3}}, 0x8) 03:38:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x9040, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x7f0, 0x170, 0x378, 0x5b8, 0x0, 0x260, 0x720, 0x720, 0x720, 0x720, 0x720, 0x6, &(0x7f0000000280), {[{{@uncond, 0x0, 0x128, 0x170, 0x0, {}, [@common=@unspec=@mark={0x30, 'mark\x00', 0x1, {0xffff, 0x6, 0x1}}, @common=@unspec=@realm={0x30, 'realm\x00', 0x0, {0x9, 0x6, 0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local={0xac, 0x14, 0x14, 0xaa}, @ipv4=@dev={0xac, 0x14, 0x14, 0x1e}, 0x24, 0x1d, 0x80000001}}}, {{@ipv6={@dev={0xfe, 0x80, [], 0x1c}, @loopback={0x0, 0x1}, [0xffffffff, 0x0, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], 'ip6gre0\x00', 'bridge0\x00', {0xff}, {}, 0x1d, 0x1, 0x2, 0x38}, 0x0, 0xc8, 0xf0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xfffffffffffffc01}}}, {{@ipv6={@dev={0xfe, 0x80, [], 0x12}, @local={0xfe, 0x80, [], 0xaa}, [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffffff, 0xffffffff, 0xff000000], 'ifb0\x00', 'team_slave_1\x00', {0xff}, {}, 0x33, 0xfb6d, 0x1, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x3}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x41, 0x9}}}, {{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@recent1={0x108, 'recent\x00', 0x0, {0x8000, 0x2, 0x2, 0x0, 'syz1\x00', 0xfffffffffffffffb, [0xffffffff, 0xffffffff, 0x0, 0xff000000]}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x3}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @ipv6=@mcast2={0xff, 0x2, [], 0x1}, 0x1e, 0x1b, 0x3}}}, {{@ipv6={@dev={0xfe, 0x80, [], 0x16}, @dev={0xfe, 0x80, [], 0x1e}, [0xff000000, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffffff, 0xffffffff, 0xff0000ff], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {}, 0x1d, 0x149c0000, 0x5}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@srh={0x30, 'srh\x00', 0x0, {0x3b, 0x1, 0x6, 0x5, 0x53a, 0x800, 0x1}}, @common=@eui64={0x28, 'eui64\x00'}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback=0x7f000001, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}, 0x10, 0x10, 0x80000000}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x850) 03:38:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x8848}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000060, &(0x7f0000000280)='\b'}) [ 1062.079758] binder: undelivered TRANSACTION_ERROR: 29201 03:38:33 executing program 6: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x20000800, 0x400, 0x10000, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) 03:38:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000240)={0x7fff, 0x7f, 0xfb9, {}, 0x0, 0x1a55bfb6}) mknod(&(0x7f0000000300)='./file0\x00', 0x1040, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x400, 0x4) open$dir(&(0x7f00000002c0)='./file0\x00', 0x27f, 0x148) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0xa3) [ 1062.214500] binder: 5548:5551 got reply transaction with no transaction stack [ 1062.221981] binder: 5548:5551 transaction failed 29201/-71, size 0-0 line 2759 [ 1062.248639] binder: 5548:5551 ioctl c0306201 200000c0 returned -14 03:38:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x3580}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1062.272929] binder: 5548:5551 got reply transaction with no transaction stack [ 1062.280491] binder: 5548:5551 transaction failed 29201/-71, size 0-0 line 2759 [ 1062.352633] binder: undelivered TRANSACTION_ERROR: 29201 03:38:34 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r1, &(0x7f00009f3000), 0x352, 0x0) read(r1, &(0x7f0000000300)=""/5, 0x5) lseek(r1, 0x0, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000140)=0x100) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:38:34 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = msgget$private(0x0, 0x14c) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/177) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r3, &(0x7f00009f3000), 0x352, 0x0) read(r3, &(0x7f0000000300)=""/5, 0x5) lseek(r3, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:38:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x30000000, &(0x7f0000000280)='\b'}) 03:38:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x80350000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:34 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x20000800, 0x400, 0x10000, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) 03:38:34 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x26b}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:34 executing program 4: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x25) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x1000000020000) open$dir(&(0x7f00000001c0)='./file0\x00', 0x10040, 0x2) [ 1062.988090] binder: 5586:5587 got reply transaction with no transaction stack [ 1062.995687] binder: 5586:5587 transaction failed 29201/-71, size 0-0 line 2759 03:38:34 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x20000800, 0x400, 0x10000, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) [ 1063.046754] binder: 5586:5587 ioctl c0306201 200000c0 returned -14 [ 1063.055676] binder: 5586:5587 got reply transaction with no transaction stack [ 1063.063272] binder: 5586:5587 transaction failed 29201/-71, size 0-0 line 2759 03:38:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x88caffff}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1063.102352] binder: undelivered TRANSACTION_ERROR: 29201 03:38:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000074, &(0x7f0000000280)='\b'}) 03:38:34 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x20000800, 0x400, 0x10000, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) 03:38:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x8100}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1063.194404] binder: 5606:5607 got reply transaction with no transaction stack [ 1063.201890] binder: 5606:5607 transaction failed 29201/-71, size 0-0 line 2759 [ 1063.233395] binder: 5606:5607 ioctl c0306201 200000c0 returned -14 03:38:34 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x20000800, 0x400, 0x10000, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) 03:38:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0xffffffffffffff14, 0x3e5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000000000, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000068, &(0x7f0000000280)='\b'}) [ 1063.252672] binder: 5606:5607 got reply transaction with no transaction stack [ 1063.260235] binder: 5606:5607 transaction failed 29201/-71, size 0-0 line 2759 [ 1063.291368] binder: undelivered TRANSACTION_ERROR: 29201 03:38:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x608}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1063.357464] binder: 5621:5622 got reply transaction with no transaction stack [ 1063.364929] binder: 5621:5622 transaction failed 29201/-71, size 0-0 line 2759 [ 1063.414420] binder: 5621:5622 ioctl c0306201 200000c0 returned -14 [ 1063.422735] binder: 5621:5622 got reply transaction with no transaction stack [ 1063.430242] binder: 5621:5622 transaction failed 29201/-71, size 0-0 line 2759 [ 1063.439233] binder: undelivered TRANSACTION_ERROR: 29201 03:38:35 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x40000, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000100)={0x3, 0x1}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000180)={0x3, 0x70, 0x43a, 0x100000001, 0x2, 0xfffffffffffffffa, 0x0, 0xa6, 0x200, 0x8, 0x101, 0xf5, 0x0, 0x1, 0x4, 0x9, 0x9, 0x80, 0x10001, 0x4, 0x10001, 0x9, 0x800, 0x0, 0xfffffffffffffffa, 0x4, 0x9, 0xe4, 0x0, 0x5, 0x3, 0x5, 0x885, 0x5, 0x4, 0x0, 0x200, 0x3, 0x0, 0x3f, 0x2, @perf_config_ext={0x1, 0x3}, 0x1000, 0x7, 0x101, 0x2, 0x7a, 0x5, 0x6}) mknod(&(0x7f0000000280)='./file1\x00', 0x80, 0x407) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r2, &(0x7f00009f3000), 0x352, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x9f, @mcast1={0xff, 0x1, [], 0x1}, 0x3}, 0x1c) read(r2, &(0x7f0000000300)=""/5, 0x5) lseek(r2, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000240)={0x303, 0x33}, 0x4) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:38:35 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x20000800, 0x400, 0x10000, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) 03:38:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c006800, &(0x7f0000000280)='\b'}) 03:38:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:35 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = msgget$private(0x0, 0x14c) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/177) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r3, &(0x7f00009f3000), 0x352, 0x0) read(r3, &(0x7f0000000300)=""/5, 0x5) lseek(r3, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:38:35 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x15d}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:35 executing program 4: syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x8001, 0x2000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x0, 0x101000) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000240)={'bpq0\x00', {0x2, 0x4e20}}) [ 1064.078625] binder: 5649:5656 got reply transaction with no transaction stack [ 1064.086140] binder: 5649:5656 transaction failed 29201/-71, size 0-0 line 2759 [ 1064.141395] binder: 5649:5656 ioctl c0306201 200000c0 returned -14 03:38:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x88a8ffff00000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:35 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x0, 0x20000800, 0x400, 0x10000, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) [ 1064.186953] binder: 5649:5656 got reply transaction with no transaction stack [ 1064.194479] binder: 5649:5656 transaction failed 29201/-71, size 0-0 line 2759 03:38:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) select(0x40, &(0x7f0000000040)={0xec, 0x80, 0xfffffffffffffffe, 0x3, 0x6, 0x80, 0x4, 0xeb1f}, &(0x7f0000000140)={0x456, 0x7, 0x8, 0x5, 0x4, 0x7a64, 0x0, 0x97de}, &(0x7f0000000200)={0x1, 0x7fffffff, 0x7, 0x5, 0x7ff, 0x1f, 0x7, 0x5}, &(0x7f0000000280)={r0, r1/1000+30000}) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x7, 0xb0000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000300), 0x4) 03:38:35 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x8132, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r1, &(0x7f00009f3000), 0x352, 0x0) read(r1, &(0x7f0000000300)=""/5, 0x5) lseek(r1, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) [ 1064.259849] binder: undelivered TRANSACTION_ERROR: 29201 03:38:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c007400, &(0x7f0000000280)='\b'}) 03:38:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x8848000000000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:35 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x0, 0x20000800, 0x400, 0x10000, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) 03:38:35 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x0, 0x20000800, 0x400, 0x10000, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) [ 1064.411775] binder: 5691:5693 got reply transaction with no transaction stack [ 1064.419397] binder: 5691:5693 transaction failed 29201/-71, size 0-0 line 2759 [ 1064.440376] binder: 5691:5693 ioctl c0306201 200000c0 returned -14 [ 1064.449529] binder: 5691:5693 got reply transaction with no transaction stack [ 1064.457123] binder: 5691:5693 transaction failed 29201/-71, size 0-0 line 2759 03:38:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1064.484239] binder: undelivered TRANSACTION_ERROR: 29201 03:38:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x20000000, &(0x7f0000000280)='\b'}) 03:38:36 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1, 0x4}, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$read(0xb, r1, &(0x7f00000001c0)=""/164, 0xa4) clone(0x200, &(0x7f0000000280), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000002c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000280)=[{0x8, 0x20}, {0x0, 0x3}, {0x0, 0x8000}], 0x3) socket$nl_crypto(0x10, 0x3, 0x15) pread64(r2, &(0x7f0000000280), 0x16, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000002c0), &(0x7f0000000340)=0x4) read(r2, &(0x7f0000000300)=""/5, 0x5) lseek(r2, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:38:36 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x400, 0x10000, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) 03:38:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1064.602335] binder: 5710:5711 got reply transaction with no transaction stack [ 1064.609889] binder: 5710:5711 transaction failed 29201/-71, size 0-0 line 2759 [ 1064.621835] binder: 5710:5711 ioctl c0306201 200000c0 returned -14 [ 1064.640742] binder: 5710:5711 got reply transaction with no transaction stack [ 1064.648291] binder: 5710:5711 transaction failed 29201/-71, size 0-0 line 2759 [ 1064.692064] binder: undelivered TRANSACTION_ERROR: 29201 03:38:36 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = msgget$private(0x0, 0x14c) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/177) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r3, &(0x7f00009f3000), 0x352, 0x0) read(r3, &(0x7f0000000300)=""/5, 0x5) lseek(r3, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:38:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x88470000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:36 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x400, 0x10000, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) 03:38:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x2a000000, &(0x7f0000000280)='\b'}) 03:38:36 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x1b7}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 1065.078457] binder: 5736:5741 got reply transaction with no transaction stack [ 1065.085946] binder: 5736:5741 transaction failed 29201/-71, size 0-0 line 2759 [ 1065.104424] binder: 5736:5741 ioctl c0306201 200000c0 returned -14 [ 1065.117590] binder: 5736:5741 got reply transaction with no transaction stack [ 1065.125115] binder: 5736:5741 transaction failed 29201/-71, size 0-0 line 2759 03:38:36 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x80000, 0x4, &(0x7f0000000440)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000480)={0x80000000, 0x4, 0x101, 0x0, 0x0}, &(0x7f00000004c0)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000500)={r1, 0x0, 0x8}, 0x8) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:36 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000140)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:36 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) 03:38:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0xffffca88}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1065.157690] binder: undelivered TRANSACTION_ERROR: 29201 03:38:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x2d000000, &(0x7f0000000280)='\b'}) 03:38:36 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x0, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) 03:38:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x500000000000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1065.319926] binder: 5766:5767 got reply transaction with no transaction stack [ 1065.327435] binder: 5766:5767 transaction failed 29201/-71, size 0-0 line 2759 [ 1065.341489] binder: 5766:5767 ioctl c0306201 200000c0 returned -14 [ 1065.352357] binder: 5766:5767 got reply transaction with no transaction stack [ 1065.359904] binder: 5766:5767 transaction failed 29201/-71, size 0-0 line 2759 03:38:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000006, &(0x7f0000000280)='\b'}) [ 1065.406624] binder: undelivered TRANSACTION_ERROR: 29201 [ 1065.471415] binder: 5780:5782 got reply transaction with no transaction stack [ 1065.478989] binder: 5780:5782 transaction failed 29201/-71, size 0-0 line 2759 [ 1065.487162] binder: 5780:5782 ioctl c0306201 200000c0 returned -14 [ 1065.494669] binder: 5780:5782 got reply transaction with no transaction stack [ 1065.502203] binder: 5780:5782 transaction failed 29201/-71, size 0-0 line 2759 [ 1065.510512] binder: undelivered TRANSACTION_ERROR: 29201 03:38:37 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x0, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) 03:38:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x8100000000000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:37 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000340)='/dev/admmidi#\x00', 0x93, 0x2000) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000380)=0x200, 0x4) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') keyctl$set_reqkey_keyring(0xe, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000480)={r2}) ioctl$sock_SIOCGIFCONF(r2, 0x8910, &(0x7f00000002c0)=@buf={0x5e, &(0x7f0000000240)="4e1a54182d2068b5e2157574abe85943a2670cfe49024cbac98fb1c296534b1124fa6eaf9f1a0d4cbd72cd3c164be3be7f52d2bce908a1cf63f15343385d723a2a74ed1d59f456ac4cdca5542715dac934196a086bdc9e93c05bd7d6116f"}) pread64(r2, &(0x7f0000000140)=""/222, 0xde, 0x0) pread64(r2, &(0x7f00009f3000), 0x352, 0x0) r3 = semget(0x3, 0x1, 0x202) semctl$SEM_INFO(r3, 0x7, 0x13, &(0x7f0000000440)=""/55) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f00000003c0)) read(r2, &(0x7f0000000300)=""/5, 0x5) lseek(r2, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:38:37 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = msgget$private(0x0, 0x14c) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/177) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r3, &(0x7f00009f3000), 0x352, 0x0) read(r3, &(0x7f0000000300)=""/5, 0x5) lseek(r3, 0x0, 0x0) 03:38:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c00007a, &(0x7f0000000280)='\b'}) 03:38:37 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x0, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) 03:38:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x88640000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:37 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x302}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:37 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000200)='./file0\x00', 0x103e, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x4000, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000140)) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000280)=0x1a, 0x4) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1066.098677] binder: 5815:5817 got reply transaction with no transaction stack [ 1066.106464] binder: 5815:5817 transaction failed 29201/-71, size 0-0 line 2759 [ 1066.128780] binder: 5815:5817 ioctl c0306201 200000c0 returned -14 03:38:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x40030000000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1066.148444] binder: 5815:5817 got reply transaction with no transaction stack [ 1066.156092] binder: 5815:5817 transaction failed 29201/-71, size 0-0 line 2759 03:38:37 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) 03:38:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000300, &(0x7f0000000280)='\b'}) [ 1066.203082] binder: undelivered TRANSACTION_ERROR: 29201 03:38:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x400300}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:37 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) [ 1066.296372] binder: 5841:5842 got reply transaction with no transaction stack [ 1066.303853] binder: 5841:5842 transaction failed 29201/-71, size 0-0 line 2759 [ 1066.333977] binder: 5841:5842 ioctl c0306201 200000c0 returned -14 [ 1066.343319] binder: 5841:5842 got reply transaction with no transaction stack [ 1066.350934] binder: 5841:5842 transaction failed 29201/-71, size 0-0 line 2759 [ 1066.361942] binder: undelivered TRANSACTION_ERROR: 29201 03:38:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000500, &(0x7f0000000280)='\b'}) 03:38:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x689}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:37 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x100000001, 0x0, 0x3, 0x400}, 0x10) [ 1066.455673] binder: 5854:5856 got reply transaction with no transaction stack [ 1066.463274] binder: 5854:5856 transaction failed 29201/-71, size 0-0 line 2759 [ 1066.489827] binder: 5854:5856 ioctl c0306201 200000c0 returned -14 [ 1066.500497] binder: 5854:5856 got reply transaction with no transaction stack [ 1066.508016] binder: 5854:5856 transaction failed 29201/-71, size 0-0 line 2759 [ 1066.544726] binder: undelivered TRANSACTION_ERROR: 29201 03:38:38 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000380)={@mcast2, 0x0}, &(0x7f00000003c0)=0x14) recvfrom$packet(r1, &(0x7f0000000140)=""/94, 0x5e, 0x40010022, &(0x7f0000000440)={0x11, 0x16, r2, 0x1, 0x1, 0x6}, 0x14) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) read(r1, &(0x7f0000000300)=""/5, 0x5) lseek(r1, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:38:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x75000000, &(0x7f0000000280)='\b'}) 03:38:38 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x100000001, 0x0, 0x3, 0x400}, 0x10) 03:38:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0xffffa888}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x330, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x44}, 0x0, 0x2, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:38 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = msgget$private(0x0, 0x14c) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/177) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r3, &(0x7f00009f3000), 0x352, 0x0) read(r3, &(0x7f0000000300)=""/5, 0x5) 03:38:38 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x3f9}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 1067.253935] binder: 5888:5889 got reply transaction with no transaction stack [ 1067.261403] binder: 5888:5889 transaction failed 29201/-71, size 0-0 line 2759 [ 1067.276312] binder: 5888:5889 ioctl c0306201 200000c0 returned -14 [ 1067.290750] binder: 5888:5889 got reply transaction with no transaction stack [ 1067.298333] binder: 5888:5889 transaction failed 29201/-71, size 0-0 line 2759 03:38:38 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x100000001, 0x0, 0x3, 0x400}, 0x10) 03:38:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0xd00000000000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x4c000000, &(0x7f0000000280)='\b'}) [ 1067.332415] binder: undelivered TRANSACTION_ERROR: 29201 03:38:38 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x400}, 0x10) 03:38:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x86ddffff00000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1067.438412] binder: 5914:5915 got reply transaction with no transaction stack [ 1067.445937] binder: 5914:5915 transaction failed 29201/-71, size 0-0 line 2759 [ 1067.458563] binder: 5914:5915 ioctl c0306201 200000c0 returned -14 [ 1067.466014] binder: 5914:5915 got reply transaction with no transaction stack [ 1067.473584] binder: 5914:5915 transaction failed 29201/-71, size 0-0 line 2759 03:38:39 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x10) 03:38:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x25000000, &(0x7f0000000280)='\b'}) [ 1067.511098] binder: undelivered TRANSACTION_ERROR: 29201 03:38:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1067.581692] binder: 5926:5928 got reply transaction with no transaction stack [ 1067.589117] binder: 5926:5928 transaction failed 29201/-71, size 0-0 line 2759 [ 1067.601470] binder: 5926:5928 ioctl c0306201 200000c0 returned -14 [ 1067.628230] binder: 5926:5928 got reply transaction with no transaction stack [ 1067.635781] binder: 5926:5928 transaction failed 29201/-71, size 0-0 line 2759 [ 1067.648869] binder: undelivered TRANSACTION_ERROR: 29201 03:38:39 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{0x0, 0x0, 0x0, 0x8100}, 0x0, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:39 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:38:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000048, &(0x7f0000000280)='\b'}) 03:38:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x8864000000000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1067.788215] binder: 5943:5945 got reply transaction with no transaction stack [ 1067.795760] binder: 5943:5945 transaction failed 29201/-71, size 0-0 line 2759 [ 1067.815378] binder: 5943:5945 ioctl c0306201 200000c0 returned -14 [ 1067.828832] binder: 5943:5945 got reply transaction with no transaction stack [ 1067.836293] binder: 5943:5945 transaction failed 29201/-71, size 0-0 line 2759 [ 1067.882476] binder: undelivered TRANSACTION_ERROR: 29201 03:38:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:39 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x20000800, 0x400, 0x10000, 0x100000001, 0x6, 0x100000001, 0x0, 0x3, 0x400}, 0x10) 03:38:39 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = msgget$private(0x0, 0x14c) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/177) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r3, &(0x7f00009f3000), 0x352, 0x0) 03:38:39 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380)=r1, 0x4) r2 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x111, 0x4}}, 0x20) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r4, r3}}, 0x18) 03:38:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x8906000000000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:39 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x395}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:39 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x6000, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c004800, &(0x7f0000000280)='\b'}) 03:38:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000280)='./file0\x00', 0x200081, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00000002c0)={0x0, 0xc3, "965967d025c453b146c2416c47c6d21b16a366e1ad028f8b03a1dde2835356dd6f993c26fc0a5dcb5f0b3e203e6391d082fed76bfcd40e8a603882799f2dc5a8a871ebdc42bdc0fbf6591ccf4f5f258b5262bd3b901b5abb8fa46ab95400348e27444d4a0ca06fb78374bbdc9241e76d71a6fb3b73631e40d30ff3370d1b286776c5b651ab8cae05b41b26b909359fa40044642a40f8c822f90b9115843434aa0c295fbb8162ff0cee71fb84b02f0b682ca6758a9256d48c87bca365ebd539735fa505"}, &(0x7f00000003c0)=0xcb) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000440)={r2, 0xaa, "7c62241335d01d8ec066dadf8cd698c5044dbfe07abd13d23260d402bf5fc6d75484ee2765a16ea57ff5f1fbf8aa2df5c53391014cce0132e3681305be3bcd9425043cc3ad83a01c49c1eb5899aa2fbe30af31a545f0e0bb5071a41aa64119f43c112e7a5d9816754ba6bad2a11c7a5c8db00a7dc95a3375794c314ba203120e7534f5d84d69f2d1a2d0d687fa6eb195bd24850ce28ed7d1f0004be80bf3aa904e410e12ab9674b34772"}, &(0x7f0000000500)=0xb2) lsetxattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000200)=@random={'btrfs.', 'ppp1ppp0cpusetsystem(posix_acl_access.system,\x00'}, &(0x7f0000000240)='@}\'selinuxselinux/\x00', 0x13, 0x1) 03:38:39 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x4}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r1, 0x1ff, 0x10001}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1068.403776] binder: 5977:5982 got reply transaction with no transaction stack [ 1068.408647] binder: 5986:5991 got reply transaction with no transaction stack [ 1068.411198] binder: 5977:5982 transaction failed 29201/-71, size 0-0 line 2759 [ 1068.418540] binder: 5986:5991 transaction failed 29201/-71, size 0-0 line 2759 [ 1068.448305] binder: 5977:5982 ioctl c0306201 200000c0 returned -14 03:38:40 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0xd00, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1068.477102] binder: 5977:5982 got reply transaction with no transaction stack [ 1068.484597] binder: 5977:5982 transaction failed 29201/-71, size 0-0 line 2759 [ 1068.505623] binder: 5986:5991 ioctl c0306201 200000c0 returned -14 03:38:40 executing program 6 (fault-call:1 fault-nth:0): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:38:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c006000, &(0x7f0000000280)='\b'}) [ 1068.543253] binder: undelivered TRANSACTION_ERROR: 29201 [ 1068.618018] binder: 6006:6007 got reply transaction with no transaction stack [ 1068.625507] binder: 6006:6007 transaction failed 29201/-71, size 0-0 line 2759 [ 1068.641462] FAULT_INJECTION: forcing a failure. [ 1068.641462] name failslab, interval 1, probability 0, space 0, times 0 [ 1068.653975] CPU: 0 PID: 6008 Comm: syz-executor6 Not tainted 4.18.0-rc4+ #138 03:38:40 executing program 7 (fault-call:1 fault-nth:0): r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 03:38:40 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x5, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1068.661304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1068.663446] binder: 6006:6007 ioctl c0306201 200000c0 returned -14 [ 1068.670701] Call Trace: [ 1068.670754] dump_stack+0x1c9/0x2b4 [ 1068.670783] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1068.670822] should_fail.cold.4+0xa/0x1a [ 1068.670845] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1068.670877] ? graph_lock+0x170/0x170 [ 1068.679970] binder: 6006:6007 got reply transaction with no transaction stack [ 1068.683445] ? graph_lock+0x170/0x170 [ 1068.683483] ? find_held_lock+0x36/0x1c0 [ 1068.683522] ? __lock_is_held+0xb5/0x140 [ 1068.683562] ? check_same_owner+0x340/0x340 [ 1068.683578] ? lock_release+0xa30/0xa30 [ 1068.683600] ? rcu_note_context_switch+0x730/0x730 [ 1068.688858] binder: 6006:6007 transaction failed 29201/-71, size 0-0 line 2759 [ 1068.692886] ? lock_release+0xa30/0xa30 [ 1068.692926] __should_failslab+0x124/0x180 [ 1068.732472] binder: undelivered TRANSACTION_ERROR: 29201 [ 1068.734326] should_failslab+0x9/0x14 [ 1068.734350] kmem_cache_alloc_trace+0x2cb/0x780 [ 1068.734375] ? down_write_killable+0x92/0x150 03:38:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x2e000000, &(0x7f0000000280)='\b'}) 03:38:40 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) [ 1068.734395] ? write_ldt+0x483/0xad0 [ 1068.734414] ? down_read_killable+0x200/0x200 [ 1068.734442] alloc_ldt_struct+0x52/0x190 [ 1068.734460] write_ldt+0x923/0xad0 [ 1068.734485] ? free_ldt_struct.part.4+0x150/0x150 [ 1068.789190] ? exit_to_usermode_loop+0x8c/0x370 [ 1068.793912] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1068.799504] ? exit_to_usermode_loop+0x1f4/0x370 [ 1068.804318] ? syscall_slow_exit_work+0x500/0x500 [ 1068.809222] __x64_sys_modify_ldt+0xcf/0x140 [ 1068.813680] do_syscall_64+0x1b9/0x820 [ 1068.817606] ? finish_task_switch+0x1d3/0x870 [ 1068.822212] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1068.827242] ? syscall_return_slowpath+0x31d/0x5e0 [ 1068.832241] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1068.837664] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1068.842577] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1068.847808] RIP: 0033:0x455e29 03:38:40 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x20071026, r0}, &(0x7f0000000080)) [ 1068.851026] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1068.870717] RSP: 002b:00007fa1b7f3dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 1068.878470] RAX: ffffffffffffffda RBX: 00007fa1b7f3e6d4 RCX: 0000000000455e29 [ 1068.885770] RDX: 0000000000000010 RSI: 0000000020000140 RDI: 0000000000000001 [ 1068.893099] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1068.900403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 1068.907708] R13: 00000000004c05a7 R14: 00000000004d0028 R15: 0000000000000000 [ 1068.917508] binder: 6017:6018 got reply transaction with no transaction stack [ 1068.924906] binder: 6017:6018 transaction failed 29201/-71, size 0-0 line 2759 [ 1068.934331] binder: 6017:6018 ioctl c0306201 200000c0 returned -14 [ 1068.941505] binder: 6017:6018 got reply transaction with no transaction stack [ 1068.948875] binder: 6017:6018 transaction failed 29201/-71, size 0-0 line 2759 [ 1068.962187] binder: undelivered TRANSACTION_ERROR: 29201 03:38:41 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = msgget$private(0x0, 0x14c) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/177) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') 03:38:41 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000080)) 03:38:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x2b000000, &(0x7f0000000280)='\b'}) 03:38:41 executing program 6 (fault-call:1 fault-nth:1): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:38:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x3580, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8, 0x80800) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000140), &(0x7f0000000200)=0x4) 03:38:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:38:41 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x1b6}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:41 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)) [ 1069.501593] binder: 6046:6050 got reply transaction with no transaction stack [ 1069.509147] binder: 6046:6050 transaction failed 29201/-71, size 0-0 line 2759 03:38:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x88caffff00000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1069.573816] binder: 6046:6050 ioctl c0306201 200000c0 returned -14 [ 1069.618766] binder: 6046:6050 got reply transaction with no transaction stack [ 1069.626288] binder: 6046:6050 transaction failed 29201/-71, size 0-0 line 2759 [ 1069.651141] FAULT_INJECTION: forcing a failure. [ 1069.651141] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1069.663179] CPU: 1 PID: 6058 Comm: syz-executor6 Not tainted 4.18.0-rc4+ #138 [ 1069.670579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1069.675410] binder: undelivered TRANSACTION_ERROR: 29201 [ 1069.679983] Call Trace: [ 1069.680019] dump_stack+0x1c9/0x2b4 [ 1069.680045] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1069.680070] ? zap_class+0x740/0x740 [ 1069.680102] should_fail.cold.4+0xa/0x1a [ 1069.680127] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1069.680144] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1069.680159] ? graph_lock+0x170/0x170 [ 1069.680182] ? find_held_lock+0x36/0x1c0 [ 1069.722278] ? __lock_is_held+0xb5/0x140 [ 1069.726396] ? check_same_owner+0x340/0x340 [ 1069.730766] ? rcu_note_context_switch+0x730/0x730 [ 1069.735740] ? alloc_ldt_struct+0x52/0x190 [ 1069.740031] __alloc_pages_nodemask+0x36e/0xdb0 [ 1069.744754] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 1069.749820] ? graph_lock+0x170/0x170 [ 1069.753672] ? __lock_is_held+0xb5/0x140 [ 1069.757800] ? __lock_is_held+0xb5/0x140 [ 1069.761916] ? alloc_ldt_struct+0x52/0x190 [ 1069.766199] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1069.771799] alloc_pages_current+0x10c/0x210 [ 1069.776252] __get_free_pages+0xf/0x40 [ 1069.780180] get_zeroed_page+0x11/0x20 [ 1069.784099] alloc_ldt_struct+0x7c/0x190 [ 1069.788194] write_ldt+0x923/0xad0 [ 1069.791764] ? free_ldt_struct.part.4+0x150/0x150 [ 1069.796635] ? fput+0x130/0x1a0 [ 1069.799940] ? ksys_write+0x1ae/0x260 [ 1069.803770] ? __ia32_sys_read+0xb0/0xb0 [ 1069.805644] binder: 6071:6072 got reply transaction with no transaction stack 03:38:41 executing program 7: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r1 = getpgid(r0) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 03:38:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000002, &(0x7f0000000280)='\b'}) [ 1069.807885] ? syscall_slow_exit_work+0x500/0x500 [ 1069.807915] __x64_sys_modify_ldt+0xcf/0x140 [ 1069.807933] do_syscall_64+0x1b9/0x820 [ 1069.807952] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1069.807971] ? syscall_return_slowpath+0x31d/0x5e0 [ 1069.807998] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1069.808024] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1069.815397] binder: 6071:6072 transaction failed 29201/-71, size 0-0 line 2759 [ 1069.820173] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1069.820189] RIP: 0033:0x455e29 [ 1069.820194] Code: 1d 03:38:41 executing program 7: r0 = getpgid(0x0) capset(&(0x7f00000000c0)={0x20080522, r0}, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffc, 0x80000, 0x0, 0x1000000}) 03:38:41 executing program 6 (fault-call:1 fault-nth:2): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) [ 1069.826666] binder: 6071:6072 ioctl c0306201 200000c0 returned -14 [ 1069.828490] ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b [ 1069.835716] binder: 6071:6072 got reply transaction with no transaction stack [ 1069.838502] 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1069.838626] RSP: 002b:00007fa1b7f3dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 1069.838642] RAX: ffffffffffffffda RBX: 00007fa1b7f3e6d4 RCX: 0000000000455e29 03:38:41 executing program 7: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)) getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) r1 = getpgid(r0) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) [ 1069.838651] RDX: 0000000000000010 RSI: 0000000020000140 RDI: 0000000000000001 [ 1069.838660] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1069.838670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 1069.838678] R13: 00000000004c05a7 R14: 00000000004d0028 R15: 0000000000000001 [ 1069.945881] binder: 6071:6072 transaction failed 29201/-71, size 0-0 line 2759 03:38:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x800e0000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1070.009921] binder: undelivered TRANSACTION_ERROR: 29201 03:38:42 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = msgget$private(0x0, 0x14c) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/177) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:38:42 executing program 7: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x244041, 0x0) io_setup(0xd7, &(0x7f00000000c0)=0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x400000, 0x20) r3 = dup2(r0, r0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x300, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x80, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x800, 0x12) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dsp\x00', 0x8002, 0x0) io_submit(r1, 0x6, &(0x7f0000000780)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1f, r0, &(0x7f0000000100)="eafaa5d9b6fdcfa3e78cb38f84343283eb5805cbafcfda55692a883c109675a32badf4a2fd7c3963a2cabd5459c0ba2e6b4075", 0x33, 0x7, 0x0, 0x0, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x7fffffff, r0, &(0x7f00000001c0)="6bb8b6f233de3bdd235830bab08bad990bd776bb6b01ee8cc751c6cd8d0195568b4a8073e2e183b3369a5773dfd4db0598774a8a4f9166f0361a08eb47f7612d65e52adeef290dd051034bb0d32cb57d346b1a126dc0854416179f5b159bb4119dd48db838cbcad12dc8b5f5f77ce982e8a2fa100950a2f494c35d4ff75c7207d6549aa76b4c1e96807beb155c0778ad411fd3b100de2b", 0x97, 0x9, 0x0, 0x0, r3}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x3f, r0, &(0x7f00000002c0), 0x0, 0x9, 0x0, 0x1, r4}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000380)="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", 0xff, 0x3ff, 0x0, 0x1, r5}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x5, r0, &(0x7f0000000500)="0d6156d47945f134a9dde108fbe38c5c87bc0dbfcfcf6233592a0bf8a53cc16b6a2df5e21478caeefe", 0x29, 0x6, 0x0, 0x1, r6}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x8, 0x0, r7, &(0x7f0000000600)="8fd6860e3e73c0d11f5fb08ca4b412898f372d33d553b80fb5f0e10c214066228efb62af20e84c34e55869ee4ffc12d78c6a3045f13244f1dacef38ac583851430ecef0c685c2973bf3624000fcaec6433c36f2faab48d4929aa9e4fc3c111cace21b5c23bf0c24afa7b16224d5b2bfebf88c892b5ac4f163a2c5e3dcea70ebd98e0cbc63c08b7931ba4848c554c2f999487cc3a86fc9cc6f962ea8bef9b0548e2ab49c168db9b017e5524e1b22036ca5ca934af7e4fe44bac2681981e36b42a3ff0435b87e3e4bf92d85975", 0xcc, 0x0, 0x0, 0x1, r8}]) r9 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r9}, &(0x7f0000000080)) 03:38:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000003, &(0x7f0000000280)='\b'}) 03:38:42 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x800, 0x108) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0xac0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x3, 0x0, 0x41, 0x0, 0xfa4, 0x20000000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, @perf_bp, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9, 0x410800) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000200)) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:42 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:38:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x48, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:42 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x1bd}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) socketpair(0xb, 0x806, 0xffffffffffffffff, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r1, 0xf00, 0x70bd2a, 0x25dfdbfd, {0x2}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x8, 0x3}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x40001) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x8, 0x40) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000200)={[{0x20, 0x8, 0x7fffffff, 0x0, 0x401, 0xfffffffffffffffe, 0xf13, 0x49, 0x5, 0x6, 0x4, 0x100000000000000, 0xa3}, {0x1, 0xccdffba, 0x2, 0x0, 0xb5b, 0x6, 0x401, 0x100000000, 0x0, 0x5, 0x1, 0x7fff, 0x2}, {0xe, 0x3ff, 0xffffffffffffab1e, 0xb465, 0x3, 0xff, 0x3, 0x401, 0x9, 0x9, 0x8, 0x10001, 0x82f}], 0x7}) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1070.571809] binder: 6111:6112 got reply transaction with no transaction stack [ 1070.579302] binder: 6111:6112 transaction failed 29201/-71, size 0-0 line 2759 03:38:42 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x2, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:38:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x81000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:42 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x3, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000080)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={[], 0x7, 0xe31f, 0x0, 0x7b5, 0x8000, r1}) r2 = getpgid(0x0) capset(&(0x7f0000000000)={0x20080522, r2}, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x3, 0x0, 0x382}) [ 1070.636941] binder: 6111:6112 ioctl c0306201 200000c0 returned -14 [ 1070.676697] binder: 6111:6112 got reply transaction with no transaction stack [ 1070.684140] binder: 6111:6112 transaction failed 29201/-71, size 0-0 line 2759 03:38:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c007a00, &(0x7f0000000280)='\b'}) [ 1070.708458] binder: undelivered TRANSACTION_ERROR: 29201 03:38:42 executing program 7: r0 = getpid() r1 = getpgid(r0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x1, 0x6, [@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xd}, @empty, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @random="a833365bcedd", @empty, @random="92bf447ffee1"]}) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 03:38:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x4305, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:42 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x3, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) [ 1070.818256] binder: 6136:6138 got reply transaction with no transaction stack [ 1070.825730] binder: 6136:6138 transaction failed 29201/-71, size 0-0 line 2759 03:38:42 executing program 7: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) r0 = getpgid(0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400, 0x0) r1 = getpgid(r0) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) [ 1070.870793] binder: 6136:6138 ioctl c0306201 200000c0 returned -14 [ 1070.883092] binder: 6136:6138 got reply transaction with no transaction stack [ 1070.890577] binder: 6136:6138 transaction failed 29201/-71, size 0-0 line 2759 [ 1070.944555] binder: undelivered TRANSACTION_ERROR: 29201 03:38:43 executing program 7: r0 = getpgid(0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x480280, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000000c0)) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 03:38:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x80350000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:43 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x40000000, 0x0, 0x10000}, 0x10) 03:38:43 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:38:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x78000000, &(0x7f0000000280)='\b'}) 03:38:43 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x2ce}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:43 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = msgget$private(0x0, 0x14c) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/177) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:38:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)='.system#cgroupbdevcpuset\x00', 0x2) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000240)={{r1, r2+10000000}}, &(0x7f0000000280)) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', r0}, 0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x9c}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000003c0)={r3, 0x2}, 0x8) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1071.621792] binder: 6179:6184 got reply transaction with no transaction stack [ 1071.629340] binder: 6179:6184 transaction failed 29201/-71, size 0-0 line 2759 03:38:43 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/137, 0x89}, {&(0x7f0000000040)}], 0x2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/53, 0x35}, {&(0x7f0000000200)=""/57, 0x39}], 0x2, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000280)=""/104) [ 1071.676461] binder: 6179:6184 ioctl c0306201 200000c0 returned -14 [ 1071.697095] binder: 6179:6184 got reply transaction with no transaction stack [ 1071.704567] binder: 6179:6184 transaction failed 29201/-71, size 0-0 line 2759 03:38:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x4, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:43 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x4000, 0x0, 0x10000}, 0x10) 03:38:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000004, &(0x7f0000000280)='\b'}) [ 1071.746082] binder: undelivered TRANSACTION_ERROR: 29201 03:38:43 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x80000005, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000140)=""/4096) getpgrp(0xffffffffffffffff) r1 = fcntl$getown(r0, 0x9) r2 = getpgid(r1) capset(&(0x7f0000000000)={0x19980330, r2}, &(0x7f0000000080)) epoll_create(0x4) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001140)={0x2, [0x0, 0x0]}, &(0x7f0000001180)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000011c0)={r4, 0x200}, &(0x7f0000001200)=0x8) ioctl$KVM_ASSIGN_PCI_DEVICE(r3, 0x8040ae69, &(0x7f00000000c0)={0x2, 0xc78, 0x1, 0x3}) [ 1071.838910] binder: 6206:6207 got reply transaction with no transaction stack [ 1071.846622] binder: 6206:6207 transaction failed 29201/-71, size 0-0 line 2759 03:38:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x34000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:43 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0xffffffff00000000, 0x0, 0x10000}, 0x10) [ 1071.879914] binder: 6206:6207 ioctl c0306201 200000c0 returned -14 [ 1071.899206] binder: 6206:6207 got reply transaction with no transaction stack [ 1071.906753] binder: 6206:6207 transaction failed 29201/-71, size 0-0 line 2759 03:38:43 executing program 7: r0 = getpgid(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='attr/current\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000140)={r2, 0x90, 0x0, 0x3, 0x7}, &(0x7f0000000180)=0x18) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 03:38:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c00006c, &(0x7f0000000280)='\b'}) [ 1071.936075] binder: undelivered TRANSACTION_ERROR: 29201 03:38:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x2, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:43 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x4000000000000000, 0x0, 0x10000}, 0x10) [ 1072.040504] binder: 6226:6227 got reply transaction with no transaction stack [ 1072.048072] binder: 6226:6227 transaction failed 29201/-71, size 0-0 line 2759 [ 1072.083598] binder: 6226:6227 ioctl c0306201 200000c0 returned -14 [ 1072.113147] binder: 6226:6227 got reply transaction with no transaction stack [ 1072.120646] binder: 6226:6227 transaction failed 29201/-71, size 0-0 line 2759 [ 1072.159637] binder: undelivered TRANSACTION_ERROR: 29201 03:38:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:38:44 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) r4 = getuid() r5 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc) getresgid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000340)={{0xfffffffffffffff9, r2, r3, r4, r6, 0x115, 0x7fff}, 0x9, 0x5, 0x8000, 0x4, r0, r0, 0x681e6727}) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$BLKROGET(r7, 0x125e, &(0x7f0000000400)) 03:38:44 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x4000000000000000, 0x10000}, 0x10) 03:38:44 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x172}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x23000000, &(0x7f0000000280)='\b'}) 03:38:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x800e000000000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000200)="efb19bd95b3016423c8191c3e987de64b377a92cb759e6a51b91214af3e2ad324a4acc40840ca434704b8aadf4a56a124c843fa588617f6c33e6c0d0fb9b41cc02638addca58e0ab0a7cc585cc84cb4a751abbee799935b628e66fbfa8530c5dccfa4e7a45c0b2e981d988969e3f109b96f1f539f79ab3427362cc19764afe7a893daeb57f08aaa7e84b55a1ce92a562e3bc07b4fff49588a308549d258c51efcad908fa2c91f4df0fb4a7c4e833f013aa6aa26e3e5b78a37cfe17b867f946a0a23d3b5237beb09807d56526b580bcebafcacd27af3a4ba24d", &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000140), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000380)='/dev/input/mouse#\x00', 0x20, 0x40000) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f00000003c0)={0xde, 0x2, 0x3ff, 0xff800, 0x7, 0x8}) getresuid(&(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000340)) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:44 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0xffffffff00000000, 0x10000}, 0x10) 03:38:44 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = msgget$private(0x0, 0x14c) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/177) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:38:44 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) flistxattr(r0, &(0x7f00000000c0)=""/4096, 0x1000) r1 = getpgid(0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000010c0)={0x0, 0xea, "2d8bc68e9bcb8775aa3f1814117be43e5e37c569f8669c5f09f3f607f091a9e3e1c0d06fcfc16f2ba265ca45b4ef6c4cb77e9b9e34942925c46b6cdb13ca460897ddb0b7caa744b5f61e317b6abcade1e41a40324a1da404696e2797c8784025d20b0e94318629ec4d14e1a2a401e05613920d2f1308984469fef86047fbe8104fa476ff6e4339fe613e28b007cbbee40143615d299475f90b998ff42540a249753cc64c6b01ff502e2526c6c19de6e420df213b572443950985eb412635858d5d18f3f5fbf3a304cd522e7168f1cc004bf2fd3aec09e25daff707822bcfbdd4d2133bb007cdb48b08fc"}, &(0x7f00000011c0)=0xf2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer2\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001200)={0x4, 0x8, 0x2edfa25861f5417c, 0xfffffffffffffffc, 0xe2d, 0x8001, 0x8, 0x9, r3}, &(0x7f0000001240)=0x20) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) [ 1072.693136] binder: 6265:6272 got reply transaction with no transaction stack [ 1072.700656] binder: 6265:6272 transaction failed 29201/-71, size 0-0 line 2759 03:38:44 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x9, 0x50000) mq_notify(r1, &(0x7f00000000c0)={0x0, 0x36, 0x0, @tid=r0}) 03:38:44 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x40000000, 0x10000}, 0x10) 03:38:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x400000000000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1072.743026] binder: 6265:6272 ioctl c0306201 200000c0 returned -14 [ 1072.757272] binder: 6265:6272 got reply transaction with no transaction stack [ 1072.764809] binder: 6265:6272 transaction failed 29201/-71, size 0-0 line 2759 [ 1072.783313] binder: undelivered TRANSACTION_ERROR: 29201 03:38:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c004c00, &(0x7f0000000280)='\b'}) 03:38:44 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) getpgid(r0) 03:38:44 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x4000, 0x10000}, 0x10) [ 1072.908919] binder: 6293:6294 got reply transaction with no transaction stack [ 1072.916405] binder: 6293:6294 transaction failed 29201/-71, size 0-0 line 2759 [ 1072.959882] binder: 6293:6294 ioctl c0306201 200000c0 returned -14 [ 1072.984763] binder: 6293:6294 got reply transaction with no transaction stack [ 1072.992617] binder: 6293:6294 transaction failed 29201/-71, size 0-0 line 2759 [ 1073.019476] binder: undelivered TRANSACTION_ERROR: 29201 03:38:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:38:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x800000000000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:44 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) lookup_dcookie(0x1, &(0x7f00000000c0)=""/127, 0x7f) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)=':\x00', 0xffffffffffffff9c}, 0x10) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000180)) getpgid(r0) 03:38:45 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x179}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:45 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x14000}, 0x10) 03:38:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c006c00, &(0x7f0000000280)='\b'}) 03:38:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x48000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:45 executing program 7: r0 = getpgid(0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r1, 0xf, 0x3}, 0x14) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) [ 1073.560118] binder: 6325:6326 got reply transaction with no transaction stack [ 1073.567579] binder: 6325:6326 transaction failed 29201/-71, size 0-0 line 2759 03:38:45 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = msgget$private(0x0, 0x14c) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/177) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:38:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000200), &(0x7f0000000140)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x3, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000200)={0x10205, 0x0, &(0x7f0000ffc000/0x3000)=nil}) 03:38:45 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x40000000}, 0x10) 03:38:45 executing program 7: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0xcf23, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 03:38:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x800e, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1073.617738] binder: 6325:6326 ioctl c0306201 200000c0 returned -14 [ 1073.636061] binder: 6325:6326 got reply transaction with no transaction stack [ 1073.643544] binder: 6325:6326 transaction failed 29201/-71, size 0-0 line 2759 [ 1073.656973] binder: undelivered TRANSACTION_ERROR: 29201 03:38:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000700, &(0x7f0000000280)='\b'}) 03:38:45 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)={0x8d01, 0x1, 0x0, 0x0, 0x0, 0x1000000}) 03:38:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x100000000000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1073.819350] binder: 6356:6358 got reply transaction with no transaction stack [ 1073.826806] binder: 6356:6358 transaction failed 29201/-71, size 0-0 line 2759 [ 1073.893694] binder: 6356:6358 ioctl c0306201 200000c0 returned -14 [ 1073.909534] binder: 6356:6358 got reply transaction with no transaction stack [ 1073.917015] binder: 6356:6358 transaction failed 29201/-71, size 0-0 line 2759 [ 1073.943640] binder: undelivered TRANSACTION_ERROR: 29201 03:38:45 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') 03:38:45 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x4000}, 0x10) 03:38:45 executing program 7: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) r1 = getpgid(r0) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) ioprio_set$pid(0x2, r1, 0x1) 03:38:45 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x393}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x40030000000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000005, &(0x7f0000000280)='\b'}) 03:38:45 executing program 7: r0 = getpid() r1 = getpgid(r0) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 03:38:45 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x4000000000000000}, 0x10) [ 1074.422013] binder: 6384:6388 got reply transaction with no transaction stack [ 1074.429588] binder: 6384:6388 transaction failed 29201/-71, size 0-0 line 2759 [ 1074.473399] binder: 6384:6388 ioctl c0306201 200000c0 returned -14 [ 1074.507951] binder: 6384:6388 got reply transaction with no transaction stack [ 1074.515467] binder: 6384:6388 transaction failed 29201/-71, size 0-0 line 2759 [ 1074.534937] binder: undelivered TRANSACTION_ERROR: 29201 03:38:46 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = msgget$private(0x0, 0x14c) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/177) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:38:46 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0xffffffff00000000}, 0x10) 03:38:46 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_newrule={0x28, 0x20, 0x20, 0x70bd2a, 0x25dfdbfb, {0x2, 0xa0, 0x80, 0x3ff, 0x800, 0x0, 0x0, 0x2, 0x1e}, [@FRA_DST={0x8, 0x1, @multicast1=0xe0000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044045}, 0x4000) r2 = socket$inet6(0xa, 0x3, 0x7ffb) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000040)={'vlan0\x00', 0x7}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 03:38:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x4000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000007, &(0x7f0000000280)='\b'}) 03:38:46 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x20000, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000200)=0x10000, 0x4) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x6}}, [0x24416149, 0x1, 0x3, 0x2, 0x8001, 0x6, 0x2, 0x4, 0xfffffffffffffc01, 0x4, 0x4, 0x5, 0x2, 0x1ff, 0xfffffffffffffffa]}, &(0x7f0000000340)=0x100) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000380)={r2, 0x7, 0x7}, 0x8) [ 1074.779671] binder: 6412:6417 got reply transaction with no transaction stack [ 1074.787283] binder: 6412:6417 transaction failed 29201/-71, size 0-0 line 2759 03:38:46 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r1 = getpgid(r0) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 03:38:46 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0x4000000000000000}, 0x10) [ 1074.855434] binder: 6412:6417 ioctl c0306201 200000c0 returned -14 [ 1074.875009] binder: 6412:6417 got reply transaction with no transaction stack [ 1074.882536] binder: 6412:6417 transaction failed 29201/-71, size 0-0 line 2759 [ 1074.948254] binder: undelivered TRANSACTION_ERROR: 29201 03:38:46 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') 03:38:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x88a8ffff, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:46 executing program 7: r0 = getpgid(0x0) socketpair(0x0, 0xa, 0x97fc, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000180)=""/185) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 03:38:46 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x1bb}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c00004c, &(0x7f0000000280)='\b'}) 03:38:46 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0xffffffff00000000}, 0x10) 03:38:46 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1, 0x381000) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) 03:38:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x5000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1075.341883] binder: 6453:6459 got reply transaction with no transaction stack [ 1075.349426] binder: 6453:6459 transaction failed 29201/-71, size 0-0 line 2759 [ 1075.374258] binder: 6453:6459 ioctl c0306201 200000c0 returned -14 [ 1075.383779] binder: 6453:6459 got reply transaction with no transaction stack [ 1075.391376] binder: 6453:6459 transaction failed 29201/-71, size 0-0 line 2759 [ 1075.425016] binder: undelivered TRANSACTION_ERROR: 29201 03:38:47 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = msgget$private(0x0, 0x14c) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/177) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:38:47 executing program 7: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x402800, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000000c0)="a40789b72ff9cfc04309456f86f60c8f6b594b90af96dfdcd525de67268277ee6fa8ab245e9f6c1affa9bd12f3f61eb1b5bb8ff77610c8a736a76865868fbfbc1ec335f7") r1 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={0x0, 0xc2, 0x20, 0x401}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r2, &(0x7f0000000200)=0x4) 03:38:47 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0x40000000}, 0x10) 03:38:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x4800, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0xa000000, &(0x7f0000000280)='\b'}) 03:38:47 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:47 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)={0x0, 0x400000000001, 0x0, 0x0, 0x9}) [ 1075.834710] binder: 6483:6487 got reply transaction with no transaction stack [ 1075.842511] binder: 6483:6487 transaction failed 29201/-71, size 0-0 line 2759 03:38:47 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0x4000}, 0x10) [ 1075.886265] binder: 6483:6487 ioctl c0306201 200000c0 returned -14 [ 1075.905488] binder: 6483:6487 got reply transaction with no transaction stack [ 1075.913339] binder: 6483:6487 transaction failed 29201/-71, size 0-0 line 2759 [ 1075.975447] binder: undelivered TRANSACTION_ERROR: 29201 03:38:47 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') 03:38:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x88a8ffff00000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:47 executing program 7: r0 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_netdev_private(r0, 0x89f8, &(0x7f00000000c0)="b003ec442b850f10e59e91077256b9f6479d82b15b1658928fa69d857603c39678825cd1cf3abf572a7804e66f28bf1b8372d03a00b528ddfa87789adafd706336803d848bdb57599c8220b6299dab7af6cf53552f24ee27288be1bdd52c1c03d53f5cb905") r1 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 03:38:47 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x382}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:47 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0xffffffff00000000}, 0x10) 03:38:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\a'}) 03:38:47 executing program 7: r0 = getpgid(0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x800, 0x80) symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 03:38:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x1000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1076.268940] binder: 6520:6524 got reply transaction with no transaction stack [ 1076.276595] binder: 6520:6524 transaction failed 29201/-71, size 0-0 line 2759 [ 1076.343737] binder: 6520:6524 ioctl c0306201 200000c0 returned -14 [ 1076.358859] binder: 6520:6524 got reply transaction with no transaction stack [ 1076.366403] binder: 6520:6524 transaction failed 29201/-71, size 0-0 line 2759 [ 1076.382688] binder: undelivered TRANSACTION_ERROR: 29201 03:38:48 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = msgget$private(0x0, 0x14c) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/177) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:38:48 executing program 7: getpgrp(0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) r1 = getpgid(r0) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 03:38:48 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x4000000000000000}, 0x10) 03:38:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x2000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='F'}) 03:38:48 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x40000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x1, 0x4) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1076.844446] binder: 6543:6544 got reply transaction with no transaction stack [ 1076.851900] binder: 6543:6544 transaction failed 29201/-71, size 0-0 line 2759 [ 1076.882766] binder: 6543:6544 ioctl c0306201 200000c0 returned -14 03:38:48 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x40000000}, 0x10) 03:38:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x43050000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1076.901473] binder: 6543:6544 got reply transaction with no transaction stack [ 1076.908939] binder: 6543:6544 transaction failed 29201/-71, size 0-0 line 2759 [ 1076.977344] binder: undelivered TRANSACTION_ERROR: 29201 03:38:48 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:38:48 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = memfd_create(&(0x7f0000000100)='/\x00', 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x2a, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, @in={0x2, 0x4e20, @multicast2=0xe0000002}, @in={0x2, 0x4e22, @multicast2=0xe0000002}], 0x3c) 03:38:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='/'}) 03:38:48 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x392}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:48 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x4000}, 0x10) 03:38:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x543, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1077.156671] binder: 6574:6577 got reply transaction with no transaction stack [ 1077.164118] binder: 6574:6577 transaction failed 29201/-71, size 0-0 line 2759 [ 1077.173536] binder: 6574:6577 ioctl c0306201 200000c0 returned -14 [ 1077.187521] binder: 6574:6577 got reply transaction with no transaction stack [ 1077.195352] binder: 6574:6577 transaction failed 29201/-71, size 0-0 line 2759 03:38:48 executing program 7: fcntl$getown(0xffffffffffffffff, 0x9) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)) fcntl$getown(0xffffffffffffffff, 0x9) r0 = getpgid(0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r2 = getpgid(r1) capset(&(0x7f0000000000)={0x1998032d, r2}, &(0x7f0000000140)={0x0, 0xfffffffffdfffffc, 0x0, 0x0, 0x1}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x10100, 0x0) sendto$llc(r3, &(0x7f0000000280)="ea8ee100d8028375f811863cb695bd951ab38d2d43adecd14ed537c5a09fd3847a941f87aa82b7d51d02327150f425e5bead80391089aeba42efa0dacaeaaccf7f7324ff3956bf42445637125dc7c75f0a78ffe1ec7f96127105460978109686967d25ed94860da21d7d7452bd5902bbd0a63d1a2c462d49a069870d631023f7391b49096e4b9c9b929ff312fa4e0acc395cef7a1f5be7cdee0f9ae441a2e6ca5aa8312b9e5c954e43ecc5eef5c6470631c2", 0xb2, 0x40000, &(0x7f0000000340)={0x1a, 0x325, 0x2, 0x6, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) socketpair$inet6(0xa, 0x2ef554e776a18e5f, 0x1, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$fiemap(r4, 0xc020660b, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000000000000060000000000000005000000fde15b4002000000000000000500000000000000030000000000000000800000000000000000000000000000000000000000000008040000000000000000000000000000ff07000000f42103cb6f7ff0543d36decd33000000080000000000000002000000000000000000000000000000000000000000000008000000000000000000000000000000"]) sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x7) [ 1077.234678] binder: undelivered TRANSACTION_ERROR: 29201 03:38:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x4888, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:49 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = msgget$private(0x0, 0x14c) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/177) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:38:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x20500, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @multicast2=0xe0000002}}}, &(0x7f0000000080)=0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000003c0)={r2, 0x90, "dfa8979e2fab2349522474f49fa5f43c43f6dc505844610918fb607ff930818502673cd762198e3cd2e7dea88336c87036593f4617252702f2a24b4829df507e456cf3e610811b2b09913ecabad26835386232222bc3d864376ece183208a4741b95983f39998293f29c43f2ba9dff945efd945bbc61c4c4735862165917200bd1e86e4e777ec57164270c001091f130"}, &(0x7f00000001c0)=0x98) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:49 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x10) 03:38:49 executing program 7: getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) r1 = getpgid(r0) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x1, 0x0) sendto(r2, &(0x7f0000000180)="bb1ffbd0d0d8139dd6e5ae047ed4ed0d2940f1365fe6f0fbbf4cd296f80e8ac73bb0b06642f42b2940925e9369297a6e1c40bc217ec314dee160a95d29b8e8e8bb2b3c97344b9a9d6309e55156560a92d952ecf688fbbc62f5abde04198a3482fc10f2c7fcfc4b2e971ac41a6a85a9d0b30e2543fc583d5d6aa1b140a6babdd34176ee6a821ec31c1ff21244263117c422e752a4f99f9711529d9da1efb9e6dd810f0f17784f115730c7f5caf741758f1e51a822dc18bce996463f913631d53fb819dd9f6c0665511e5b790e967937b9c731a9820cc8e3b75b9e364e3574", 0xde, 0x4014, &(0x7f0000000280)=@sco={0x1f, {0x8000, 0x5d4, 0xfffffffffffffff7, 0x4, 0x4, 0x6}}, 0x80) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x2200, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000140)={0x0, r3}) ioctl$RTC_WIE_ON(r3, 0x700f) write$P9_RXATTRCREATE(r3, &(0x7f0000000300)={0x7, 0x21, 0x1}, 0x7) 03:38:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x8100, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000140)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:49 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x10) [ 1077.905917] binder: 6613:6616 got reply transaction with no transaction stack [ 1077.913394] binder: 6613:6616 transaction failed 29201/-71, size 0-0 line 2759 03:38:49 executing program 7: r0 = getpgid(0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) [ 1077.977974] binder: 6613:6616 ioctl c0306201 200000c0 returned -14 [ 1078.027534] binder: 6613:6630 got reply transaction with no transaction stack [ 1078.035080] binder: 6613:6630 transaction failed 29201/-71, size 0-0 line 2759 [ 1078.069967] binder: undelivered TRANSACTION_ERROR: 29201 03:38:49 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:38:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x200000000000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:49 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x40000000}, 0x10) 03:38:49 executing program 7: gettid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) getpid() socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000003c0)={'eql\x00', {0x2, 0x4e21}}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000400)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)) accept4$packet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000480)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'bridge0\x00', r1}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000200)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) r3 = getpgid(r2) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x20440, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000003f00)={'veth1_to_bridge\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003f40)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000004040)=0xe8) r7 = socket(0x1e, 0x5, 0x0) connect$llc(r7, &(0x7f00000000c0)={0x1e, 0x303}, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000140), 0x4) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000004080)={{{@in=@multicast1=0xe0000001, @in6=@loopback={0x0, 0x1}, 0x4e22, 0x100000000, 0x4e24, 0x6, 0xa, 0x80, 0xa0, 0x2, r5, r6}, {0x5, 0x5, 0x5, 0x31ca, 0x6, 0x1000, 0x7, 0x80000000}, {0x4, 0xfffffffffffffffb, 0xf0, 0x7}, 0xf0c6, 0x6e6bb9, 0x2, 0x0, 0x2, 0x2}, {{@in6=@dev={0xfe, 0x80, [], 0x12}, 0x4d4, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, [], 0x15}, 0x3505, 0x3, 0x3, 0x3, 0x401, 0x8, 0xef8}}, 0xe8) capset(&(0x7f0000000000)={0x19980330, r3}, &(0x7f0000000080)) ioctl(r7, 0x0, &(0x7f0000000280)="6224986369505ccfc449db4f86a74564adf822c306d45fa8eedce4b954fba8ec8c382b948affd29639ec45af5d1b51c64fbe930a75016eedc997530ff8ccdf73d47e7790b6a7b3c316591def5adb3a8e2ae680a2dff917c94367746bb46c1c99344b8a092129b47a645ecf54d59951bd8afb8b35fef0606a99beb15172513128b35bea4015d5acecf795d40ba6fc254a45a1844c116a7297fd54c1672eacf475b4e1f6d0da15c52b7d669f48b11ae97a93eac20624e8f06c9a5ff81669a2020c0e") 03:38:49 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x3fc}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x28, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000040), 0x1, 0x0, 0x2b}], &(0x7f0000000100)=[0x20, 0x18, 0x0, 0x18, 0x30]}}], 0x2, 0x0, &(0x7f00000001c0)="67bc"}) 03:38:49 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x4000}, 0x10) 03:38:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0xffffca88, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1078.197972] binder: 6645:6648 got reply transaction with no transaction stack [ 1078.205531] binder: 6645:6648 transaction failed 29201/-71, size 0-0 line 2759 [ 1078.220496] binder: 6645:6648 ioctl c0306201 200000c0 returned -14 03:38:50 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = msgget$private(0x0, 0x14c) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/177) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:38:50 executing program 7: r0 = dup(0xffffffffffffffff) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) getpgid(0x0) futimesat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{}, {0x0, 0x2710}}) ftruncate(r0, 0x0) 03:38:50 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x10) 03:38:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0xffffdd86, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:50 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:50 executing program 7: r0 = getpgid(0xffffffffffffffff) r1 = getpgid(r0) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 03:38:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0xd, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1079.001737] binder: 6645:6688 got reply transaction with no transaction stack [ 1079.009198] binder: 6645:6688 transaction failed 29201/-71, size 0-0 line 2759 03:38:50 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x10) [ 1079.074787] binder: undelivered TRANSACTION_ERROR: 29201 03:38:50 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:38:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@loopback, @in=@local}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) 03:38:50 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x4, &(0x7f0000000100)=0x4) r1 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 03:38:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x8, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:50 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x2b1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:50 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x10) [ 1079.236146] binder: 6711:6715 got reply transaction with no transaction stack [ 1079.243710] binder: 6711:6715 transaction failed 29201/-71, size 0-0 line 2759 03:38:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x689, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:50 executing program 7: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f00000000c0)) r1 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) [ 1079.294286] binder: 6711:6715 ioctl c0306201 200000c0 returned -14 [ 1079.312986] binder: 6711:6715 got reply transaction with no transaction stack [ 1079.320467] binder: 6711:6715 transaction failed 29201/-71, size 0-0 line 2759 [ 1079.335866] binder: undelivered TRANSACTION_ERROR: 29201 03:38:51 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = msgget$private(0x0, 0x14c) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/177) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:38:51 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x10) 03:38:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340)={0xffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000001640)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000014c0)=[{0xf, 0x0, [0x29f, 0x7, 0xce2, 0x3c1, 0xfffffffffffeffff, 0x4, 0x2, 0x80000001, 0x7, 0x1ff, 0x6, 0xa6d, 0x9, 0x200, 0x3]}, {0x30, 0x0, [0x3, 0x7a2, 0xd51, 0x800, 0x100, 0x1, 0xffffffffffff7fff, 0x1, 0x400, 0x0, 0x1, 0x1, 0x776, 0x76, 0x2, 0x7]}, {0x8, 0x0, [0x0, 0x3, 0x7, 0x1, 0x1, 0x6, 0x5, 0x6, 0x4f, 0x736fb949, 0x7fe, 0x37e, 0x8, 0x100000000, 0x3, 0x2]}, {0x21, 0x0, [0x8000, 0x0, 0x0, 0x0, 0x8, 0x100000000, 0xfffffffffffffffe, 0x9, 0x3, 0x6, 0x100, 0x400, 0x8, 0xfff, 0x3f65cb63, 0x8]}, {0x2, 0x0, [0x8, 0x7fffffff, 0x100000001, 0x0, 0x3, 0x9, 0x2, 0x5, 0x8, 0x1, 0xe4d, 0x1, 0xffffffff, 0xfffffffffffffff8, 0x9, 0x6]}], r3, 0x1, 0x1, 0x168}}, 0x20) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000100)=""/223, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=""/230, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB="000700000000000000070acb2e000000"], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:51 executing program 7: r0 = mq_open(&(0x7f0000000040)='\x00', 0x880, 0x140, &(0x7f00000000c0)={0x40, 0x3, 0x8e, 0x6, 0x6, 0x6, 0x70bb, 0xcdc}) vmsplice(r0, &(0x7f0000001100)=[{&(0x7f0000000100)="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", 0x1000}], 0x1, 0x1) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001140)={0x0}, &(0x7f0000001180)=0xc) r2 = getpgid(r1) capset(&(0x7f0000000000)={0x19980330, r2}, &(0x7f0000000080)) [ 1079.965536] binder: 6750:6752 got reply transaction with no transaction stack [ 1079.972984] binder: 6750:6752 transaction failed 29201/-71, size 0-0 line 2759 03:38:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x500000000000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:51 executing program 7: r0 = getpgid(0x0) get_robust_list(r0, &(0x7f0000000400)=&(0x7f0000000380)={&(0x7f0000000480)={&(0x7f0000000440)}, 0x0, &(0x7f0000000140)={&(0x7f0000000240)}}, &(0x7f00000003c0)=0x18) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000004c0)="a21bdcae72424b9d5353045c8402764bc4f4dca24009c4345fe95cf3f0c85099b1f41791273ee0666cad9690865ddfe5c2dcee77ee152bf27b0632deae6f3337416b01f8b1957e99b99292668fdc9fb6e56a297ab239dca02dc5ce94092b00380a118dbc2ae85d8188ddb3aa7996fa90b5b0c6799b8270189ff4f96b77d3a8bfe2167bb8732def3841c0bb2294d3a4d1f2739c712495fc9494fd6fe1f8c0fac718c731", 0xa3}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000100)="2c65533ff42c42f8795e7d126d124285a39f58cbb1b95b98f95bb1e5", 0x1c}, {&(0x7f0000001580)="baa0d9baf2ddc9c6bebcff2c231a331b77a017e8a9a7a4f710b9754a1e2be8adcaa27af7f40b8dac2e712cc77d99570cad1be9335206a2099a83ad6acf96bcb4b503d9b035a96c97dd19c5b13ef49266c35cfd9a20d29697fc6b758f3139619b825e50d2b8643b3c8e5d9d8bd4ee3e5a8b7a759d390cfcb373bc20a2d475ad96f6dd36add34b75f20d275db7ee1d171d01417f9da62f2c9235f43448", 0x9c}, {&(0x7f0000000180)="2afed5df897227ee955bf8cae7dbea960bad6d3e81db4c6f95152738ab9767986e", 0x21}, {&(0x7f0000001640)="00e59763e3e1dcc292b56394b4b002469fbdff52bde70e12a946639d82d82e40a9d2079c9e75453b5dcadce37482b053b8647aecf1c5e276357ce0d94631af5cdda401787948ec836ca1e67a117a6c53f9b9bd16e01a148629ec40a0849aabd56cc5209ddbc6a1942c", 0x69}, {&(0x7f0000000200)="b05007de2895fac061189285711518289148092bbb6c2f0f3c9e33338e0d6ab6193e6ba4a1b56f7957e99a437ec7a7f534e2", 0x32}], 0x7, &(0x7f0000001740)=[@iv={0xb0, 0x117, 0x2, 0x96, "6c76bc5ac1e92204cfef563d4b4bdf0140b56c50aa8f254ac8d98d1630cd399ca8df1e47d135672d6b407d60bdc70136f04a6d66a0852227798adf1e057d23d481c726c405960035c0de175d9cb18fb0710e68c09929f3b28ef4352e38a7966c30308fe30a132e14b6ecfeb9b512f35ed0b6b2ea2dc142e89635ac8faf8d93ec7c3f70c91db98d1b9ff08439ab7e331eeda569cbcdd5"}, @iv={0xf0, 0x117, 0x2, 0xdb, "4eebc77e572f39b106c0547780ca6ac11575bd53729f41b314caa1d3a10e9157c7faea50a3e615de5ab22b87cf2b9da003a8a8900b9b2cfea5b94d540582568ad39f6c3cfa54fa4d005544d47dea73953afe5b4bb15e0b87dbee578fcc88681c9cb2da25447a6f615720b058ff7df4cb0f68fd2e9de9fb40131bb36b7b5f6c23fbd80407eec5d6f64b43197f1bbcedc7623099c34cb66cefaf8127e154e2d1fc02fc3216c0a0b26b99b60544ba4ad3656d1c46e1617abef5535dbdc0710c9066f93fb3e0fa026269d549a54ff6c67f877d328fbab31c33a63c2c42"}, @iv={0x48, 0x117, 0x2, 0x34, "d0e92c9994b09249a0321b2ba5f7551ffad7b44dc990f10d3092ac6c02ff11edd5dcc11a820f8b07a645dc3ac5c397bd2459715a"}], 0x1e8, 0x40800}, 0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000001940)) r2 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000300)={0x20}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 03:38:51 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x10) 03:38:51 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000001800)="8442641fdf450254e9a132b90d0c") r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000480)={0x4, 0x3, 0x7}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001680)={0x0, @in6={{0xa, 0x4e23, 0x1, @mcast2={0xff, 0x2, [], 0x1}}}}, &(0x7f0000001740)=0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001780)={r1, 0x10001}, &(0x7f00000017c0)=0x8) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000340)=[&(0x7f0000000140)='#%userppp0*#$\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='+]bdev@-&', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00']) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000680)="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") mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x10, r0, 0x180000000) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x2000) getresuid(&(0x7f0000000540), &(0x7f0000000580)=0x0, &(0x7f00000005c0)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) syz_fuse_mount(&(0x7f0000000500)='./file1\x00', 0x8000, r4, r5, 0x40, 0x20) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f00000003c0)=0x9) [ 1080.008826] binder: 6750:6752 ioctl c0306201 200000c0 returned -14 [ 1080.028594] binder: 6750:6757 got reply transaction with no transaction stack [ 1080.036142] binder: 6750:6757 transaction failed 29201/-71, size 0-0 line 2759 [ 1080.096779] binder: undelivered TRANSACTION_ERROR: 29201 03:38:51 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:38:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x2d7, 0x0, &(0x7f0000000040), 0xd8, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:51 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x10) 03:38:51 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x290}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x8848000000000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:51 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0xc0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000200)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x81) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e23, 0x6, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x6}, {0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x7ff}, 0x0, [0x5, 0x2, 0x9, 0xffffffffffff8000, 0x80000001, 0x2, 0x8, 0x7556d7e7]}, 0x5c) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f00000000c0)=""/59) ioctl$TCFLSH(r1, 0x540b, 0x7) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x3f}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000340)={0x4, 0x4, 0x7f, 0x5, r3}, 0x10) ioctl$TIOCSTI(r1, 0x5412, 0x80) acct(&(0x7f0000000380)='./file0\x00') lookup_dcookie(0x9, &(0x7f0000000240)=""/132, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000003c0)={r3, 0x2}, &(0x7f0000000400)=0x8) [ 1080.279700] binder: 6786:6787 got reply transaction with no transaction stack [ 1080.287421] binder: 6786:6787 transaction failed 29201/-71, size 0-0 line 2759 [ 1080.310399] binder: 6786:6787 ioctl c0306201 200000c0 returned -14 03:38:51 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x399f1736, r0}, &(0x7f0000000080)={0x100000000, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff9}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x200, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x183100, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x20}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={r3, 0x8, 0x8001, 0x7, 0x4, 0x58d}, 0x14) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x6) capget(&(0x7f00000000c0)={0x200f1526, r0}, &(0x7f0000000100)={0x3, 0x55, 0x6, 0x5, 0x2, 0x3}) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000240)) [ 1080.324810] binder: 6786:6787 got reply transaction with no transaction stack [ 1080.332356] binder: 6786:6787 transaction failed 29201/-71, size 0-0 line 2759 [ 1080.351264] binder: 6786:6791 unknown command 0 [ 1080.356652] binder: 6786:6791 ioctl c0306201 200000c0 returned -22 03:38:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x608, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1080.383483] binder: undelivered TRANSACTION_ERROR: 29201 03:38:52 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x10) 03:38:52 executing program 7: r0 = getpgid(0x0) r1 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000240)={'ipddp0\x00', {0x2, 0x4e20, @rand_addr=0x2}}) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000200)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000180)={0x0, 0x9, 0x10001, &(0x7f0000000140)=0x6}) ioctl$void(r4, 0x1) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000380)={0x0, 0x6, 0x100000001, 0x45, 0x5, 0x8, 0x8, 0x1, {0x0, @in6={{0xa, 0x4e22, 0x7, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x6edf}}, 0x3, 0x200, 0x6, 0x3, 0x5}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000440)={0xffffffffffff8a61, 0xc, 0x0, 0x0, r5}, &(0x7f0000000480)=0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) fcntl$setown(r3, 0x8, r0) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000f5ffff020006000200f231d1110000000a00000000000800120002000200000000019b2ad2e8b5f62b2bb800000000000000bd03000000160000000301000000000000000000000000d4b148400000030005000000000002000000e0000001fff800000000000000000000e5f0322ad909cc5849000000ff5559af1d596e3e24784ccd02"], 0xfffffffffffffc4d}, 0x1}, 0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)={0x1}) 03:38:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB="00e7ffffffffffffff"], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:52 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = msgget$private(0x0, 0x14c) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/177) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:38:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x806000000000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1080.953175] binder: 6812:6815 got reply transaction with no transaction stack [ 1080.960643] binder: 6812:6815 transaction failed 29201/-71, size 0-0 line 2759 03:38:52 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f00000000c0)=0xdec, 0x4) 03:38:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x86ddffff, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1081.019376] binder: 6812:6815 ioctl c0306201 200000c0 returned -14 [ 1081.045926] binder: 6812:6815 got reply transaction with no transaction stack [ 1081.053383] binder: 6812:6815 transaction failed 29201/-71, size 0-0 line 2759 [ 1081.067785] binder: undelivered TRANSACTION_ERROR: 29201 03:38:52 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x84800) sendmsg$kcm(r0, &(0x7f0000001900)={&(0x7f0000000200)=@pppoe={0x18, 0x0, {0x1, @random="888b109ac589", 'veth0_to_bridge\x00'}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000280)="d01304d5a0649acf9ea12ebc1f83123055f6f051206eb3e7fb568d134072899c0dd8864f53834f3c36347af31e06e2566f230762837c282325b9d081330c187ae2487f470c89e219b0b57c18e1185bfd7b27ce6c073ab8a8c48bf0f1c86709ab81ce4b676713f8c31ffee0d2c3ab625190736a808597e80fa6dbe3461e4eba430acd7235133371b16e5a67753a7639f46eb2f2cfa7c2637b26ca987e64d3deda236087b261", 0xa5}, {&(0x7f0000000440)="393b211c5f482ccf9dc987da07924a1b3dba57480467b4e15b3662159cd534cf159c2fd82f695d1d98b1f1e34077532fa525286962180d4289a4d573d0e293879d46734cfeba3e1b1a20e216b1ac511726a723245bbed3234914c9c0125f52b5a891f8ade4248c964a9c39dc736a671e17ada5e230bf5724deb1fa052f422fab47ab6721d729c01ed28bc50170c3056ed58872b049443b73c42e84211bb11502d5fd05c10cffe24dc2568e756f4780df33c0842f6392cdf88687952a27fcf4ea975fed9b7c8db5c71545c7be39879ef818966c99d37390ee766b2458660ca57ff2c8a55317813307ff38496ec2b15c3874e945c619811010770eac4f3a", 0xfd}, {&(0x7f0000000340)="c077ba11450579f4432a0857dd72b423dc68866f5d9b6b2b172ada4de350dc111477e185268fcc40e24cd68a0c8711268ab781ce018dc20b3991b63fb922f1de52d45ff740c6e356331b814416715c847f6857a69dfa1d1c4f211c8e446e7b200143da83dbb35b8fc0f03c7f125e28cdb76bf7d5c79c6867f1b62ae13b315c0b99d824ba0eda8648e0e281aadcac270a3d8d61803458666be771057156daaf6893d5db5798909efb7120", 0xaa}, {&(0x7f0000000540)="6775373aa01270c38fc7d058871dd65a6415d4e14f7ed5ee414ee6a5fd4e7c77e64b95b0dbe5eded01dcef1652d4edcc1711bcd7da2f4d115fb8d955e65e997286dce334c8a5ac992686239aadea48b8917a4b9375e929655ea831dd0e8b9fdc195774a4528402aa020e6d839fc4f854bf4586ace6fc6766422046cd7ca89e44cd68e8c420bb52c4cb44de8684ed1948c01fba82d8f811e943", 0x99}, {&(0x7f0000000600)="fc00a744", 0x4}, {&(0x7f0000000640)="60e45459789ff875a499c130567c09", 0xf}], 0x6, &(0x7f0000000700)=[{0xd0, 0x105, 0x8001, "19a9f795d6b9975ebc9a228742673debf753521be893f8e2539ad00431fa86ffa2a70d22b3858cb1bf018d1d27e7c9d185b8f57abf40aea88301ad7fef97818507541b22032cc78e3af9ffb25764c14485ea6fabc7c8ece2320b1da7b35466a32456b2cece7cf3f8fd24b71e01a60b84af4882a7287a40f7864d0fc42b9c0de9dd99ef3cda162bac63a1fd5ba4f34d1a15e3ba8e38f1e50ac5aa6da62668705c0478be28d8fb2bc7356e58c8f07529639521c903154b5f3bb272"}, {0x10, 0xff, 0x6}, {0xe0, 0xff, 0x3f, "f7abd90d68b7e961a6dc4d77e586bd36880b717bf3f7c13ed802c54c14740e5393e4fa0ba5cc1489e4fdef99ddeb39ae597cab9b46c1442ae70f70113e1894678c4871e8ce0e3f41c0b253834989c2815fd92c0e1daf64219c5ec73d3317b6e160301391d76011b64153007d1be553cace66d644bf1700299ea79c0be7a2a295988a9e232e0a69bdd4b20ee725b28104fcced4957f57da07d3ba101b451ccd0692e42ada16cc1cb83292a54987ed0559242ecf33b7ce580781682a96847fee4ef0caec42aa0087ba3a8ef99f"}, {0x1010, 0x19f, 0x200, "8e325fdcd4fcba4aa99c24b0a7af967277e00d071498c52645299f747b16a6150886b1a2c94a1ebeaf128ec8b8140b9794dc5b53d48e0dd60d6383882cffe725d0cf75c7025605f1dd20269c8034a35aa013eb6ceb599f5e2acebf8bf26a7239a1e48e6d9e0258824228aa6c08553e8de6b7d834f43036098961040d0590da0837a30b417e94afe616c14e65d962c43ddb5c60f1c11468eb4fff092ce6edc1ae71615cc246d02f027ba1742f85ce89c6014b992b6f433581eaa58c45171a4bd21c05d320e561cc77d2f2aa0c04b4961ae7c4db294669b68bd5cdaad5597a6f1a0ca5fbd3e46f7ddb3bcf068670ffac1c8bd30a70f4f7b3d1e5f9876c92f2bbe4ea58395a12f7b255c4029830ed89dc2215e5e52daa51efb348cd5442b14eba1a22c062b4308fd9bdad9238639f182490f2a276ed7de075ca22510fe96cac6125ac7797ea8cc573189bb7d129ae9570432a488d9da0fd81cd274b79ef8df55d06efc1ddef8236b8da109d6de71bb59e0b1e2d9c1cb482821dffaa29e422b98b8176b3ae840e0198eef2ea07e05a7c7660c56d2b16b3fa87a6a75499502b2577384c2ef044ecccba3400d8e4071c7fcaade81fbbd86de216f147a68983a0960ca15a68d7e19d571144c02b663e989a64d5949e65ad4df37e7cdcf48e09d342e7aed1c9250b3dd840179d8c0efed5d795546ed77461a9282f95db646eae237ce74fbe206c940f1725be3aa2ce397b79176d66ef55072fa8770a2fccd5534008cef9f01b77ca588567bbd00000e6e8fbd5a8207be491836346a816b514a18e369ca37f419340dac08b7652dc8b9de20c11cfef5bc3c7b0fe576b9224f1069f2e85fe768925629a5b482b694bfc219e2368d5e6fcc9f288475dfe03af11e8fec1cba792d0d06567d341312f8d72e2f82e511f5dd10683121cd7a551757234df41a246303b352e6cb9ec64c7cef11984ce80184b379bdb9d8b2ae403bf64d6728fb86b91768d59dbc664581af11391d9de24f359339dcc12d3619aa5c5386bcf73a29b789fe0e441fcda953d2a59676b987fc30a31bbe620a5c49017a7b9f5eb978607b6cb99bb32d92baa365094f37dad43e89b574cdcd744991064c7e8e554c64c347339103a68fb2049fcdad8da07d623b6bdcc45be330e103d897bd65a615715e24e1b4fc900013f81781c3b84a03a52277789b287378d927070d9491e909ef1fc2828b5d5bf62541c6d2b55de8f7b509ae35cb7d0b38a0e91f8be8eae6f593e8a9549b1fa8162040a903c13b0002252bd4908bd4e46dd9e63833e77df8f5a54fe97f4bb92488534735d239f21c95085cc8fbed9d52cee8613b041bd7e0ee2d570d928271e1155653a8170a67f8c119ad7992d9242dc5ee3640343d6354a645f9aa707b7abceabc15485ada593e745d46808a3b593dec9a382e9d67b858de3d0ccf2fa75a7b3dadac469fcaed574b5446f2771a4079d48cb7250c0d3358a894f9d507339e934e9885a3bca05817fb89be0d2d8e75d2ee778fc3d8ae3ac1cef84f47fe2d882967426adc99879ab31f6ac84bac37df9f12f961be6e6cb5f01888a1048e41dc19e5d4ccc133e13c497a80b57ec7d2fe47d366c84e8437e95e75d7441b65b260f551a46df92f9a576a945025e067ada355dc70a1ac0a4dda1e69cc6d1ffdd48980ed153f0400fdc59eba12a43595abb6c91a0f1c7984e293e4f4e4efc55b42073307419f05fad625ca277b8bc6da31aaf666e5369ea9359a54157b82ca76993f9161e9012f27626cf649c84bd6cad8acac8a65113caf7e185d5898b04a33ed1224dcb2e6b51dbf000530dfb1c048dd51232ddbfde84cdd321652d21d6e5b4cb7fcd02a1e5646351ac13ae7da8d1ed3f4cbc95842e1f7435d4f422531480b2bc2959097cb62797f24f449cb28f253ac9f8285a053e55838d6442b8fd624f537eafd31dd9cd6b7ada480c4470256795c1f506386db094fb23678be4dc7f91fcb898e09e7f695ec11d866c0a13320dfb1a5a1e6558cf5a685306cebf2850795544da379d498337fc297edc38c43e5ab1648025a041c3ca892d6df8dc9d526c0f307bcee5bc5ef3ed2db8b9a0e932580c84d3fd3f0612aeed5bd2b6e1014e051f9d9b116b79e4a5fd4359c79315023465b7d9d6b48113516955b52ab89a1bb2283fd350fc19ae366918aad55a561ac27c13fd10d3dedfac0f5affe2297ed5442bace6689818414f2a4c5f32ff04ba0378f7a7deb066a5293a999c11734924af89990df77ee909dbc4071c1ac88a5cb736469bf2fd8c668da21c7f331568a4899be27cd3031f6e3a0359021a872725d3f35b1cf89e8f2a8e3fb064d25be2c198a17ef6de8f92a97a997ca31f26c5ae577859e67f599abdf4426d3a76f1fe9315e57eb0cf44132267d31485fc7a43e213f64f360aceb92f69035b2b0666490d23787203de716d5401de4dc515033489d09cf4aeb13b69a5a2728314152ee1a08e7e1bdaee441e980b53640417b84008c9df54fb631b853989839f2af68e6414df7dfdc5aa2aa5c1222dc3415654fcf4756e94d17341c4b2fd5fa768f92457abcfe3ef44722ac43e8c0e6bfd769be5eb795fda1255bc0202d4a8d08db7eb2cab2397720dc56ec3591b4f0afd389530b6d23a5361b44892b300bd49dca6a6cd2d9a895993662068dd417da3708d2f316d325ead155a93e1a33b0d25be2f3b5d0dda9e73291e9a83f38ddfebc3135003b4afd8ed3b8b62bdb21daf6e70c6733b456114a1b3f0fb0fc255e692b2d6298024cedfdea60bd48368a5f538573dfadc923692a62253e49c24aa444b676f778bb1a2e46e783b4b22014f2545d8a9f183c5868834d54c31a5c866bff9ef1e2961ef9ca8d9393f461379015e5932c43f09ba5e0dba8b99ac9ebd35b2017b63bbccbfc544fe2266ebed704b509abb1ef4a66803a5e963b6309fb7a02a186108e356afb854b6ed83793d722ce8e022de78e9ea0a16fbeb7dcea0a80018019720cdee6110db7049c2478214c2710534b5d2b0e3df120ea35ecef7c91c19681f37fcc190a9ae876967450015ec9c7c859a0b047698df4516ad73d430ce886d58be33f66186d14651da853fac2e267bfd375d74b33d49e5e5ba756c997625cc893950cff37ca7af94b07c619d647266c5c73fce09bfb05cb2a92a43bd6cfef752de651fb08692ae9ec0e20e2a635aa91dc35238245221da4d07cef49c9bccc965ff6e9fda3edf6fb32ee6ee990bd3fa6fe01cbd77d41a59a87e53697b4d15e456ad07221db1ad43c55952dc08c090dd08e2acc9ef383847dc94d440ef4e9815afbf527e7604f8539a9f20d54129233e2e8fe983e52ed42ea531a21248c691edf8da1f80b2ca5f125e070307292b9f42f82685e2cedf0da11a746709a44285b25c88b1c6265174e381e42280f529c48261438fa8907399f2fa942b838c245899f2207ff77ed572f19ad2b076a9d99e152544eade1af9f8df0cbf9dde5afc3823b492671347ee90aa9a2e4c296d56c002732f067e6a7cd53b16b5195aa31a07e3f3f4f9ac01686cc6b7458bcd7ecb92bd268e3c72f94ff9bbcd3843d69b094f1ebc6dc606e8fc405c66b0c580124c0a3c8fd93bb401efe0925fae3ea8437f9d86d09960408b56b3c0657c01bc0e70856c2251899a59af57d096a9f577864d0cf84d7f6e5d6bd4a6b08227b7d690159471bfa1421804ff38cda0cb44e83b0122135c57f1d91f8d070d6eec451c13a71fc3b138e4d9debf85ebab0ba6c13cdc2d1ba6b3f345a812dd30070662d754f5dc40d0502f1acacc3ad79ab284da201f41258a459a3e60e52a867573d19eaf75057b786b0a6a0294d05e6e68725876c1db3636f2324ceff56942a15341b1a0cb026dd987434af359fc34086826154687bedf3a70f0962818043fa35bb52e473f978d7dfff96f45e0ae82732a1abc9b0739ea7b59849ef9cb954b955278f004c2854d551ae2794431e22516dc1c5ef638199376e0a82e31a99e7443dc10dc0db6e5634e10686a003cb2656a8fbfbf290d67d74a87713920eb5ef69079b81fdbe0f62abba0b892b08caef4b8501c53715cdff9712e401d56e36eebfc86badef30ffb92f3791468ae3ae7af8cc255c069288b7670b95b018a8c034a45fde7af82cdba35fe527ce37de059b9c5dc475225ec0a8cff22cfa51ec220d577ba87c604445e6fb574c87f6d3413cfb818851a644062fd5597ebbc3461a72f6672709c841604d35cbcd5012bfd9684b6095ce6f4267e5ef58a4d6a9c673d7e182be81b3e0a092022c918810ac10afed3cedf41529fd98aaefcf77845b8d2485524a1c3953a1c5e2e65389e97f2aaa20a3331d2ec3de539dfbd2e2a68d4db7c54620589b5b73a8cc27c5e13ab06e4b5295d36b4f61599d95847bc69d36d0269aaf55d3e8bbbca8e6587fa6b881aa62b2ed44f53292bffb39881a6a08ff0e915a47dd02fa07c996ed2ace3420c3776ce9a3b2ffe5d9195cc2c54baa0be61fa4c2c8e7e6431ee94adc7fa53b4b0e15c99f43a756dfc8ec508b56cb0e8b72490dce17cb2d767b95eca2e423ad3a55790c0a1bca3c2c72757bbc7a64de80d754281bcfd3498c1840414363970ca7cba4c523a0c33ad79b132aa874f017d14082d9e8b18e0b0dbd1674eaf25a41836d63fd7309d05093a80309465bc08796634488072a56c8fb7571a51f5b966f90d151640b1c87c18847070535161b2289401344cf54ce5d29eefaabec0230821836409e4e47a784c10749674fcb313862baf468710de8c7df48ea316d952b6024a81ef7694c5b2f945c5a645e8ea25f3361e653c7da6c55316ae7854ce7bfbead17116fff1c1dbc767b90f0f4e7bda14ebababbaaaab173db443f4e4dc94bfbadc71c765dcec4da87198c6df353934749f0fd7ed12ac5a504ef3b880a86dff60756619482cfdd0243346b3d0f86f5f91b713438c475b9a97d2c3b94b34dc0ffb22f424ce4311bd9ec14dfa75cd913bfb577f04915021bcb57a34e730fd04337f5d6dc2f37bd26a069de65e66717ecac3da57abb692b763094d98f0e5082e3c75ad79040099f7bfd0d0195570e9e1759b5bb4457db32165002e8844cd102662dd252a85eb555233d9f81c4da0490e8ea488c0e22210cd95b7571a95b93e14341d4736ad1a56f020de1dcd185213d0cafcba1cc9459a358847336224d5ab2188bde5e1c0706faf79b290fbe85811fca563bfadee6a62f74b917ea246d28cad8e851bcf60d518e05f0e534d1d4c2b99fd9227dfdb725b3a2bd9643c272c672fa4bd8f463a06c26200847b4da750024f0e8f515e7bbdc6fd2d70a1cdb5867cdbb16bc82ee1dec7775af8296890e69fef7ccd5d1d41515cc275ee8c55fac2702145ecddb419f9ccc68fb943403d9c9dadedeaa3ee4aa36f2da9d2c0fcb08ca8ac52701b6a174c72367a2b30a453b78b561749eaf0fbc0fece908154d42d8baa5aabf255a8078089e6cedfb26132cb1c11a476e653c9110336030faa5f6bfcc5ee26c47ac79813bf16d6cf3887aefa76468e9a5290b620bfc27fd836371f0e0b79cad712d05d7a0d164d0cb7a4b675365d491dbe1a2eb6bd558118a13bbaa97b191d29c7c892d2e4db435c05141642859f33ba35615771b4a45d539cf663f79ee29b471317556f370d33709e0a810f168c23dadbf482b8ad87b51633f4a275ccfd39e000675e6d7fa2c4942ab0dd040157f09c1774e98b89dfb40e3c1d4c6d7a5faa593f24831e3daa6ae78753352ffba495e4fbb5a12ca52716deadfcc0e50a9c0e6250"}], 0x11d0, 0x4000000}, 0x4004000) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:52 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:38:52 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x10) 03:38:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) r1 = msgget$private(0x0, 0x200) msgctl$MSG_STAT(r1, 0xb, &(0x7f00000003c0)=""/4096) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x1, 0x181000) syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x2, 0x0) 03:38:52 executing program 7: r0 = getpgid(0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x22, 0x2000) sendmsg$nl_generic(r1, &(0x7f00000013c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801001}, 0xc, &(0x7f0000001380)={&(0x7f0000000100)={0x1244, 0x16, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@generic="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", @nested={0xc, 0x44, [@typed={0x8, 0x7d, @ipv4=@multicast2=0xe0000002}]}, @nested={0x148, 0x3b, [@typed={0xc, 0x6d, @u64=0x7ff}, @generic="9f555a9a8a8b857d80fab05a0158a2b971116d0d7fde572522d226bc40c8fc448696088941eca3be4027542eb2da7c86c5c61d", @generic="28b046d6ad4f78b052a9121f46d8ae17e329e27a6cfb8777a0d27a17ca956b0929682748b780d367cd8e5c46b2fbcba279d2dd092fe8e58fd39006ca7e5449ce196a1836ae34a5932a9cfbcbf09dc959d305ce83efda33b63cc9decb506442380840238a63220c8a3dc65e256d81a0130784ec1fb630fbbe9ad43d", @generic="e72ce988848d1caa1a516a852ea2e6adcf6eeb08130c0cb0f56bb30f2c6ddc049e28fba94348fab25501dae64585e1e9b3d1dd97b90012f67525d9f2941e891c49a790934c4113e92b1fd13bf99600ec46a78f36040d7f0ca12e33316615de78e18201e6268257495db38f8489e62667451d4b5c5fbc26dab187a085fc38460fdf4a00b6e0296e8e8679"]}, @typed={0x4, 0x31}, @generic="60f9bef6736c094641b795de8f1d530b399afd8548a69ef4dfa3f50f655092d0fd2b214879333098bf2199fe6253adb1f86b202548212271d5b8bd29a10a6d7ad7321e987e79f396bbcd39e8670adf068d4f5a5438d5c108c659c0f66a816bcabda4f9efa5869fbb72728b164c6b4b4fdb14a6a9692814b9e1a802d3b1444785911033f2ecb15c58b0755ab7848bbc3e67565abdb1195e65369cd638bc4ddfe6892308106a7d5ce0bb3034b4f641e99dcc381e3b4f76e59fc70c112de78bafe0c96c55ff2e6954088155b7836d810bb1", @typed={0x8, 0x4c, @pid=r0}]}, 0x1244}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 03:38:52 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x195}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x8906, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1081.234623] binder: 6845:6846 got reply transaction with no transaction stack [ 1081.242076] binder: 6845:6846 transaction failed 29201/-71, size 0-0 line 2759 03:38:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x88470000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:52 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x20000150) 03:38:52 executing program 7: getpgid(0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000140)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dsp\x00', 0x100, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) r2 = getpgid(r1) capset(&(0x7f0000000000)={0x19980330, r2}, &(0x7f0000000080)) [ 1081.354448] binder: 6845:6846 ioctl c0306201 200000c0 returned -14 [ 1081.381980] binder: 6845:6846 got reply transaction with no transaction stack [ 1081.389447] binder: 6845:6846 transaction failed 29201/-71, size 0-0 line 2759 03:38:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet_sctp(0x2, 0x0, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r3 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) sendfile(r2, r3, &(0x7f0000000240)=0x4800, 0x20000102000007) read(r2, &(0x7f00000004c0)=""/244, 0xfffffea0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x78, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x1000}, @in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e22, @loopback=0x7f000001}, @in={0x2, 0x4e23, @broadcast=0xffffffff}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x1, @mcast1={0xff, 0x1, [], 0x1}, 0x48}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r4, 0x4, 0x5, 0x8, 0x7, 0x364}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) r5 = dup(r0) getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f00000001c0), 0x4) [ 1081.436162] binder: undelivered TRANSACTION_ERROR: 29201 03:38:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x88640000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1081.514927] binder: 6877:6878 got reply transaction with no transaction stack [ 1081.522459] binder: 6877:6878 transaction failed 29201/-71, size 0-0 line 2759 [ 1081.632916] binder: 6877:6878 ioctl c0306201 200000c0 returned -14 [ 1081.640396] binder: 6877:6878 got reply transaction with no transaction stack [ 1081.647817] binder: 6877:6878 transaction failed 29201/-71, size 0-0 line 2759 [ 1081.685878] binder: undelivered TRANSACTION_ERROR: 29201 03:38:53 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = msgget$private(0x0, 0x14c) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/177) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:38:53 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x20}) exit_group(0x9) 03:38:53 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) r0 = msgget$private(0x0, 0xa) msgsnd(r0, &(0x7f0000000200)={0x1, "27fa8a9e692910d36e46dc14aaa86beee3a64d594d4567ef101a820939ed5f3b4b6ba9a59c89bca77e7945c2584f1097528bf748b5b0b13ac52d0304dc18a84e9e6fcfa0693a2ee859ae1a762895492a95feb5305f922284fa029a9fac55d938b137cd75151f97947c9c164292355e21ea9554314ddb9275638e05cfa16cbc99c6362ad2bc2522124232669cc300e45f3528db01488e7ab14a582deecc03e982b480f513a8d6de2f17c9123dbb1864e8316ce13ac9b363a83643d132fc6ca9e4b7f7aad601e5fa3bb8ba2aa81e6527a4d2ad38ffb363165a93f2e3bcad1aa2663e9f82ba73"}, 0xed, 0x800) r1 = msgget$private(0x0, 0x2) msgsnd(r1, &(0x7f0000000040)={0x3, "0d3436ac02e727d9463f4b2e4c1244fe9a37859375ca0ace656b1ebbb12ba2f3a84728f172934c6ce08dd6b8d026a8bea4c804a16f15c5ecf90083bdd8cfde0ca5dbaa590725754f3f9eaf3529e06ee2dc150a13498c9711119977f63860065eca2b50d841871fbb2ab46ab0c18323480c2b655857d157a4e8"}, 0x81, 0x800) 03:38:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0xffff0000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:53 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000600), &(0x7f0000000140)=[&(0x7f0000000240)='$cgroupcgroup\x00', &(0x7f0000000280)='trusted@proc)}\\&\x00', &(0x7f00000002c0)='eth1vmnet0em1vboxnet1mime_typeem1self\x00', &(0x7f0000000300)='\x00']) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:53 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:38:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB="00000000ec000000"], 0xfffffffffffffe02, 0x0, &(0x7f0000000480)="109e25d03111d3bca6ca543bc946c2b30f3e9b9ca19c39c4467c7117d8ff8011334386e00e26626c1f7fd6d56bdf422006251355912454763277592d09d7659825a93a452a27569b4c41ee81eb73e7222e592c2a3a6168a152f676302efc62144e1c0a266347e35c7a5d8047da4aab561e5661bba7675a9cf646b3d8f9cf3c88e74cbfc9a8b295810f51ce60c8a0b179e6d2"}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x2000, 0x0) ioctl(r0, 0x100000001, &(0x7f0000000240)="aa21985b4baa435819551d941b59d8a4ee29e5e0f31860072bb674fea7d12ff261de900d5e") r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x200000, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000001", @ANYRES16=r2, @ANYBLOB="00052cbd7000fbdbdf2502000000080002000a000000"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:53 executing program 7: r0 = getpgid(0x0) ptrace$setopts(0x4206, r0, 0x10000, 0x100008) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 03:38:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x8847, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:53 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x15e}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:53 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x1000, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xdf0, 0xfffffffffffffffd}, 0x10) [ 1082.156528] binder: 6924:6925 got reply transaction with no transaction stack [ 1082.163990] binder: 6924:6925 transaction failed 29201/-71, size 0-0 line 2759 03:38:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x6488, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:53 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4800000000000, 0x400) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000100)={{0x6, 0x7, 0x100000000, 0x2b4, '\x00', 0x7}, 0x2, 0x0, 0x20, r1, 0x3, 0x101, 'syz0\x00', &(0x7f00000000c0)=['[GPL\x00', 'self!vboxnet1\x00', '*\x00'], 0x15, [], [0x0, 0x6, 0x2]}) r2 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r2}, &(0x7f0000000080)) 03:38:53 executing program 6: lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="757365722e8a925c8752b2bafa46"], &(0x7f00000000c0)='%\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) [ 1082.247749] binder: 6924:6925 ioctl 1 20000240 returned -22 [ 1082.276653] Unknown ioctl 44545 03:38:53 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7, 0x4000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x109200, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x6765, 0x8000) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000140)={r2, r3}) 03:38:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x88480000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:54 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = msgget$private(0x0, 0x14c) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/177) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:38:54 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000040)={0xd8, "3025a7c832f067f3136a67c78abf2610c4264568cc57bf097595ff7770095502c1621d0ed87e31f476632658af988b66e48d8b71c5b8938d63fc2388e1c110952e649822d9b322a8a4d2fa96571ce5cb3d51f786b7188f49ad94dfddb575de5e689e7c721fcdc2ebc48f9063d5cd087c430efc77d7f28363a4df7a6746b4f4eb03d69235971952393be5ceab09a1e090baded1b04825456a04cd6fa7b89cac38487743cd19ce3515441e85af5561ca57b033ce275419c749edb0847f81be96738020d06fe69c60ddaa5612ba39e7c4b022dae809c3f5261c"}) 03:38:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x500, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:54 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) capset(&(0x7f0000000040)={0x200f1526, r0}, &(0x7f00000000c0)={0x0, 0x6, 0x6, 0xffffffffffff25ab, 0x9, 0x4}) 03:38:54 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x408000) r1 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x0, 0x40a101) bind$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000240)={0x4, r1}) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x124, r2, 0xa04, 0x70bd28, 0x25dfdbfc, {0xd}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x800}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x20}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x99a}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x100000000}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4084}, 0x1) [ 1082.959783] binder: 6924:6966 got reply transaction with no transaction stack [ 1082.964390] binder: 6924:6967 ioctl 1 20000240 returned -22 [ 1082.967303] binder: 6924:6966 transaction failed 29201/-71, size 0-0 line 2759 [ 1082.998156] Unknown ioctl 44545 03:38:54 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:38:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x7}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={r2, 0x6, 0x1, [0x56d7]}, &(0x7f0000000180)=0xa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:54 executing program 7: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000001c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) r1 = getpgid(r0) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 03:38:54 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xc6, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[{0x2, 0x6}], 0x1) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:38:54 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x3c2}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x8848, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1083.235931] binder: 7001:7002 got reply transaction with no transaction stack [ 1083.243632] binder: 7001:7002 transaction failed 29201/-71, size 0-0 line 2759 03:38:54 executing program 7: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = getpgid(r0) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) [ 1083.279466] binder: 7001:7002 ioctl c0306201 200000c0 returned -14 03:38:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x4788, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:54 executing program 6: r0 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xb7c, 0x1a1000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x400001, 0x0) linkat(r0, &(0x7f0000000240)='./file0\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x1000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) clock_adjtime(0x0, &(0x7f0000000040)={0x0, 0x8, 0x1, 0x10001, 0x7, 0x4, 0x4c, 0x1, 0x7, 0x2, 0x79d6, 0x7fffffff, 0x101, 0x3, 0x4, 0x4, 0x20, 0xfffffffffffffff8, 0x7, 0x1, 0x7, 0x1ff, 0x8, 0x1, 0xd6aa, 0x9ab}) [ 1083.329667] binder: 7001:7012 got reply transaction with no transaction stack [ 1083.337144] binder: 7001:7012 transaction failed 29201/-71, size 0-0 line 2759 [ 1083.354687] Process accounting resumed 03:38:54 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:38:54 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = accept$inet(0xffffffffffffff9c, &(0x7f00000007c0)={0x0, 0x0, @dev}, &(0x7f0000000800)=0x10) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000840)=""/251, &(0x7f0000000940)=0xfb) [ 1083.374979] binder: undelivered TRANSACTION_ERROR: 29201 [ 1083.563468] Process accounting resumed 03:38:55 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) msgget$private(0x0, 0x14c) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:38:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0xe80, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:55 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x8000, 0x228000) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000200)=""/139) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)) 03:38:55 executing program 7: getpgid(0x0) 03:38:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:38:55 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x80, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1084.010961] binder: 7044:7046 got reply transaction with no transaction stack [ 1084.018635] binder: 7044:7046 transaction failed 29201/-71, size 0-0 line 2759 03:38:55 executing program 7: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) r1 = getpgid(r0) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, @mcast2}, &(0x7f00000001c0)=0x341, 0x80800) fcntl$getownex(r2, 0x10, &(0x7f0000000100)) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 03:38:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0xffff000000000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1084.081641] binder: 7044:7046 ioctl c0306201 200000c0 returned -14 [ 1084.099541] binder: 7044:7046 got reply transaction with no transaction stack [ 1084.107065] binder: 7044:7046 transaction failed 29201/-71, size 0-0 line 2759 [ 1084.170434] binder: undelivered TRANSACTION_ERROR: 29201 [ 1084.196199] Process accounting resumed 03:38:55 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x2f3}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1263484000000000000000800000000c00000000000000000000000000000000000000000000000000000000000000000000000027175c5f4bf3f765b79194f925a462ef9d31190d3f3c78f05e3e00c1500000000000007fff1c7f5f7aaf1857c5e31b2f90cf6f26c4c32603efab993eb9c86b98f81c720c3fec625c37cd54aa9cafc203402fb986d930eefba4ef745608ee8993bd1c759488ef738df6eb3c2b731b466da1b9b11ff0e4a9cafcd2474ef73012da651f173ee917490270445afe0757ff77e533240e", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000500)}) r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, @loopback}, &(0x7f0000000380)=0x10, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000003c0)) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000002180), 0x8000, &(0x7f0000002200)={[{@lockproto_nolock='lockproto=lock_nolock', 0x2c}, {@locktable={'locktable', 0x3d, 'vboxnet1'}, 0x2c}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x20880, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000300)={0x8, 0x5c}) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000340)={0x6b, 0x400000000000}) 03:38:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:38:55 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x1998032c, r0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 03:38:55 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x20, 0x20200) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) 03:38:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0xd00000000000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1084.291396] binder: 7079:7080 got reply transaction with no transaction stack [ 1084.299012] binder: 7079:7080 transaction failed 29201/-71, size 0-0 line 2759 03:38:55 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x42, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1084.443709] gfs2: fsid=vboxnet1: Trying to join cluster "lock_nolock", "vboxnet1" [ 1084.451521] gfs2: fsid=vboxnet1: Now mounting FS... [ 1084.480289] gfs2: fsid=vboxnet1: can't read superblock: -22 [ 1084.553278] binder: 7079:7080 ioctl c0306201 200000c0 returned -14 [ 1084.562255] binder: 7079:7080 got reply transaction with no transaction stack [ 1084.569804] binder: 7079:7080 transaction failed 29201/-71, size 0-0 line 2759 [ 1084.583409] gfs2: fsid=vboxnet1: Trying to join cluster "lock_nolock", "vboxnet1" [ 1084.591190] gfs2: fsid=vboxnet1: Now mounting FS... [ 1084.602221] gfs2: fsid=vboxnet1: can't read superblock: -22 [ 1084.610166] binder: 7079:7080 ioctl c0306201 200000c0 returned -14 03:38:56 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:38:56 executing program 7: r0 = getpgid(0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0xeb25622697c51645, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000002c0)={0x4, &(0x7f0000000280)=[{0x10001, 0x7, 0xdcc, 0x7}, {0x780, 0x101, 0x0, 0x7}, {0x1, 0x4, 0xffffffffffffff71}, {0x9, 0x7, 0x6, 0x7}]}, 0x10) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r2 = syz_open_dev$dspn(&(0x7f0000001380)='/dev/dsp#\x00', 0x9, 0x204100) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0xe8, "216359fdfdbe364a6e0f09505d62340e3492460db6dc357d79371d2711d7ff79212df8f5feda896ff6b9e7bac755783393028436a62cff9aa037f77b266e0fce78ee66d6beee7508670c2dba8214853d5d50c9d5fd08dd93e0571fdb951c4630763275956a39facfb49f2cc50563666ce677b254086a8301eae6ca49aaca7d83f341faf2bbc6467a01e547d1389d9c056eb2d205fb526d1698092ead7bce7f09660d70a6ab7b8f4b21ce229d68cd66c7fb41faca4736b588fffda0b78d39cf476ad1d086ae9597deab27f94d4c73abf6cfe780411930952af9978637af09f7d5b083d9a78b4adb61"}, &(0x7f0000000040)=0xf0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000200)={r3, 0xf, "8b67fef88908433032ceccf606931a27f63dcb"}, &(0x7f0000000240)=0x2e2) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e22, 0x555, @empty, 0x9}}, [0x8000, 0x1, 0xaf0, 0x6, 0x7, 0xfff, 0x9, 0x0, 0xb297, 0x2, 0x3, 0x1, 0x200, 0x0, 0x7]}, &(0x7f00000014c0)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000001500)={r4, 0x1, 0xea, "ab9a38c629b9c375162aa661617e413ed3493dfbc437d8b27e371d918a867ae01ae1eb885cb5a9876f7fec855c9e00e3348ef278cc6865bf9c1b25dec8e0bf6f22568b57c68d385d6bdaa2b5ba6fba53aa43052d4750a92d270e0ab2695d8c28b74ff8ab9bc13732a96649a780db339a46d4d76d72303f825f6d697421d79123055830348be146c37d1fda4c294dad3da60ff69a14f75d22d12c7ba17947d99cab33282edce326207998113a942e8432fd23229672b2393dbb2d0057fdca8590efd577bb7710fa00e95fe11dff8249910d6e6461550c981c5dd30267a8d0dc8c6365101032de6b0e837c"}, 0xf2) 03:38:56 executing program 6: r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x4, 0x0, 0x4000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe}, 0x10) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000002, 0x100012, r0, 0x0) io_setup(0x4e6e, &(0x7f0000000180)=0x0) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x81, 0x2800) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x6d28, @loopback={0x0, 0x1}, 0x800}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000440)={r3, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}, 0x1, 0x8, 0x2, 0x7}, &(0x7f0000000500)=0x98) r4 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x6, 0x40) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x1f) accept4$bt_l2cap(r4, &(0x7f0000000280), &(0x7f00000002c0)=0xe, 0x80800) io_cancel(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x100, r0, &(0x7f00000000c0)="c87362cdd42ae8d3a2f9d11c9d6e5370d6fdceeed758fd21e9b521b339a1de564e6ea568b313520f62a4150cb07e46e56a763a738fbcdf9f0ab5dd1dd396bf56a2545959483bb3968ae7d570d693b351d855f3dae7f0819d24c90f8a7e885c2043ae589a2ca924f4496ab2aeb67d75671f54fa74874d1cb1e3c93cf6b788", 0x7e, 0x1f0000, 0x0, 0x1, r4}, &(0x7f0000000240)) r5 = add_key(&(0x7f0000000540)='logon\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r5, &(0x7f00000005c0)="fe54b88e1a05081b12b8f000885b6ae534247c7e5cc13a533e25098d39f46744355995e7ca710c6e", 0x28) 03:38:56 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x806, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4, 0x10000) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f00000003c0)) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:56 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1f, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f00000000c0)=0x3) [ 1085.023431] binder: 7119:7121 got reply transaction with no transaction stack [ 1085.031670] binder: 7119:7121 transaction failed 29201/-71, size 0-0 line 2759 03:38:56 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:38:56 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0xffffffff00000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1085.072789] binder: 7119:7121 ioctl c0306201 200000c0 returned -14 [ 1085.090096] binder: 7119:7121 got reply transaction with no transaction stack [ 1085.097519] binder: 7119:7121 transaction failed 29201/-71, size 0-0 line 2759 03:38:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x610000, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x6f, &(0x7f0000000080), &(0x7f0000000100)=0x4) [ 1085.148972] binder: undelivered TRANSACTION_ERROR: 29201 [ 1085.259845] binder: 7144:7146 got reply transaction with no transaction stack [ 1085.267348] binder: 7144:7146 transaction failed 29201/-71, size 0-0 line 2759 03:38:56 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x2d4}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:56 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x10001, 0x20a00) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) 03:38:56 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmmsg$nfc_llcp(r1, &(0x7f00000027c0)=[{&(0x7f0000000300)={0x27, 0x0, 0x0, 0x7, 0xffffffff, 0x8, "af79cb41774da93e9243aa3c384e51638f718e652b92ab7e298d642ed8906f9b32ca682488afced711afb7542d82f42f027bac58674c41fe98937f6411c31d", 0x22}, 0x60, &(0x7f00000004c0)=[{&(0x7f0000000380)="3a9c204639921ee8c9ab6e3c9c67746bd5f6a42209bd86bc7a462c161aa7f8e7fc45389c4138b1713d6638ed19d6c7fe2b35f62f18bf506c80fc75a2433bb842bdf00f3e6f2dc31df88734de2272cdebd1840b73047467f70015f9a09da78ee005a197c5f99c8887f4d79539fe8cbe9c02561b25cb", 0x75}, {&(0x7f0000000400)="065c55aa72e7bff94bd6853b19389bc00448d8de47333f1394b32fbf2f44b2f6c2f51a1c4c83f3930a0238596fb059a101d0ca89509e04af33ac0029b79f8ddc0230bc03b93d8dcd6e212ffa6245831fcb749421fbe4083c1ee17e41bc45795d172b9325f0b44c758a01894e1bac1895cc687a8f7a0e283fe5", 0x79}, {&(0x7f0000000480)="0157419cb6ea008cadde95389031e47cbf5a3ea68d8ad95acd37d20a750a789d46d9cc8a75293689d3bdb62bd888765383109a3ba5", 0x35}], 0x3, 0x0, 0x0, 0x40000}, {&(0x7f0000000500)={0x27, 0x0, 0x1, 0x6, 0xfffffffffffffc01, 0x1, "0e0fdba5041a8f9d7421e278b0e602c079b57f2aac961077abfcba8f47d89651986170d8e8e89ad86e6da896af05eb3ff69be35f48a0225b720c876095785a", 0x3e}, 0x60, &(0x7f0000000ac0)=[{&(0x7f0000000580)="80f529c4573b096d9351b9bcbdf924acf62c1b8a01e7bd8f62754b25dd9c9eee12c5007fe1409f647353fcf976a357bef9af107edab3280adbf689f7b83d881d21d4b6725daf5fc23ef676f16ff93e80215a82934ddc8d07c6e2b68e49b3735440cdd1fcae51f2146b3285e10adf4ab950e510efacc9d568e75488db459da1ee2058cb51a77775644e2046b1ec973d5bfc048f611c7e3bdfb83cb74ee4f2accd060d9b", 0xa3}, {&(0x7f0000000640)="b4203ad81c11d6f111c95e3fd100c2e2fd4035794e9e20f61f42d6628baee7142737cf1b3fb6b0e4aeb30060799170fd151df396818db49ab5b9414bc21fc267b20868c0e42dd274", 0x48}, {&(0x7f00000006c0)="5908ec6b232c0f71ab5d74d5198a8acbd8cd1674d0b62700303298fc1205f4f038c0797c5da37aadd65865d6c530c16d8ca3f741142a9e8f4c706716e3ead6392675079c95b8dfcc5d0176aa171e420fd0c55504bbf1c1732155b17bc411f0d849226aad95ba90ef7357f1263521b3ab354216759fdfd0d02012c91a0ffef90d145511985b4c4c56a2471732af99a96d26bc80a214a9e957a3d60983823e8a21c1ba95edec", 0xa5}, {&(0x7f0000000780)="7fb283309e886e31119a722797b452d0cbb069bac60669910a419a6f882b5256dc60209d51132d32ae8048405eaea17836d1675dca5e7a35c6d0603be57c1ee732acda93ddfc8ab039292a9602642eb341f67c0cd410c435f05eb99b5b050c90db6e2569544a6dd073ca0263822766c9f640e56ba7d7942d2ed0325ac382e092cd044bc2367134e76ca01fc3", 0x8c}, {&(0x7f0000000840)="1322a4596c69dc82c1eb51b5643948d9769b7677350b408451936ce82c614793309c3f15fe23d11c24a6a3a548206ae88069b14e2d597800878693583f4c2e04d0c3fe82c411aee32f455fa2615da076869d6032955eeff7ab9ce820da55917a9bebb0caf64410a952f06866d6cdff7cc7d2f4339960003bbfc7a8429571074b9bac4fbea8f9210d81acb232f5f5bbe591dfd892931f4810b9dde54b0f6c6b367c456b4792a67f5bf278ecfe6559300b7876e01e25ef3910fc1c23e7282b8c8df4944c81cc2045c994c70b352db9f81fe36a92fa32335bb8037002f76c5473a3b92ccbb38b373f465b362fb39c03266525a7ff6f8f83", 0xf6}, {&(0x7f0000000940)="f7d603905ce041d8aa1762e84401721a20e8e8cd1ab134370c30163adafa1e77377b2d9c7884fcb08c7e03375c62deb433f7ec75d4988473a2a2489c8ad43d5ca7ef7e71bcbdf02110809ae3e6296c7ef578be54d1bcaad27e7e9957e79bd6dea49dd10399a272cb1515ead199ab42dacde4c35e2776eb4a5a6849b140a15c2eec62c02dbcdb89f03e3bf44ae51424122c9810cbac4306c1dc8a1fa6af", 0x9d}, {&(0x7f0000000a00)="42c12de1f4486a959bb56100ea5cad2e460ac7f23a5da8c7b883d2e8b35fc55518055f9fa97f076dd9f5cf1ab727a9", 0x2f}, {&(0x7f0000000a40)="9b1dddde7c1618d91a7446d0b16ba9b3fba5627e5dc56e4aefaf1bfcb4f939c4490eb29d66f57fc6fa958deb51dc4a6d7909b678f4fbb1c7de5b7866cd5ae206d2bda663cc415d60c0dcc33c7c21fefcca591112631c1563ea4d269247af0ae2ac28d9e637d389084168ed29a0b1ac4b85a7c2eed957bf", 0x77}], 0x8, &(0x7f0000002940)=ANY=[@ANYBLOB="d0000000000000001701000008000000b0cc8040d0b3dd85e5a51c9aa0666119de180bb2bdf423d706c0c41d97caf652363de27ce8668b8d1fdcd930936d3acdefbf6e091ce6997e47d511bd80d58f08094d27c40a5aef8921a35e15acd785da0de4b85db25f8821cf4351e8e11b38169395484ba5dae26dc675767f8435acea03b31728e4313f4360734f8462b3856a32efc9d2792b60add8577418aa002ac841ae1bfc09f3a22e5ac209d22cfb0b65dd1f91d0383de5660801eb9f2bbf4cc470fe8c0eeb8bbc0cb5b1058042b0f5a7db250d537f1f5862a9bdc27466b99f85d6738fadfc751cf200f23f7762fe0705b06e4208564d29ae6cd6d8e2bc8300f86051b272e3809bc6d61423eee44c8dd0ab4e5739ae7295762a9223f7db98b35f46de7b72a48e4aa3769a25b58843df4d2c37c79eefaf2ddff2"], 0xd0, 0x1}, {&(0x7f0000000c40)={0x27, 0x0, 0x1, 0x6, 0x4, 0xc52, "7c4759c6a2670d53af1f463bab7742350c1b7860dff70882b45b5ff2ffbde4923c0873b194cfa2a78c671c910e58eae716c6c9e71736ba884e2e338f4d42be", 0x36}, 0x60, &(0x7f0000001e00)=[{&(0x7f0000000cc0)="f792caba3992096769c3ea82ba8e648a59b0", 0x12}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000001d00)="50272a2f21bc03e666bd793956dbd2b01bd56291a7f4b9e6b64ffb0df11659dcc6efdbbd9c580ae3a87189ce9d861cc4e0b3c995fc7a9b764e245c29de21ed2ed8df7857fca170e2ea9ac9668f05663bbd90be2d437637300991c97bea2b999d9d446dd4c351dd7a8be3fea7ddcf8c7484e2394b55445afcba9540780a2675d888d149c8e0604959aa07a79d3f10b420fa02dff891a16248dce8bbc2cd794d79c29161187a37b7f68b7343e6c842f883e5866bf949fabc81f2cdbb0b5208a6a84479a6a57072", 0xc6}], 0x3}, {&(0x7f0000001e40)={0x27, 0x0, 0x2, 0x7, 0xffffffff, 0x7, "39a0d74154534af99d8a7ace7cecf6a589b43daf90a9d27336c4c6a0bf38347bb1882f288617ffbb563e08b862bc231317e2693ecc17471fd809d6009edb96", 0x39}, 0x60, &(0x7f0000002380)=[{&(0x7f0000001ec0)="1b0c4fda923a6ea6650ff9997308f9092c3ae461e6b3f450b3398ed49f83ae5e4f395f1b22428d1f30cda1b7b06a78772167ebe82a15ea4254435d31c2f10b74bbbd2a43bf3a5d28bee6a048fbc5af7c286cc3125550c6ca79b7e51b660b97e704e4695fd405d98bd7e9374fae25969b9b2a1ba96701cac04cb56d9a47edee0d974a8fe49f535e3f88d1beed43abc71b3e09c5f3cc4d648122", 0x99}, {&(0x7f0000001f80)="57d93bb0ab4949f60cbc4533d08ae71611e9da4e4fc8b024f2246bf5f9ac4aa19b4eb327dcf998114a1337aa5e30b7c01bd3f6c2076689d0ab90edb1458e", 0x3e}, {&(0x7f0000001fc0)="f7e682d926278aa0d3e814bd959b15c0710abb1075c3cf175b4f0b12269710ca8301516c8de3c55688472b43affc725be19013cab62e7becdcc9db641c843d660e363571873231f1148286bc698dac10ef9befabd98d70f6620288ff075986a97467cc3fdb08c85ca5cfe164e6504659b60e89e0e6325816352768ace7f75c6cbd0ddc78791224e75e89a37522f457d8d24a3fea0f3f0085d9", 0x99}, {&(0x7f0000002080)="9fa2f266ef9e8a6cb655c9dfa152da7092933c37e10638e4325ce15b9b6c5f2a365de665a14a61c88e0067934e20f087e2a4f92deab42f620dfa7329a93f65674cdb6ec9f7ca31e3dd2d475a51873b0053b0bb7ac3ee15114488f573d0c9409fabee44f8fab89fb87c2e00af848d2c82ba6c51e0c140a02bfb80cc97fdbcb2d4ebe8a32021e1af10a46ce68a25786df6c5a09f4d85fdfaf85dee72445bb1d181cb1bf150c6a5db2d9e4485aa67e281528fa2cb14e738826cfa3727f16926", 0xbe}, {&(0x7f0000002140)="0feb9114c410aaf12db491ef2d1975196b6845259df09340d516dba6a3f253b790b64724fb7cf28023fcf38133a870950f12f6f0", 0x34}, {&(0x7f0000002180)="c606e5a4b4f686ce127df4295b822c7855f99d39499e1ca71cd0ddcf70941d9f0803e4d7bcb5c7cb68c5b3e6d69968a4f84359ee1a0c9f5ba7bc52f54387ae9c101144b66d2ba5a371b6515c5bde4951bfc64911dedd897d443ef223c5a518a6f0c87f78586303b88805c0a06629140adb031edcd284586f1c9fde33c002e63e6466d4ba37c6a351db9004dd308f379b7c51d644c9c2a3ba01e6a575cfb9320abbfd5f6d1d0b7d4ae463ef72eb41e8d4b121d55687838e6fe87cdffbd3b16b9a9b9e3504ce5656f8d033981e5b650ccdba5b9321c2c7c5513a4dc9aa015185ce", 0xe0}, {&(0x7f0000002280)="66f183a84b7c25884003790fa89e42ffcdb8dc322feb1d96678c28a2068b90bd375177df5efc83d5b2934f5cff2b15378d17d5a50b0854cee782d56c72c76701d22baa3f001e301bd737551908856b47deeca0185a96adcdab032c3050772ed82a8b463041c6c353a34a52b044bb79888a56da54892e47e6d846b434b19390aad6891263b7cb3ce4e1e48ab444a313a61e4857f9b6de291a99fcd748304def0e6000376ef0b79953fcc499614d4806f2673b4e86e693d8bd35fd", 0xba}, {&(0x7f0000002340)="4367fd894b4a6e720109214ec1143fc68464ee982ba7c76e92b8", 0x1a}], 0x8, 0x0, 0x0, 0x40004}, {&(0x7f0000002400)={0x27, 0x1, 0x2, 0x5, 0x8, 0x6, "7b8ba0e9ff1ca5acf9b6db5fb9c084772626356dcb223235de70274d7ca821b872ea29e050ff0da3979fee40fc37e3016ce8b258dcef47e1b92e01bcfcdfc2", 0x5}, 0x60, &(0x7f0000002700)=[{&(0x7f0000002480)="980f6eb5093fcb9c3d63ba79969a7d1cb995b5631ad75976389b841c5cf3099bc5405eb993440aae4e3d83f32827ac42f751d51d0d79d8b25bd365993b47900ac25e2d3f4d61229cac3b0f34c9e0ac078d2ee41f272e0ad39b1ab35178a7534ca7f77edafe1fc51ea3dc01709640ec289049fc7a0cd6c99774ec49404b48fe5d594a", 0x82}, {&(0x7f0000002540)="67f42958492a1991dc556b032d469a2928f8f04648147286ba586c742c6d11840bcb271bbe0bd77ad401b90b0103d27d4e22c66a6eecc72a27db0cce7127d205fc57a4be137f68d07937b721fdcffba4225c7b865dcb9b0427fd2dee323ede4458f9f3051b625c142139d3bec56cf675c38ba6cc7d4ce485094889e380ee33d01352d79213e732d2e3b40450dd2c30317dcf9006e9070ebbca1b6849d72086380c65537eff789efe2c05924b9b93f93aebc32f2844b6c9ac952eb33dff2ea24cfd6b755c870e66b5f63a73a542507603e4596a77", 0xd4}, {&(0x7f0000002640)="bde5a13ba814085f598e5f284d3aef7251096b812cbf9485e31ef359b673eb4fdf2ea0e6b71a01bbd443aa4e9c8deb18369bf0900377e6e4a18329f023703f2270cdc68de9fcad03cfad8ddfc32c2a29f9fc3afefc7f1b4ab6687dc1aa50355708afc3044ea919610309eb3fda60bd6ab0608c752312c0d863218be3eb7d7c497c74ebbd9eb4aa481a6a1723669cd51ee0dacbac", 0x94}], 0x3, &(0x7f0000002740)={0x50, 0x113, 0x3, "3d2f0d49c35036b8b46f37c0cd115ab55fe870d8537353dcfa4d24e723f6d5521eb4d131ee8960fd06b98ce9f10146b62c1f75d9ddfd5147baff6d02e12d"}, 0x50, 0x8080}], 0x5, 0x1) waitid(0x3, r0, &(0x7f0000002900), 0x20000000, &(0x7f0000000240)) getrusage(0xffffffffffffffff, &(0x7f0000000040)) 03:38:56 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x400300, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:56 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x8000, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000240)={0xc, "8938168b7abc0823ea532247"}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1085.311361] binder: 7144:7146 ioctl c0306201 200000c0 returned -14 [ 1085.329679] binder: 7144:7146 got reply transaction with no transaction stack [ 1085.337665] binder: 7144:7146 transaction failed 29201/-71, size 0-0 line 2759 03:38:56 executing program 7: r0 = getpgid(0x0) capset(&(0x7f00000000c0)={0x20071026, r0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x80000000000000}) 03:38:56 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x20000000010000, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x200000, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x14) getresuid(&(0x7f00000004c0), &(0x7f00000005c0), &(0x7f0000000540)=0x0) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000480)={0x81}) sendmsg$nl_xfrm(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a00010c26bd7000fddbdf2500000000000000000000000000000000fe8000000000000000000000000000144e2400014e2200000032314efb7008065b55a6e76b76d2ad095ec362a2ef48392673e26c3ef8b1ad12706a350fffc95e88adddcda2cda8dccdfb2958cdd08c4102bbde8086f5f5c75571147dd3bff823ece254c5d0", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="ff020000000000000000000000000001000004d5ff00000000000000000000000000000000000000010001000000000002000000000000000500000000000000aa9100000000000007000000000000007f00000000000000090000000000000002000000000000000000000000000000000100000000000003000000000000000500000000000000faffffff81000000685e762d2bbd7000010000000a00049c40000000000000000c000f00ffffffffffffffff"], 0xfc}, 0x1, 0x0, 0x0, 0x40}, 0x4010) [ 1085.387408] binder: undelivered TRANSACTION_ERROR: 29201 03:38:57 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:38:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) ioctl$sock_bt_hci(r1, 0x0, &(0x7f0000000100)="335d1936065716a9ff64bac1ba7e89e2a5f99af13dcf99a5d19b8e47ec65073d46466471642de3453de4ebd4345ba02635d713aa22dadb0d5825603f85e49ef5942e710de6a1f9ad874853712f2797f61eb1a4a0b2a3d2fb0540a61470e9bcf00fb0ac6d3e3dda463116f7bff32989c8466df6619893e9f4123a2fa94fbd144548816ceb2326be05dfad70cb6e28bdb2e8290f88a80cc6ec079e06f09d47602c7b2b5ca7a473e4ba2c78e4f995c4db3808f94eb24a") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:38:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0xd000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:57 executing program 7: getpid() r0 = getpid() r1 = getpgid(r0) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 03:38:57 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x5, 0x0) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000240)={0x101, 0x2, 0x3}) flistxattr(r0, &(0x7f0000000280)=""/92, 0x5c) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x400000, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000300), &(0x7f0000000380)=0x60) ioctl$KVM_SMI(r1, 0xaeb7) 03:38:57 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)={0x6, 0x8, 0x0, 0x400, 0x0, 0x4}) 03:38:57 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 1086.017837] binder: 7186:7188 got reply transaction with no transaction stack [ 1086.025362] binder: 7186:7188 transaction failed 29201/-71, size 0-0 line 2759 03:38:57 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x1000000000040, 0x0) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000500)={0x4000000, 0x9, 0x800}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) ptrace$setregs(0xf, r1, 0xfffffffeffffffff, &(0x7f00000003c0)="3fefc94e8e41f072b7963f162bc0e30fdb76d7d294fcc7a050e9faa4f2580398e210049cc271a01d2e701ca58aff4b2c9c81fd3c605067d341735eac1e881df8731dc74848fe940cae3c6200e154b74bc43ed733452749f749e9e77d6a1cc3a3dd43048a25e68e351fe7406e39fea9c7699a19fe022175e3f76a7756125a3b10b9bdc2fb898f1704c95b5e07") getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, [], 0x1c}, 0x7f}}, 0x9, 0xcf8f}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000002c0)={r2, @in6={{0xa, 0x4e24, 0x1, @mcast2={0xff, 0x2, [], 0x1}, 0x4}}, 0x1, 0x81, 0x1, 0x4, 0xff}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000480)={r3, 0x7ff}, &(0x7f00000004c0)=0x8) 03:38:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x8864, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1086.081185] binder: 7186:7188 ioctl c0306201 200000c0 returned -14 [ 1086.103397] binder: 7186:7188 got reply transaction with no transaction stack [ 1086.110979] binder: 7186:7188 transaction failed 29201/-71, size 0-0 line 2759 [ 1086.210928] binder: undelivered TRANSACTION_ERROR: 29201 03:38:57 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x2a4}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:57 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:38:57 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r1 = getpgid(r0) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x2, 0x900) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r3, 0x100, 0x70bd29, 0x25dfdbfc, {0x7}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5f1a}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x33}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 03:38:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000040)='\b'}) 03:38:57 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x80805, 0x80000001) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="bc0000000b48bc84fb10d2bb18074e31f583a0984a2a36950bec5572190d08ab1d723cb5989dd555189c312417bec8c6b9f54c9c7610073530714b1ed3dc0fcf1b29636ed386ea00f2fe4e757e2b15c2bbec54be5dafac4e4871855e1f4cc85f2de84c2ad10b2816bfe9ab15a232286913503e15b5fdc35ba0c3a40792577cd97bf964c16a6a3ef015d76be1f923e12a80e1f89f039a28aab12920e53ab08622594e00371ecf5d69f07c5b4d7dd9e83fd0000d9cc09a4ecc254b2aa8de507c45"], &(0x7f0000000540)=0xc4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000580)={r1, 0xffff, 0x30, 0x35f0, 0x1f}, &(0x7f00000005c0)=0x18) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000006c0)) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x86002, 0x0) rt_sigaction(0x3c, &(0x7f0000000600)={0x8, {0x8001}, 0x8000000, 0x4}, &(0x7f0000000640), 0x8, &(0x7f0000000680)) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f00000003c0)={0x9, 0x294, &(0x7f0000000200)="3d8afec050095aa3bf05e98e8acdec8cd922d9a5be9529827b3d19aded69eb44bcdf86ceca19c06ef92cc61f39f99f3962dba488d3fca175488b7a21f1c69e8a11411401ec4aee216aa8d4db9e9fc66c2f324cdcf80e5fb146cde859b8f92e3410acdc493640cbeb1f8bf026a6ecf6c56b5a726a508f77c7d8832b63921cfe2f933d3bb8447492607a3ab7eb4de94a8af9cf386e1a3339b99de6c507ea791e92b365626ff897de6842f5cb08563878f7aef6e1a17d6730a4dfea5fecad89cdd89ab2f38edcbff6572166", &(0x7f0000000300)="f61aba032f9f455b49b3d406b7cb4874d1f4dc1e6e61097d50d5afc6e9044c286e5c13766474c95dd17dd18a3684d3adc362312e429cd426a20ac2c7603af6e8714ad328455e3f4637187138f924e2467e2f8d41f3ade5b9d2ef34738b37da7ea05590258bcffbd2813c8a2268871c99e09dc4d27d994c27f2848c7e81b402c4225daf8b926d9b7e78f3c3e0f4a2c36abaf6084b3b52e1cc7857aec1", 0xca, 0x9c}) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x8847000000000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:57 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x6, 0x2, 0x0, 0xfffe}, 0x10) r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xbf, 0x80) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @empty, @local}, &(0x7f00000000c0)=0xc) bind(r0, &(0x7f0000000200)=@xdp={0x2c, 0x4, r1, 0x17}, 0x80) [ 1086.345868] binder: 7220:7222 got reply transaction with no transaction stack [ 1086.353291] binder: 7220:7222 transaction failed 29201/-71, size 0-0 line 2759 03:38:58 executing program 7: syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x2, 0x105180) r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) socketpair(0x7, 0x807, 0x1, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000000c0)=r0) socket$bt_rfcomm(0x1f, 0x3, 0x3) [ 1086.442700] binder: 7220:7222 ioctl c0306201 20000080 returned -14 03:38:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x8000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:58 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x1}, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1086.491182] binder: 7220:7222 got reply transaction with no transaction stack [ 1086.498660] binder: 7220:7222 transaction failed 29201/-71, size 0-0 line 2759 03:38:58 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x3}, 0x10) getitimer(0x0, &(0x7f0000000040)) 03:38:58 executing program 7: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)=')\x00', 0xffffffffffffff9c}, 0x10) ioctl$RTC_VL_CLR(r0, 0x7014) r1 = getpgid(0x0) socketpair(0x2, 0x80000, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000140)={0x1, {{0xa, 0x4e23, 0x8001, @remote={0xfe, 0x80, [], 0xbb}, 0x5}}, {{0xa, 0x4e23, 0x200, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x8}}}, 0x108) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0x10, r2, 0x0) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) [ 1086.550625] binder: undelivered TRANSACTION_ERROR: 29201 03:38:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper={0x630c}], 0x96, 0x0, &(0x7f0000000100)="c49acd8c3d98526d1f6781801c47c4a895191a1229235e8f1ed55fafb02e0f0e71ba3568a021fdbb6fa9527783b049b1fe30cdfe294fde391b57499459cd3b7507c15518865fbce036c7a8377d24607b15bbfda6620573490a95947cc1002b5db71229ca634935100ba2e6acb1d5dd0846419b8d88910ee1ffcd778bcf5c668ff90cbecfe490d260823daae7361a066fe7c3b0876aac"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1086.700238] binder: 7264:7265 got reply transaction with no transaction stack [ 1086.707769] binder: 7264:7265 transaction failed 29201/-71, size 0-0 line 2759 03:38:58 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:38:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x8060000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:58 executing program 3: getpid() socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:38:58 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x27d}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:58 executing program 6: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x2000, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x4, 0x40, 0x5, 0x7f, 0x0, 0xdd, 0x400, 0x0, 0x0, 0x1000000000000, 0x81, 0xfff, 0x0, 0xa995, 0x5, 0x5, 0x0, 0x8, 0x8, 0x8, 0x6, 0x8, 0x0, 0x3, 0x5, 0xfffffffffffffff7, 0x6, 0x4, 0x7, 0x1, 0x5, 0x7, 0x5, 0xffffffff80000000, 0x27, 0xffffffff, 0x0, 0xfffffffffffffc01, 0x4, @perf_config_ext={0x5, 0x10e06136}, 0x1000, 0x101, 0x10000, 0x2, 0x7, 0x3, 0x1f}, 0x0, 0x7, r0, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x5, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:38:58 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = geteuid() sendmsg$nl_generic(r1, &(0x7f00000013c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x14600800}, 0xc, &(0x7f0000001380)={&(0x7f00000001c0)={0x1184, 0x26, 0x800, 0x70bd25, 0x25dfdbfc, {0x7}, [@nested={0xf0, 0x1c, [@generic="deb431abf39e3635e80c6015593d27dfcf3efda53526e765ba2e4b79648de28581533241ca5894da9e565eadecf39e1ec2ffb88c1268cb4f014284d82c290b8b2fe4f592f17fa038d3d600425c884a338d92b904ecd8544a0d4af2890e425cc95b39192862fc04c1620cb3abdc3013f4fea2231a48557fae2d396f338a21be4a3591f7e5dfe49cbc30dd26e33f7c5c96beccfc113131cf1cb59addec96a87ee4242c6902b2b0d3e96d431ed3e3f48100b726866059f37aa7f388225d092ab84c784cce14a730cff9bfd80aa4951198f78f16ff3211c89cb758f95ea77503346752f4be", @typed={0x8, 0x20, @fd=r2}]}, @nested={0x105c, 0x58, [@typed={0xc, 0x59, @u64=0x101}, @typed={0x18, 0x74, @str='/dev/qat_adf_ctl\x00'}, @typed={0x8, 0x33, @u32=0x6}, @generic="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", @typed={0x8, 0x23, @str='\x00'}, @typed={0x8, 0x76, @uid=r3}, @typed={0x1c, 0x59, @str='}!.keyringppp1:wlan0\x00'}]}, @generic="df07511b99dfe1a7a5a9a8f3bdf1a8118047f47e01f9f49e1ee58642e4b2aeddf9"]}, 0x1184}, 0x1, 0x0, 0x0, 0x20000001}, 0x48000) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x200040, 0x0) write$evdev(r4, &(0x7f00000000c0)=[{{}, 0x66, 0x10001, 0x5}, {{0x77359400}, 0x401, 0xfffffffffffffffb, 0x7}, {{0x0, 0x7530}, 0x0, 0xffffffffffffffe0, 0x10000}, {{0x0, 0x2710}, 0x0, 0xa1d, 0x8}, {{0x77359400}, 0x81, 0x7fe00000, 0x40}], 0x78) 03:38:58 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:38:58 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000140), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x20) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:38:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x86ddffff00000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:58 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:38:58 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) perf_event_open(&(0x7f0000000040)={0x7, 0x70, 0xd34, 0x5, 0x6, 0x8000, 0x0, 0x8, 0x2, 0x0, 0x4, 0x518f, 0x4, 0x0, 0xfffffffffffffe01, 0x0, 0xc0, 0x7, 0x0, 0x66e, 0x5, 0x1, 0x200, 0x0, 0x4, 0x8, 0x9033, 0x7, 0x7fffffff, 0x8, 0xc6, 0x8, 0x8, 0x6, 0x7fffffff, 0x3f, 0x1000, 0x8001, 0x0, 0x6, 0x6, @perf_config_ext={0x1, 0x1}, 0x1040, 0x7f, 0x4, 0x7, 0xfffffffffffffffb, 0x7c09, 0x2}, r1, 0xf, r0, 0xb) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:38:58 executing program 7: getpgrp(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) r1 = getpgid(r0) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={0xd22, {0x2, 0x4e22, @rand_addr=0x3}, {0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x0, 0x10000, 0x80, 0xcee5, 0xafa, &(0x7f0000000100)='bond0\x00', 0x0, 0x6, 0xa368}) 03:38:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x4800000000000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:59 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = getpgid(0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000002900)=0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002940)='/dev/snapshot\x00', 0x100, 0x0) syz_mount_image$ceph(&(0x7f0000000240)='ceph\x00', &(0x7f0000000280)='./file0\x00', 0x5, 0x9, &(0x7f00000027c0)=[{&(0x7f00000002c0)="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", 0x1000, 0xb5}, {&(0x7f00000012c0)="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", 0xfc, 0x3}, {&(0x7f00000013c0)="286bf806eed5c9fb0b4f7efb22d48028c76d039138bcce514758c8af97115e43084696000ffec734afa3e8c4", 0x2c, 0x5}, {&(0x7f0000001400)="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", 0x1000, 0x6}, {&(0x7f0000002400)="b4d5260340bbbd703688854595db36ab80f2f8c5565e43d6a4fba983b08d270b2e877459ea443ee0a5ea0f63090a4348a054db8d530df1426770ab274e212ac8af5982124e27269d596c2c67d116a85400335ccb6e13316b2e36cfbdf0bfe80e3d6bedbc3fcdb6579ccad7b839a64de32c54df3445639699919a48402d07a58193915e27251852b9997f86cdb0f5fd0adc82b30c7e1c1f5edba376195c8fa49a2b18d07e9e5074b1367255e402cf94b9d3af41684174f5629b87137bdb17dd644a7b6a5559fee911ad50ff72563b96095ec82d73215b0b19154cf544c25a529216f8fd2b6ad0217b61fc81", 0xeb, 0x5}, {&(0x7f0000002500)="7cb4eed8f8d24cbf63ca4610da2354449fb0fe08", 0x14, 0x80000001}, {&(0x7f0000002540)="75c26662b3d50d314e449c985212f191fd776d4fed78a4c188abb9f876077ecbe0ac0c548690a9dbaf738b5a872fa067e72371865375eedd8f36215b678ac297b9f9f257d02677e90862b87df1be9d90c7ee0d98fb5b0e7c11263436cb1634fba495d1668e2be47f220b112989db0002320f00c2470c4750e0281de4f27f6a5f93a7eaa9c693bfbae472320ca48bcf686c520cf242d4b59c88cceb3a74ddfc16afb63f2d0df6c76fe8336b667b", 0xad, 0x800}, {&(0x7f0000002600)="b01f27ae3f1520d0f78cb0e1f07774624ca2d3e9186788df534a1a6352962c7cb56ebcbc23cfaabff8f051680858530340b0c0503c81ca6b6418dc78665a993f9c889b9265b7e8e45a7b821faed9953f18c0cf1988a70edbed00152a937394748ea45b3e762e47a026e95e71e501a188fa48c73034d7ce4238e1e12689c8d76b44f82c33067f4e759ee92de0a628fa8f429c4df59bad0ca88434fb88a4adc87ed46732a679994003375379c7726e0090c1b1", 0xb2, 0x40}, {&(0x7f00000026c0)="c122afc459dbe81628be03b1fb38ede40b457ab0549dd4605542228f8d8f1ace8c895c57432cd8e2e6e181cc9e390c5de610c0523f4f0d42c9cdf3fa210a32cdbcffbdf4aa1aca36952640cf353e344381266051a257e6f682bd47d1af6810249356628309d38a72bb26a3b2e60eac033f186e2e19df89348bdc1aff7221d95580f60333702382df00340273f3204f66e871313a09daa8defd90f4003efc5f35925f84f954ff9471bfb82a35f70d4d443bac34f23bc2e7af0066578b7a3de5e843b104fbf99fb3", 0xc7, 0xffff}], 0x49000, &(0x7f00000028c0)='cpuacct.stat\x00') sendmmsg$unix(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)="edc528cf91ec67c05535ed5a2cc79a0b0a55f8ef797b2e819b5bcc0e1019fab054f82144e39e79be480ccb32a3ab9e25f27c2741ee1dcf1971c441c8a30bf9a3aef024095134cf299e76c8f36d5b69138f465856b7537d24c32245598e3102ff", 0x60}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x880) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 03:38:59 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x826}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) [ 1087.502912] binder: 7264:7334 got reply transaction with no transaction stack [ 1087.510474] binder: 7264:7334 transaction failed 29201/-71, size 0-0 line 2759 03:38:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2000000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12634840000072e25fc590daa199daad7fb58d3400000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) lseek(r0, 0x0, 0x7) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x30) [ 1087.559546] binder: undelivered TRANSACTION_ERROR: 29201 [ 1087.677491] binder: 7350:7351 got reply transaction with no transaction stack [ 1087.684900] binder: 7350:7351 transaction failed 29201/-71, size 0-0 line 2759 [ 1087.704621] binder: 7350:7351 ioctl c0306201 200000c0 returned -14 [ 1087.711976] binder: 7350:7351 got reply transaction with no transaction stack [ 1087.719399] binder: 7350:7351 transaction failed 29201/-71, size 0-0 line 2759 [ 1087.738301] binder: undelivered TRANSACTION_ERROR: 29201 03:38:59 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:38:59 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:38:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x88caffff, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:59 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x384}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:59 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000001100)={0x22, 0x9fe, &(0x7f00000000c0)="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", &(0x7f00000010c0)="710c0bad4bd4ec68046fa8c2c0d59e96c1d726729dbbf6d0c2e1", 0x1000, 0x1a}) 03:38:59 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x8, 0x1) connect$vsock_dgram(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710, @reserved=0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x10001, 0x6}, 'port0\x00', 0x10, 0x1024, 0x6, 0x8, 0xfffffffffffffffc, 0x1, 0x200, 0x0, 0x0, 0x3}) 03:38:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000340)=[@clear_death={0x400c630f, 0x4, 0x3}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1088.105373] binder: 7373:7375 BC_CLEAR_DEATH_NOTIFICATION invalid ref 4 03:38:59 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) 03:38:59 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:38:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0xffffa888, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:59 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) prctl$setptracer(0x59616d61, r0) 03:38:59 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x10000, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18}, 0xfcf9) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xfffffffffffffffc, 0x480001) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f00000000c0)=0x8, 0x4) 03:38:59 executing program 7: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='[selinuxposix_acl_accessppp1\x00'}, 0x10) r1 = open(&(0x7f00000002c0)='.\x00', 0x2041, 0xd8) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000300)={{0x859, 0xfffffffffffffffb, 0x199f, 0xfffffffffffff001, 0x2, 0xffffffff}, 0x40}) write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="10000000173000000000000000000000"], 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x1000, @loopback={0x0, 0x1}, 0x8}}, 0x3, 0x8000}, &(0x7f0000000200)=0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r2, 0x10000, 0x92}, 0xc) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000100)={0x800, 0x1}) accept$alg(r0, 0x0, 0x0) 03:38:59 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:38:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x4305000000000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:38:59 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)="0f", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) mkdir(&(0x7f0000c92000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r2 = open$dir(&(0x7f0000000180)='./file0/bus\x00', 0x0, 0x0) writev(r1, &(0x7f00002c8000)=[{&(0x7f00007fbf5f)="b7", 0x1}], 0x1) r3 = dup(r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r3, 0x0) sendto$inet(r0, &(0x7f0000029000)="c6", 0x1, 0x0, &(0x7f0000007ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6c, &(0x7f00000001c0)={0x0, @in6={{0xa}}}, &(0x7f0000000000)=0x84) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x10) 03:39:00 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:39:00 executing program 7: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x0, 0x70, 0xfffffffffffffffe, 0x30d, 0x1, 0x4000000000000522, 0x0, 0xffff, 0x0, 0xe, 0x4, 0x1, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x100, 0x7, 0x4639, 0x6, 0x3, 0x9, 0x7, 0xfff, 0x2, 0x6, 0x0, 0x8000, 0x254a062a, 0x5, 0x7, 0x8, 0xf2c, 0x8001, 0x94b4e02, 0x200, 0x9, 0x10001, 0xe000000000000000, 0x0, 0x0, 0x3, 0x7, @perf_config_ext={0x9, 0x9}, 0x2, 0x400, 0x2, 0x7, 0x6, 0xadfd, 0x5}) r1 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 03:39:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x8100000000000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:00 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x2034afa5}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:39:00 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:00 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x20080522, r0}, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x0, 0x40, 0xffffffffffffffff}) r1 = semget$private(0x0, 0x3, 0x29a) semctl$GETVAL(r1, 0x4, 0xc, &(0x7f0000000100)=""/209) [ 1088.903179] binder: 7373:7437 BC_CLEAR_DEATH_NOTIFICATION invalid ref 4 03:39:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000001c0)="8ef8851f68d5ded3f0f52db7e0fccf76ca68225bbc79efc149c274145b8f0cda36b39b9b6f473f13a1dfde49111b1216ce4a78ae8a527385b4", 0x39, 0x0) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) keyctl$link(0x8, r1, r2) 03:39:00 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0) 03:39:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x8035000000000000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:00 executing program 7: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)) 03:39:00 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1089.063836] binder: 7452:7453 got reply transaction with no transaction stack [ 1089.071318] binder: 7452:7453 transaction failed 29201/-71, size 0-0 line 2759 [ 1089.079398] binder: 7452:7453 ioctl c0306201 200000c0 returned -14 [ 1089.086900] binder: 7452:7453 got reply transaction with no transaction stack [ 1089.094317] binder: 7452:7453 transaction failed 29201/-71, size 0-0 line 2759 [ 1089.103509] binder: undelivered TRANSACTION_ERROR: 29201 03:39:00 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x1, 0xc0) r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000140)={0x1, 0x22, 0x7, 0x8000, 0xb799, 0x1a}) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000240)={0x0, 0xba53, 0x200, 0xda7e65}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000180)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x6c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0563044003000000066304400000000000634040020000000000000002000000000000000000000001000000000000000000000000000000000000000800000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[], @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="6000090056b392fd8247cd4cc6a912cebf7bd6786593b81ef3f30de391e24e889ae8899772f768346b0f42aa8dcaeab9513d62545d8a1e6d7fe3a20652109a6620eedc634a105e0cbfa00b1d4cacf3a9181c9b9ea0e9e205"], @ANYBLOB="08631040", @ANYRES64=r2, @ANYBLOB="02000000000000000c630000"], 0x91, 0x0, &(0x7f00000003c0)="e454120e3f8d8a407c482efda3967527cd9e1fabc29ac03aa0c2e089c8d197ce948ed09ced20b9c86b66db79df1c408e4ab936611c6c43624d1e617cebbd8f11b774d68c19e4a85192e9ba3ebd0845c20d56a4afe0359e9a4ef3639396c718fb77de57509dd4926933c44f841e22658952dcfbed4751e8ddfda061d063ceac6cf17ceb17095bf44ea779f3f345e9b52e71"}) open(&(0x7f0000000340)='./file0\x00', 0x1, 0x0) 03:39:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x89060000, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:00 executing program 7: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) r1 = getpgid(r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000000c0)=0xf945, 0x4) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 03:39:00 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:01 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x10) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xd25, 0x24000) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x100000001}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000380)={r1, 0x8000, 0x169, "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"}, 0x171) 03:39:01 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:01 executing program 2: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000140)=0x0) ioprio_set$pid(0x3, r0, 0x2) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="126348400000000000000000000000000000000000000000000000000000000000000071a31bb1e9c6d67f913b3ab19703bd31000000000000000000997c4bc853a36e3d", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x8035, 0x0, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1089.660234] binder: 7497:7500 got reply transaction with no transaction stack [ 1089.668149] binder: 7497:7500 transaction failed 29201/-71, size -7962409466355180637-14000096986348091 line 2759 [ 1089.679437] binder: 7497:7500 ioctl c0306201 200000c0 returned -14 [ 1089.695636] binder: 7497:7500 got reply transaction with no transaction stack [ 1089.703061] binder: 7497:7500 transaction failed 29201/-71, size -7962409466355180637-14000096986348091 line 2759 [ 1089.722721] binder: undelivered TRANSACTION_ERROR: 29201 03:39:01 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x236}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:39:01 executing program 7: r0 = socket$unix(0x1, 0xf557ad3768d9f0bf, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) wait4(r1, &(0x7f00000000c0), 0x1000002, &(0x7f0000000100)) r2 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r2}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x100000000000}) 03:39:01 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:39:01 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000300)={0x0, 0x40}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={r1, 0x3ff}, 0x8) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x44000, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000280)=0x101, 0x4) socketpair$inet6(0xa, 0x80000, 0x25a8, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x8, 0x3f, 0x0, 0x8, 0xf1, 0x240000000000000, 0x2, 0xd33, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000100)={r4, 0x400}, &(0x7f0000000200)=0x8) 03:39:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='\x00'}, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="41004900bb577d87f37e2452f5c9d7908ab35ea345c96a6d3d6cd902aa1fd86cd6e93595d06d4b55d76404f90b90a7c724b07dc5e7768f53cec98f96156561d96ebe469ece172bb5208c08cef042d941abe12f2995d2b7ce859180f635a1631465a6a8f09a525ed9d4cc39790c5537dd4b849de0b9c19c1917d291664f6850c019f6b3099cf4e8074bbf4cdd796b72b21603f8cb77935831610b55fcf87be5bf5b47473dd46bc242749c1f9c04d0190ede64aa1470656fcb145b4ee9ce41119a6b235c226eed1026f453", @ANYRES16=r1, @ANYBLOB="080127bd7000fcdbdf250c00000020000200080008000300000014000100000000000000000000000000000000000c0002000800060009000000"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x810) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f00000002c0)='./file0\x00', 0xe024, 0x1) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000100)={0x5, 0x2, 0x3}, 0x10) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:39:01 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000100)={0x0, 0xffffffff, 0x1, &(0x7f0000000080)=0x1de}) r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x4305, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:01 executing program 7: r0 = gettid() r1 = getpgid(r0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fanotify_mark(0xffffffffffffffff, 0x5, 0x18, r2, &(0x7f0000000100)='./file0\x00') capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 03:39:01 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x80, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080), 0x8) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x1}) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:39:01 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x99980330, r0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}) 03:39:01 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1090.040474] binder: 7534:7538 got reply transaction with no transaction stack [ 1090.048068] binder: 7534:7538 transaction failed 29201/-71, size 0-0 line 2759 03:39:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x34000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:01 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = dup(0xffffffffffffffff) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000040)) [ 1090.134815] binder: 7534:7538 ioctl c0306201 200000c0 returned -14 [ 1090.158534] binder: 7534:7538 got reply transaction with no transaction stack [ 1090.166257] binder: 7534:7538 transaction failed 29201/-71, size 0-0 line 2759 03:39:01 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1090.213516] binder: undelivered TRANSACTION_ERROR: 29201 03:39:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1263484000000000000000000004000000000000000100000001428505000000000000000000000000000000000000000000", @ANYRESHEX, @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESOCT=0x0, @ANYBLOB="1269b0a37af19c972643ba4d6b67e613bb275d95f998f94f9492cfcbfa7c7b7b1b16539e62d0f3c0f63f0eaaa281c4680c680be7b1bff922b99c3eec7c1828558d820f253845c045c7872571a3cff117db"]], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14, 0x13, 0x1, {0x0, 0x1, 0x2}}, 0x14) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) [ 1090.339888] binder: 7570:7571 got reply transaction with no transaction stack [ 1090.347419] binder: 7570:7571 transaction failed 29201/-71, size 0-8660422083433463808 line 2759 [ 1090.385654] binder: 7570:7571 ioctl c0306201 200000c0 returned -14 [ 1090.402167] binder: 7570:7571 got reply transaction with no transaction stack [ 1090.409723] binder: 7570:7571 transaction failed 29201/-71, size 0-8660422083433463808 line 2759 [ 1090.422605] binder: undelivered TRANSACTION_ERROR: 29201 03:39:02 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x37c}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:39:02 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0xfffffffffffffffe}, 0x10) 03:39:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0xffff000000000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:02 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000200)={0x0, 0xd, 0x0, @tid=r0}, &(0x7f0000000240)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) socket$inet_udp(0x2, 0x2, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socketpair(0xf, 0x803, 0x9, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r2, 0x101, 0x70bd26, 0x25dfdbfe, {0x4}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x56d9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 03:39:02 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$netlink(r1, 0x10e, 0x2, &(0x7f00000000c0)=""/69, &(0x7f0000000140)=0x45) 03:39:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000080)) r2 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1, 0x4}, @acquire_done={0x40106309, r2, 0x4}], 0x33, 0x0, &(0x7f0000000180)="163300b5c1e138439434d2872944ca7f1fb630905f3607068ec41a1c15304184e89ac69f43b536b2374d86b937533d442e178e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x7, 0x200) 03:39:02 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 1090.764679] binder: 7584:7594 got reply transaction with no transaction stack [ 1090.772204] binder: 7584:7594 transaction failed 29201/-71, size 0-0 line 2759 03:39:02 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x48}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x200000000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RVERSION(r0, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0x9, 0x8, '9P2000.u'}, 0x15) 03:39:02 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:02 executing program 7: r0 = getpid() r1 = getpgid(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) fchdir(r2) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 03:39:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x800e0000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1090.826717] binder: 7584:7594 ioctl c0306201 200000c0 returned -14 [ 1090.845828] binder: 7584:7594 got reply transaction with no transaction stack [ 1090.853326] binder: 7584:7594 transaction failed 29201/-71, size 0-0 line 2759 03:39:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1090.925377] binder: undelivered TRANSACTION_ERROR: 29201 03:39:02 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:02 executing program 7: r0 = getpgid(0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x2) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) sched_getaffinity(r0, 0x8, &(0x7f0000000040)) 03:39:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x80350000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1091.039535] binder: 7624:7625 got reply transaction with no transaction stack [ 1091.047075] binder: 7624:7625 transaction failed 29201/-71, size 0-0 line 2759 [ 1091.132824] binder: 7624:7625 ioctl c0306201 200000c0 returned -14 [ 1091.155182] binder: 7624:7637 got reply transaction with no transaction stack [ 1091.162673] binder: 7624:7637 transaction failed 29201/-71, size 0-0 line 2759 [ 1091.173961] binder: undelivered TRANSACTION_ERROR: 29201 03:39:03 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x309}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:39:03 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x3d, "4271ed430f2e646664b42ecae11c50f5c41dab383f44a914cc3331e83e036ec9e629705ed584c1cef3b50c0d8f31e64072f11a050151602894e846c8e3"}, &(0x7f0000000100)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={r1, 0xb4, "782272ee174e8b9791781490b79ba41c1b3a87c563b1d346da737b5c0985c930231a75b97f64f3b59b76159585e4cee42888acf3fb00fa190f4a02898167228d8cdd8ed679dff0e426a88bc8d07792c8c4ffbf9af96c665accfcef4838182549a3257b4706c808f03f68710e0f88dbef0bdfb396a3691154677f43e2ea4626dd390acacf700f748418900f1c12ecff6019443637bd4f762289c97ee4d9e0a85fbccd0486635a98d8c5d6bed25d54d170c5f4fbc3"}, &(0x7f00000002c0)=0xbc) 03:39:03 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:03 executing program 7: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001200)=[{&(0x7f0000000100)="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", 0x1000, 0x2}, {&(0x7f0000001100)="2eeca35a0bb45647c30771dc67569c125a4d9e2d33144fa2a29c1b5277bc70a36d084b211e49cb58608d3934ffc16f915a66639280c565dd2238481b4d9ea95e184202344c16e33339a28e83e19c7aa74cd7f05fea5af910e7df663538f568b821f30b3f0d93c294e647bee2a31125647f45faf8c0ceb9bc556010bf9e4499b79c5f2cfd6767fc1139338a897481e080b7ab69713030c422f5a03d14530b2c6cf44e4743d72354e6902d8df8c2d7d9a2ea1d7ab8739137fd9d18eab982d82d4f989e29e1930cfd67", 0xc8, 0x1d}], 0x2000808, &(0x7f0000001380)=ANY=[@ANYBLOB="636b6565702c6e6f6c61726765696f2c6c6f676465763d2e2f66696c65302c0001eb75ee1e05f9db5a8593e60e6009714a0b9a6f6094f47d95743ca5122b31c2dd8825c2453a8943c7dc00749689e7f7"]) r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = open(&(0x7f0000001280)='./file0\x00', 0x0, 0x40) r2 = syz_open_dev$adsp(&(0x7f00000012c0)='/dev/adsp#\x00', 0x7, 0x10800) r3 = syz_open_dev$sndpcmp(&(0x7f0000001300)='/dev/snd/pcmC#D#p\x00', 0x7ff, 0x200000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000001340)={r2, 0x6, 0x1, r3}) 03:39:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0xd00, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0xfffffffffffffe27, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x200000, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3dcd338dc5e13c881a47759fb33ccdb8733e5b93b75b194c9dcaff48930a4334b1e3e44d9464d02c9df223fe118229db83fcc23c70fa7d8121de416d2b29a6e48dd554f5ab558a12ee404b5cc080ec48b4f07c85bfee645010c3f020a4ac583a50aba07458b220cc720970440b89bae9448addbc41c1e7e7dd0e54dbcf2240472d453e0a8928f1a4c779ca13baf484a98316abac3a118f4d2ec682063d14b87b56e782d8e340a0dccb056842142acf95a154b8af6a13d47845fec22b0683b674eb2dfcf729864c830a57ad8940264be73b89696e0bedc0894977b5dc77", @ANYRESHEX=r0, @ANYBLOB=',access=client,version=9p2000.L,\x00']) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4) 03:39:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:39:03 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 1091.674998] binder: 7653:7654 got reply transaction with no transaction stack [ 1091.682591] binder: 7653:7654 transaction failed 29201/-71, size 0-0 line 2759 [ 1091.704880] XFS (loop7): unknown mount option [ckeep]. 03:39:03 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x88470000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1091.742607] XFS (loop7): unknown mount option [ckeep]. 03:39:03 executing program 7: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) getpgrp(r0) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) r2 = getpgid(r1) capset(&(0x7f0000000000)={0x19980330, r2}, &(0x7f0000000080)) prlimit64(r2, 0xf, &(0x7f0000000040)={0x100, 0x56}, &(0x7f00000000c0)) 03:39:03 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00') modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:39:03 executing program 7: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x8a81, 0x0) recvfrom$inet(r0, &(0x7f0000000140)=""/47, 0x2f, 0x2101, &(0x7f0000000180)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) recvfrom$inet(r0, &(0x7f00000000c0)=""/23, 0x17, 0x40, &(0x7f0000000580)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x3a5}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000440)="d95b82559e6b71d6a82380e8285d2c010609e0a7fa9dab232bec11eaf205178332045311865cd36d5a19f0", 0x2b, 0xfffffffffffffff8) r3 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000500), &(0x7f0000000540)=0x4) keyctl$negate(0xd, r2, 0x0, r3) r4 = add_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000300)="2fab03e0d24317707cedd8e5f1cd4ab362e5d86c480061f0d8ab4efe700e6875e621e8b4cadd4cee68ddfeb582202d84da227c133ba38227607147288015c90185ea70ebbe43dc1d7d088bc14fb331b518d9534930956e8665649cff841a724825d89abc75cf55a0e8729b6eabf82e7a38288d0e8556f651ba3af69226636220ee0d893df140d19e26687094851a1c565008fb64b00e12f060298fc9", 0x9c, 0xfffffffffffffffd) keyctl$get_persistent(0x16, r1, r4) 03:39:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x8100, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:03 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x80, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080), 0x8) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x1}) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:39:03 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)="6367726f7570776c616e3170707031d724776c616e3000", 0xffffffffffffff9c}, 0x10) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f00000000c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) removexattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='security.ima\x00') stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getpeername$packet(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000500)=0x14) syz_fuseblk_mount(&(0x7f0000000100)='.\x00', &(0x7f0000000200)='./file0\x00', 0xc000, r1, r2, 0xfffffffffffffff7, 0x0, 0x40) 03:39:04 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x315}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:39:04 executing program 7: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)) gettid() fcntl$getown(0xffffffffffffff9c, 0x9) getpgid(0x0) getpid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) getpgrp(0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000180)) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x4000000000000000, 0x101100) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) r2 = getpgid(r1) capset(&(0x7f0000000000)={0x19980330, r2}, &(0x7f0000000080)={0x0, 0x0, 0x3}) 03:39:04 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = getpgid(0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000002900)=0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002940)='/dev/snapshot\x00', 0x100, 0x0) syz_mount_image$ceph(&(0x7f0000000240)='ceph\x00', &(0x7f0000000280)='./file0\x00', 0x5, 0x9, &(0x7f00000027c0)=[{&(0x7f00000002c0)="fbc6fbef312132c54adaf5029cea07ba1ad5564a2434d66c7926588379b41f065fdd7d98403ae4c2ca5089253f5281cf1c17dda72c36ebc12a36d847cce3aa6e813b0f524f003cdd6985074317de4f937310bc7e45250c3c07fc9961d46ab0940401110623cabca8a9c5b79cb5d4c868c2baf550e78a2e59f7d49ff591cc74b483f070019eb2942322df70332c8596f3d7a8d52d2061cf65b690506d7ef5b8f9dfb0eb25651f9eaddd57d1a8136a6175d97b0b6ebd4f3167052973607c9c1ed9606629b7e6f7399c37cd73eb60f5dea704e5dc7256908b26120a136c28c8c58e58cadbf71507a33b16d3fdbede9d53f19e6e5df956625649a0dfb8939fa16170a82fe80cc523e2d773f5771a2116c1b67e4ce295cf12c8d86ef3ceb2f344fc87020f53574319d2f45200683c35279218ab27e338795af45b54b25e4b6020f366cf6e26d25ba9c4b058515a8f60d8a71193f47da0962a74d58955682d0d2c54d9b78baea1a618316816ba95267118fedbcf386c988cbf1e12d90032f37841a417eeafb52edd5dbbfbd57a323e9c16a190ab81766f3d223411274f58e0ff71d67c6d3ea2b21e40085d4ae80f47dd89350751c9b2ff5d8a74b078a45ac9c2c341d9895b6581c2924866638df8c30e0a07b63a4d2c518677e4a15d8d0260458cbc79b30e3bd461d00bbaa8ae66df7a38e2bf3eadc3fc3cf8a51cf95fdfc9f08149f21690eb843b4480266212a4f95c43ac5a13561f0c161757b200126c400d8e712ac90e923aeb866545fd3215130b8276fe87385e34b5d04dd0771a29bbbc088c1c6054aea19bbea577d87210b53794d84b8988dacff39c510de8daeee02f374fa2d88fe3afc1c8efbeb07e58041814e76fae0ed6d2d57d85ab8f6f3d0eda901f5db94cd1add27182e86362257246f910c02fcc56e264c91fe531aec2fe22468422cbbad4c5707a009d962f9370bf4e05498c2abce7d72a7d0f59e449e4b18d1d390863cfd6ca19321d753041109e8a2c04947fac4c0cf0eb3f3b0282898f83be8ba7aa4ecb041b9a0780cec02ee6dc809421893c5b363036c24bf91be5d53332c1702ad3281cdaa68374cb07f33352f7226d21ffa8d36cac854fd57320967a1d0cc03d0d060450b48f7f74fdcc36ec35760fa580e9ca77ad7850109f3ddcd010cec96230733c590b64a375d9075910f92a8bbd4e0404f20746569006b0579905817a7194a0f3d673c50360f40ff7f1eeceefba24b2c189a15eb27e314c49149cea7e02661aeca872d7abf8ac73356da9ca859d844a07c7ccd79bc1ad8593395fe02f559eb28b287a77378c3e23d7c9581816495b6aefe4508af3ff5ca19d1428bcd53bcb6300099394c9ee0abafcb069ed7275fb5c95e82c0c1ea724b95142a11bb349ad8aaac7ebc1ba6d411ea031136a0c1e1a8ced382cc256d9aec0a0bc58eed2c43b5a9c3e8e81aa5a40f96e0a3a848b222a30b3908a1f28cf94c9b6752b817ed2a3c13a1cd310124798812b9d31575aed8f947de9f1111d81d54359f365e9854b7ae2bad6315526b7f01975be904f7b8c5e6c6ce27605c3833fc989a2020fbb7741894984186958fb8a63f303f319d79a7eabb84b8874d76fa0029e691bb7dc82f4103927cf9e90c7923dcfbf122322dd371bea3978e9f2d5b3687bc28a091e333e2008ac3ea54aac77e51a6c85e8680925924edd366352256c6e5a266c30a7faf81c33dfa300084b0374b58583d7cbab0ea1e086b4220307fce54b1b0e23394322cecd18d18f6f441a6bb26203d0e70a2b1253caad1d6f7c6c63652454df25e1e38a07edd6c3f1ea4a6e0fa505e5188fac1385194ee766f43ff2868c4443e75bf8f449e6ae004f69df3253e379bf002a1fb0b2265b0e1395d12805ea29d901a8b893b018f072dfdeb0bb20da878772c2a6b012f0997c4e429cc54ca88000794eb57a471265ead0cb76721b80c57031ba1f15f6f509673ecb1c20dd1010b356e5a082fb6cda08e8d53cd6eed3e02b5d5d6cbf87e69f1faf2f046e0edf8edb8653507374f69e1c5fcbdc0d7875ec15c76d38421210f39536505cce7e20edff5afdaa1869c2a239c34635645f49f55ceaccadb9a6d43d557f3a984c88526f02d931c5fa49525d5f1ab07a3252f5e593c0be8e29959aef6d511dcaada51242322686bcb73bce42e4a9ad9f432dbd3c6b28804bd36f5777c9c24e8be8823762da21e3f3ad1c18ae18d671af3ba3f079b6b8e3b78edd75f2cda874223174f5fe2d08aeb5c9789ee7167c54b4715a195436f71b35a5ccdddb474c8e9e507779c85a4cae1c42efa17244d78f3b0ad0872c0b23a47f680bd2318db964942de846024343d57c5a31c9061cafd74d47be0f686aa1e67a1d6ced7df88abd1995c954bd6576d73f2696b93bc6d69f497a2c9e2f0968e4c0bc56eafb629f9e9566af7b85a78c09f681c72b794c90c0b450d27139c499d8a86263f1367aa86448d3cd7a00d2dedfdce6e17673ce1c1277670c9b7692df104cb034c23c4f35ce19f5f4dcff04c7ffdf96d6d43f3919c802e4192afbab3c4b180b9571319409161bfa6a9aeee465219d7fb212588015c5c3416d060e2d862f84d333d13bb120d356fb56b213b3fadbb185a6af056111c2dfd59377c5e53834c1099325bb5792e8b81996aef87917dba63c93a2a0cc3296fcadf67d5ee0eaf8c2a15c3e88d8381682c29714ca14661c99c84ebad281f79996e8106105036e62852e808dd819b181005331e7e8691359792a365d5f5dd63a79396f51db2f281c8852172f368a0873659623ac9fa9581d5f07cfbbd5cc2d1511b1e774ebb662ac1eed77d093b818ace19161e22590aa395ba4ce3efa1f50e43a37a7aea65e2f4a9f63cc819523fe218185479a77fce53084c1a6d2de9b1b11db926be1f2c672ff41f2a6c969768a76978104062956a9e66481cd38abf4da3f7a7b4360f6d9b112db4353f068d8baae124b94dc08e85e4c29ce26913056629a06a9f03c46d4728805471f961c567edb6f84e8d6a9ec6cf4ecfcd7d5096405322ce5d7d31921f963ae15940b6c621bbd7e7fe558587fc4dda6deba0a575f49e75225b210cb83f71daa763e41887af519ca0bdd0f8f0eb1242bfdcc68a3546d65f35a6c861ddf8548ff460811a5abeb748bf0b238ac28de445f78f489740d1a437d351e4fb8c34dd7856bd901498f31c242f9f7e9b82e8cde0650b67ded428f65f4a0a0c94cc6762457c7924c3684dc6a7a048b64131c366f71351d08476cc2479cae2476a4dfe1a5eddbaca2347d3ab0788b0df0897fcf6980081d2015fa373ec669f33ecbc32e5149c77304b25359231248f54432d4b88df8bcb9c7bf85ea32151fe70a6fe7f9abfc5e9063e065257b90fa86f0410dd3511fdb1b5fd0351f81c089aee382e6388400816e0969137a212d9780c6b87e4297e26128ed8b8228deffec85f485dfaf48b1d9aff6bc7732a0e2a9d8c6c3c55ea9a3512643a39a3dd5ef5e82a3f5c743732dbf2387bf363d267f890865ff35ba2c8592e9a8ded742e822816e11189621a0e6bbb67c62ad249c06144ae9631edfe6a0d426ac834028c8ab535afded2791120d86dd8f969ec48fb9268789335f20f04f8e25f1a90dbf56a3ea5667943b39bec2886553924fdf28debf5bc41ffcfc41adbc96816e62934b615f00f9a7eb2bee56f8d9b0d82da718d0274c19ce76fc8af617056d230338935abaf69ba2621f58f1c53d4feabda76bb75cb95e0654187e6da2306efffc77000dfbdc79b7b30c1543c6a585d65aabb703c590d8392bcd9c05ceb919fd4452f59c70f7769f69911ddb365290c546303b2a93c98edce42bd917d76be04c1e11384ad3e51e9b354e64f1c2e8429a2275ad59d7352c8f61bc2f6f04952cecc5686a0c575d2186f99869421a9d560bfa94c16808dac691dd73c77fa1c50ddcac9476c2b925156c5b3c8a5ddf15ae27785af3d38862e90c9e4bbd10daef81e40404b7ea25aca569b9a81f36579fca9d95824a465622028f73809836b612da61ad935d5dfc0f13876dd482ac87bee0109f24d6445949b92733ca313e0d75c6f268939bb871f198e0459b545288643cf2006db398e51e0ab8d9d2908d0ecd85bcad05431adcd25d3de8fa0559194465ec39acf08c1aeb65f8861d8d1e60e6bb800d997220f7045c9b687d166379d26c6d5767653e92b5294a58f68ada95fd1116af78465a119d3876d5902737a73b4b467199a133d1c3272b6f876d400d22b878baa3363708bbb713c7e5bcb0de0dfe4067e695018c1d15a0c9917bca6a0729d934d894adedfc60a5402524a12f9782840e4c771f9a7fe9dbcb05dfdc8322b848644e4951552c57b14f11797c3362afb7212b8341f28bacda23e52eb21f007ea1e07ea4ccb5683b98b0136753ec33748785499a72a8e5733166547456d33341213967d0299f5736e0b945d8b81c9c0c65b7f84dc140fa24f80035eae2777a0d49b156119dee4cb346f1979419f36260d59cd5e40375a0f25a3a29a7c2f09bb3c77f840e508c13925123757385f810bfe92725699a6d10d2d297f2732e69e7f66fa6eac11f352d588b6ab0e84f18e4e8cfbd1b30a21470a48c8e53fdca68163a48be72a79d0f4a7adb3884cb33e592f8122471a7fcc7e0f5e2e063eb8a69f80b42925c8206f802bc7f31e76cb11dfbcc6f096f0327777bd845d1193cfc0c10e3a09646974b05b81b1e292ff6a2c4c6bddabe12a7208682bbb86d7e817e115f4e741f8b37da9e1411a6738d27484f750c7836a1e6aca77bf9180b77930819fa0f201cfc0c5398bd52cf6ef1b1536b825aba7b2c3a588c8963d52c7655b2a89d8111696ee2736de564dda1206b42824118a3cbfb9d68c0f1db26c789ce4b2bcdc30d68fa33e0138827602fbcd52e80d0ac52ec55c9679a463bc61b55b380fbbe03277dc2dedb8b05f0176dec44fc92a6d9f6dd5983a73e3fe6315dfb3ef71c9da195d501350c7572ad8c8793ac170fcd0274f4affec189744201f8c6a32b1aa11205ac97929e00237c5d60f6c7645dd66663aaf89b14bc224d1476bbc101af2e117ce850ca14c4aff1aed5f951e4375857543a377a680f2de48aa6976f03c57c3f777ef549b0db3d95839e292f608b10a0b55bb58dc3f7b4b4db37ef58924f784e4051ca4fd4a807213a3e3018c29f9b7e1e6d931ca6d381991ed44ecd357623cbbf08c47e9085e43ab3e7a5f388145754a23cedb0d5fe1ac087c3cfd28b4300e2f82170c852d0fc898b3a2eddbb7f9f544957036cdbc687ba8eb4a312a962c1f2e6babc7f68bed127f50bf30dd01d0824ba20cb841ed6b0fef14d58cebb76a0f08a4deef772f4f186d7c9f21431597c723d6bb904aaac68cde7b52e559db3c29581f902ff8bd51cc666776c4b9b3cda8b3a2b1531ffafd2f61350d325314c53450c4d6c17d04214aeb8c45e0bd9e598fece9819f2de85693c8002d3c3b9fa72a015c6e1d589b38a091d0f71cb5596bd8f64e825f11090d02075e78ab4995897533212ddbc86c6b433e6c2a3a0758d1ce858af54f1c64f814cf3547b2c25d3823b156504df225fee9fc24dcbf092fc33fe89d1afe50413409da732692304e862cc742e74c74ee910c03415eb1822014f79189a071c6fcec9149503cd36f7b58ec07045635604991856287f66f77d2bbc7b6d12f5150cf222a7536b61a6b56d9e1a8d29033ef1043a8e9f12b89a50fd8f43bb85ea56b863d0174d61973e3fff1d89db379e991833d4c8fca48b5dd66d601582d7c36a99d111e2e1bb", 0x1000, 0xb5}, {&(0x7f00000012c0)="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", 0xfc, 0x3}, {&(0x7f00000013c0)="286bf806eed5c9fb0b4f7efb22d48028c76d039138bcce514758c8af97115e43084696000ffec734afa3e8c4", 0x2c, 0x5}, {&(0x7f0000001400)="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", 0x1000, 0x6}, {&(0x7f0000002400)="b4d5260340bbbd703688854595db36ab80f2f8c5565e43d6a4fba983b08d270b2e877459ea443ee0a5ea0f63090a4348a054db8d530df1426770ab274e212ac8af5982124e27269d596c2c67d116a85400335ccb6e13316b2e36cfbdf0bfe80e3d6bedbc3fcdb6579ccad7b839a64de32c54df3445639699919a48402d07a58193915e27251852b9997f86cdb0f5fd0adc82b30c7e1c1f5edba376195c8fa49a2b18d07e9e5074b1367255e402cf94b9d3af41684174f5629b87137bdb17dd644a7b6a5559fee911ad50ff72563b96095ec82d73215b0b19154cf544c25a529216f8fd2b6ad0217b61fc81", 0xeb, 0x5}, {&(0x7f0000002500)="7cb4eed8f8d24cbf63ca4610da2354449fb0fe08", 0x14, 0x80000001}, {&(0x7f0000002540)="75c26662b3d50d314e449c985212f191fd776d4fed78a4c188abb9f876077ecbe0ac0c548690a9dbaf738b5a872fa067e72371865375eedd8f36215b678ac297b9f9f257d02677e90862b87df1be9d90c7ee0d98fb5b0e7c11263436cb1634fba495d1668e2be47f220b112989db0002320f00c2470c4750e0281de4f27f6a5f93a7eaa9c693bfbae472320ca48bcf686c520cf242d4b59c88cceb3a74ddfc16afb63f2d0df6c76fe8336b667b", 0xad, 0x800}, {&(0x7f0000002600)="b01f27ae3f1520d0f78cb0e1f07774624ca2d3e9186788df534a1a6352962c7cb56ebcbc23cfaabff8f051680858530340b0c0503c81ca6b6418dc78665a993f9c889b9265b7e8e45a7b821faed9953f18c0cf1988a70edbed00152a937394748ea45b3e762e47a026e95e71e501a188fa48c73034d7ce4238e1e12689c8d76b44f82c33067f4e759ee92de0a628fa8f429c4df59bad0ca88434fb88a4adc87ed46732a679994003375379c7726e0090c1b1", 0xb2, 0x40}, {&(0x7f00000026c0)="c122afc459dbe81628be03b1fb38ede40b457ab0549dd4605542228f8d8f1ace8c895c57432cd8e2e6e181cc9e390c5de610c0523f4f0d42c9cdf3fa210a32cdbcffbdf4aa1aca36952640cf353e344381266051a257e6f682bd47d1af6810249356628309d38a72bb26a3b2e60eac033f186e2e19df89348bdc1aff7221d95580f60333702382df00340273f3204f66e871313a09daa8defd90f4003efc5f35925f84f954ff9471bfb82a35f70d4d443bac34f23bc2e7af0066578b7a3de5e843b104fbf99fb3", 0xc7, 0xffff}], 0x49000, &(0x7f00000028c0)='cpuacct.stat\x00') sendmmsg$unix(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)="edc528cf91ec67c05535ed5a2cc79a0b0a55f8ef797b2e819b5bcc0e1019fab054f82144e39e79be480ccb32a3ab9e25f27c2741ee1dcf1971c441c8a30bf9a3aef024095134cf299e76c8f36d5b69138f465856b7537d24c32245598e3102ff", 0x60}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x880) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 03:39:04 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) socket$netlink(0x10, 0x3, 0x16) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x100000001, 0x4, 0x69c62a3a, 0xfffffffffffffff8, 0x0, 0x400, 0x40, 0x8, 0x400, 0x8, 0xb4, 0x9, 0xfffffffffffff801, 0x7fff, 0x7ff, 0xffffffffffff8000, 0x0, 0x2, 0x38000000000000, 0x9, 0x4, 0x0, 0x5, 0x865, 0x1, 0xddb, 0x3f, 0xfff, 0x3, 0x7ff, 0x3, 0xfffffffffffffe7a, 0x200, 0x9, 0x1, 0x400, 0x0, 0x3, 0x1, @perf_config_ext={0x3, 0x7fffffff}, 0x1509, 0x2, 0xfffffffffffffffb, 0x7, 0x9, 0x1}, r1, 0x1, r0, 0x3) 03:39:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x48, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1092.580474] binder: 7653:7711 got reply transaction with no transaction stack [ 1092.587973] binder: 7653:7711 transaction failed 29201/-71, size 0-0 line 2759 03:39:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB="102308be2b886c64"], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x15f, 0x0, &(0x7f0000000040), 0x1b2, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:04 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='cpusetsystem\x00', 0xffffffffffffff9c}, 0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000240)={0x0, {{0xa, 0x4e21, 0x3, @mcast2={0xff, 0x2, [], 0x1}, 0x3}}, {{0xa, 0x4e20, 0x4b2a20ef, @remote={0xfe, 0x80, [], 0xbb}, 0x7}}}, 0x108) 03:39:04 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:39:04 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r1 = getpgid(r0) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 03:39:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x500000000000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:04 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x5, 0x0) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000240)={0x101, 0x2, 0x3}) flistxattr(r0, &(0x7f0000000280)=""/92, 0x5c) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x400000, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000300), &(0x7f0000000380)=0x60) ioctl$KVM_SMI(r1, 0xaeb7) [ 1092.728577] binder: 7747:7748 got reply transaction with no transaction stack [ 1092.736134] binder: 7747:7748 transaction failed 29201/-71, size 0-1835008 line 2759 [ 1092.753408] binder: 7747:7748 ioctl c0306201 200000c0 returned -14 03:39:04 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x0, 0xffffffff, 0x2000, 0x4b536a21, 0x40, 0x1000, 0x1, 0xfffffffffffffffb, 0xe13, 0x500}, 0x10) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x800000000}, 0x10) 03:39:04 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) getpgid(r0) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000180)={[0x77, 0x3, 0x7, 0x0, 0x6, 0x1000, 0x3f23, 0x9, 0x7, 0x7fffffff, 0x9, 0x5, 0x0, 0xbe, 0x0, 0x2], 0xf002, 0x5000}) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f00000000c0)={0x20000000, 0x4, 0x5}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20200, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x1) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000100)={0x1000000000009, 0x8001, 0x800, 0x4, 0x3}) ioctl$KDSETMODE(r2, 0x4b3a, 0x95) [ 1092.775343] binder: 7747:7748 got reply transaction with no transaction stack [ 1092.782807] binder: 7747:7748 transaction failed 29201/-71, size 0-1835008 line 2759 03:39:04 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x5, 0x0) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000240)={0x101, 0x2, 0x3}) flistxattr(r0, &(0x7f0000000280)=""/92, 0x5c) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x400000, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000300), &(0x7f0000000380)=0x60) ioctl$KVM_SMI(r1, 0xaeb7) [ 1092.862239] binder: 7747:7758 unknown command 0 03:39:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x86ddffff00000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:04 executing program 7: socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x101000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x8, 0x70bd27, 0x25dfdbff, {0xb}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa4}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) [ 1092.884093] binder: 7747:7758 ioctl c0306201 200000c0 returned -22 [ 1092.916342] binder: undelivered TRANSACTION_ERROR: 29201 03:39:04 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x3b5}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:39:04 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x5, 0x0) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000240)={0x101, 0x2, 0x3}) flistxattr(r0, &(0x7f0000000280)=""/92, 0x5c) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x400000, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000300), &(0x7f0000000380)=0x60) ioctl$KVM_SMI(r1, 0xaeb7) 03:39:04 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000080)=0xfffffffffffffff7, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:39:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) r2 = getpgrp(0xffffffffffffffff) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000000)=r2) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f00000002c0)=""/231) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000100)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000080)}) write$P9_RWSTAT(r1, &(0x7f0000000080)={0x7, 0x7f, 0x2}, 0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) fcntl$setstatus(r0, 0x4, 0x2000) 03:39:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x800e000000000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:04 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)={0x0, 0xfffffffffffffffc, 0x0, 0x100}) [ 1093.442345] binder: 7790:7793 got reply transaction with no transaction stack [ 1093.449774] binder: 7790:7793 transaction failed 29201/-71, size 0-0 line 2759 [ 1093.510722] binder: 7790:7793 ioctl c0306201 200000c0 returned -14 [ 1093.537736] binder: 7790:7793 got reply transaction with no transaction stack [ 1093.545249] binder: 7790:7793 transaction failed 29201/-71, size 0-0 line 2759 [ 1093.577738] binder: 7790:7793 ioctl c0306201 200000c0 returned -14 03:39:05 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rtc0\x00', 0x40001, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000880)=0xba1) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) prctl$getname(0x10, &(0x7f0000000740)=""/219) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x101, 0x408000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x7, 0x9f7}, &(0x7f00000002c0)=0x8) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000940)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) open$dir(&(0x7f0000000280)='./file0\x00', 0x4000, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000300)={r2, 0x7}, &(0x7f0000000340)=0x8) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x5a81, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000580)={{{@in6, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000000680)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x2, &(0x7f00000003c0)=@raw=[@exit={0x95}], &(0x7f00000004c0)='syzkaller\x00', 0x5, 0x5b, &(0x7f0000000500)=""/91, 0x0, 0x1, [], r3, 0xd}, 0x48) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0xc) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 03:39:05 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:39:05 executing program 7: r0 = getpgid(0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x1216440, &(0x7f0000000140)="23aa69573a63d9c1142e4871d902f77dbc5e0bbec5ab6aafcb1e5a74fbf64bd2e7cf7c456edaa83ce660c9") capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 03:39:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x4000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:05 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) r1 = getegid() syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, r0, r1, 0x20e, 0x80, 0x2000000) 03:39:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2e0441, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) write$P9_RGETATTR(r1, &(0x7f00000002c0)={0xa0, 0x19, 0x2, {0x14, {0x20, 0x0, 0x4}, 0x20, r2, r3, 0x7ff, 0x4, 0x6, 0x7ff, 0x2, 0x5, 0x8, 0xffffffff00000000, 0x2, 0x7, 0x2, 0x7fa, 0xb72, 0x100000001, 0x2}}, 0xa0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r4}], 0x46, 0x0, &(0x7f00000003c0)="0c79e14cd43983ec3ad8a15d4c064ab241d51502cacadfce25801dc7d0ba8b11865c357d17cbcf2e6d2afa82925586524e6875cbfd95a894dc8b7abae4de4e3d6f9ba1426ce0"}) openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x2100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) close(r0) 03:39:05 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmmsg$nfc_llcp(r1, &(0x7f00000027c0)=[{&(0x7f0000000300)={0x27, 0x0, 0x0, 0x7, 0xffffffff, 0x8, "af79cb41774da93e9243aa3c384e51638f718e652b92ab7e298d642ed8906f9b32ca682488afced711afb7542d82f42f027bac58674c41fe98937f6411c31d", 0x22}, 0x60, &(0x7f00000004c0)=[{&(0x7f0000000380)="3a9c204639921ee8c9ab6e3c9c67746bd5f6a42209bd86bc7a462c161aa7f8e7fc45389c4138b1713d6638ed19d6c7fe2b35f62f18bf506c80fc75a2433bb842bdf00f3e6f2dc31df88734de2272cdebd1840b73047467f70015f9a09da78ee005a197c5f99c8887f4d79539fe8cbe9c02561b25cb", 0x75}, {&(0x7f0000000400)="065c55aa72e7bff94bd6853b19389bc00448d8de47333f1394b32fbf2f44b2f6c2f51a1c4c83f3930a0238596fb059a101d0ca89509e04af33ac0029b79f8ddc0230bc03b93d8dcd6e212ffa6245831fcb749421fbe4083c1ee17e41bc45795d172b9325f0b44c758a01894e1bac1895cc687a8f7a0e283fe5", 0x79}, {&(0x7f0000000480)="0157419cb6ea008cadde95389031e47cbf5a3ea68d8ad95acd37d20a750a789d46d9cc8a75293689d3bdb62bd888765383109a3ba5", 0x35}], 0x3, 0x0, 0x0, 0x40000}, {&(0x7f0000000500)={0x27, 0x0, 0x1, 0x6, 0xfffffffffffffc01, 0x1, "0e0fdba5041a8f9d7421e278b0e602c079b57f2aac961077abfcba8f47d89651986170d8e8e89ad86e6da896af05eb3ff69be35f48a0225b720c876095785a", 0x3e}, 0x60, &(0x7f0000000ac0)=[{&(0x7f0000000580)="80f529c4573b096d9351b9bcbdf924acf62c1b8a01e7bd8f62754b25dd9c9eee12c5007fe1409f647353fcf976a357bef9af107edab3280adbf689f7b83d881d21d4b6725daf5fc23ef676f16ff93e80215a82934ddc8d07c6e2b68e49b3735440cdd1fcae51f2146b3285e10adf4ab950e510efacc9d568e75488db459da1ee2058cb51a77775644e2046b1ec973d5bfc048f611c7e3bdfb83cb74ee4f2accd060d9b", 0xa3}, {&(0x7f0000000640)="b4203ad81c11d6f111c95e3fd100c2e2fd4035794e9e20f61f42d6628baee7142737cf1b3fb6b0e4aeb30060799170fd151df396818db49ab5b9414bc21fc267b20868c0e42dd274", 0x48}, {&(0x7f00000006c0)="5908ec6b232c0f71ab5d74d5198a8acbd8cd1674d0b62700303298fc1205f4f038c0797c5da37aadd65865d6c530c16d8ca3f741142a9e8f4c706716e3ead6392675079c95b8dfcc5d0176aa171e420fd0c55504bbf1c1732155b17bc411f0d849226aad95ba90ef7357f1263521b3ab354216759fdfd0d02012c91a0ffef90d145511985b4c4c56a2471732af99a96d26bc80a214a9e957a3d60983823e8a21c1ba95edec", 0xa5}, {&(0x7f0000000780)="7fb283309e886e31119a722797b452d0cbb069bac60669910a419a6f882b5256dc60209d51132d32ae8048405eaea17836d1675dca5e7a35c6d0603be57c1ee732acda93ddfc8ab039292a9602642eb341f67c0cd410c435f05eb99b5b050c90db6e2569544a6dd073ca0263822766c9f640e56ba7d7942d2ed0325ac382e092cd044bc2367134e76ca01fc3", 0x8c}, {&(0x7f0000000840)="1322a4596c69dc82c1eb51b5643948d9769b7677350b408451936ce82c614793309c3f15fe23d11c24a6a3a548206ae88069b14e2d597800878693583f4c2e04d0c3fe82c411aee32f455fa2615da076869d6032955eeff7ab9ce820da55917a9bebb0caf64410a952f06866d6cdff7cc7d2f4339960003bbfc7a8429571074b9bac4fbea8f9210d81acb232f5f5bbe591dfd892931f4810b9dde54b0f6c6b367c456b4792a67f5bf278ecfe6559300b7876e01e25ef3910fc1c23e7282b8c8df4944c81cc2045c994c70b352db9f81fe36a92fa32335bb8037002f76c5473a3b92ccbb38b373f465b362fb39c03266525a7ff6f8f83", 0xf6}, {&(0x7f0000000940)="f7d603905ce041d8aa1762e84401721a20e8e8cd1ab134370c30163adafa1e77377b2d9c7884fcb08c7e03375c62deb433f7ec75d4988473a2a2489c8ad43d5ca7ef7e71bcbdf02110809ae3e6296c7ef578be54d1bcaad27e7e9957e79bd6dea49dd10399a272cb1515ead199ab42dacde4c35e2776eb4a5a6849b140a15c2eec62c02dbcdb89f03e3bf44ae51424122c9810cbac4306c1dc8a1fa6af", 0x9d}, {&(0x7f0000000a00)="42c12de1f4486a959bb56100ea5cad2e460ac7f23a5da8c7b883d2e8b35fc55518055f9fa97f076dd9f5cf1ab727a9", 0x2f}, {&(0x7f0000000a40)="9b1dddde7c1618d91a7446d0b16ba9b3fba5627e5dc56e4aefaf1bfcb4f939c4490eb29d66f57fc6fa958deb51dc4a6d7909b678f4fbb1c7de5b7866cd5ae206d2bda663cc415d60c0dcc33c7c21fefcca591112631c1563ea4d269247af0ae2ac28d9e637d389084168ed29a0b1ac4b85a7c2eed957bf", 0x77}], 0x8, &(0x7f0000002940)=ANY=[@ANYBLOB="d0000000000000001701000008000000b0cc8040d0b3dd85e5a51c9aa0666119de180bb2bdf423d706c0c41d97caf652363de27ce8668b8d1fdcd930936d3acdefbf6e091ce6997e47d511bd80d58f08094d27c40a5aef8921a35e15acd785da0de4b85db25f8821cf4351e8e11b38169395484ba5dae26dc675767f8435acea03b31728e4313f4360734f8462b3856a32efc9d2792b60add8577418aa002ac841ae1bfc09f3a22e5ac209d22cfb0b65dd1f91d0383de5660801eb9f2bbf4cc470fe8c0eeb8bbc0cb5b1058042b0f5a7db250d537f1f5862a9bdc27466b99f85d6738fadfc751cf200f23f7762fe0705b06e4208564d29ae6cd6d8e2bc8300f86051b272e3809bc6d61423eee44c8dd0ab4e5739ae7295762a9223f7db98b35f46de7b72a48e4aa3769a25b58843df4d2c37c79eefaf2ddff2"], 0xd0, 0x1}, {&(0x7f0000000c40)={0x27, 0x0, 0x1, 0x6, 0x4, 0xc52, "7c4759c6a2670d53af1f463bab7742350c1b7860dff70882b45b5ff2ffbde4923c0873b194cfa2a78c671c910e58eae716c6c9e71736ba884e2e338f4d42be", 0x36}, 0x60, &(0x7f0000001e00)=[{&(0x7f0000000cc0)="f792caba3992096769c3ea82ba8e648a59b0", 0x12}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000001d00)="50272a2f21bc03e666bd793956dbd2b01bd56291a7f4b9e6b64ffb0df11659dcc6efdbbd9c580ae3a87189ce9d861cc4e0b3c995fc7a9b764e245c29de21ed2ed8df7857fca170e2ea9ac9668f05663bbd90be2d437637300991c97bea2b999d9d446dd4c351dd7a8be3fea7ddcf8c7484e2394b55445afcba9540780a2675d888d149c8e0604959aa07a79d3f10b420fa02dff891a16248dce8bbc2cd794d79c29161187a37b7f68b7343e6c842f883e5866bf949fabc81f2cdbb0b5208a6a84479a6a57072", 0xc6}], 0x3}, {&(0x7f0000001e40)={0x27, 0x0, 0x2, 0x7, 0xffffffff, 0x7, "39a0d74154534af99d8a7ace7cecf6a589b43daf90a9d27336c4c6a0bf38347bb1882f288617ffbb563e08b862bc231317e2693ecc17471fd809d6009edb96", 0x39}, 0x60, &(0x7f0000002380)=[{&(0x7f0000001ec0)="1b0c4fda923a6ea6650ff9997308f9092c3ae461e6b3f450b3398ed49f83ae5e4f395f1b22428d1f30cda1b7b06a78772167ebe82a15ea4254435d31c2f10b74bbbd2a43bf3a5d28bee6a048fbc5af7c286cc3125550c6ca79b7e51b660b97e704e4695fd405d98bd7e9374fae25969b9b2a1ba96701cac04cb56d9a47edee0d974a8fe49f535e3f88d1beed43abc71b3e09c5f3cc4d648122", 0x99}, {&(0x7f0000001f80)="57d93bb0ab4949f60cbc4533d08ae71611e9da4e4fc8b024f2246bf5f9ac4aa19b4eb327dcf998114a1337aa5e30b7c01bd3f6c2076689d0ab90edb1458e", 0x3e}, {&(0x7f0000001fc0)="f7e682d926278aa0d3e814bd959b15c0710abb1075c3cf175b4f0b12269710ca8301516c8de3c55688472b43affc725be19013cab62e7becdcc9db641c843d660e363571873231f1148286bc698dac10ef9befabd98d70f6620288ff075986a97467cc3fdb08c85ca5cfe164e6504659b60e89e0e6325816352768ace7f75c6cbd0ddc78791224e75e89a37522f457d8d24a3fea0f3f0085d9", 0x99}, {&(0x7f0000002080)="9fa2f266ef9e8a6cb655c9dfa152da7092933c37e10638e4325ce15b9b6c5f2a365de665a14a61c88e0067934e20f087e2a4f92deab42f620dfa7329a93f65674cdb6ec9f7ca31e3dd2d475a51873b0053b0bb7ac3ee15114488f573d0c9409fabee44f8fab89fb87c2e00af848d2c82ba6c51e0c140a02bfb80cc97fdbcb2d4ebe8a32021e1af10a46ce68a25786df6c5a09f4d85fdfaf85dee72445bb1d181cb1bf150c6a5db2d9e4485aa67e281528fa2cb14e738826cfa3727f16926", 0xbe}, {&(0x7f0000002140)="0feb9114c410aaf12db491ef2d1975196b6845259df09340d516dba6a3f253b790b64724fb7cf28023fcf38133a870950f12f6f0", 0x34}, {&(0x7f0000002180)="c606e5a4b4f686ce127df4295b822c7855f99d39499e1ca71cd0ddcf70941d9f0803e4d7bcb5c7cb68c5b3e6d69968a4f84359ee1a0c9f5ba7bc52f54387ae9c101144b66d2ba5a371b6515c5bde4951bfc64911dedd897d443ef223c5a518a6f0c87f78586303b88805c0a06629140adb031edcd284586f1c9fde33c002e63e6466d4ba37c6a351db9004dd308f379b7c51d644c9c2a3ba01e6a575cfb9320abbfd5f6d1d0b7d4ae463ef72eb41e8d4b121d55687838e6fe87cdffbd3b16b9a9b9e3504ce5656f8d033981e5b650ccdba5b9321c2c7c5513a4dc9aa015185ce", 0xe0}, {&(0x7f0000002280)="66f183a84b7c25884003790fa89e42ffcdb8dc322feb1d96678c28a2068b90bd375177df5efc83d5b2934f5cff2b15378d17d5a50b0854cee782d56c72c76701d22baa3f001e301bd737551908856b47deeca0185a96adcdab032c3050772ed82a8b463041c6c353a34a52b044bb79888a56da54892e47e6d846b434b19390aad6891263b7cb3ce4e1e48ab444a313a61e4857f9b6de291a99fcd748304def0e6000376ef0b79953fcc499614d4806f2673b4e86e693d8bd35fd", 0xba}, {&(0x7f0000002340)="4367fd894b4a6e720109214ec1143fc68464ee982ba7c76e92b8", 0x1a}], 0x8, 0x0, 0x0, 0x40004}, {&(0x7f0000002400)={0x27, 0x1, 0x2, 0x5, 0x8, 0x6, "7b8ba0e9ff1ca5acf9b6db5fb9c084772626356dcb223235de70274d7ca821b872ea29e050ff0da3979fee40fc37e3016ce8b258dcef47e1b92e01bcfcdfc2", 0x5}, 0x60, &(0x7f0000002700)=[{&(0x7f0000002480)="980f6eb5093fcb9c3d63ba79969a7d1cb995b5631ad75976389b841c5cf3099bc5405eb993440aae4e3d83f32827ac42f751d51d0d79d8b25bd365993b47900ac25e2d3f4d61229cac3b0f34c9e0ac078d2ee41f272e0ad39b1ab35178a7534ca7f77edafe1fc51ea3dc01709640ec289049fc7a0cd6c99774ec49404b48fe5d594a", 0x82}, {&(0x7f0000002540)="67f42958492a1991dc556b032d469a2928f8f04648147286ba586c742c6d11840bcb271bbe0bd77ad401b90b0103d27d4e22c66a6eecc72a27db0cce7127d205fc57a4be137f68d07937b721fdcffba4225c7b865dcb9b0427fd2dee323ede4458f9f3051b625c142139d3bec56cf675c38ba6cc7d4ce485094889e380ee33d01352d79213e732d2e3b40450dd2c30317dcf9006e9070ebbca1b6849d72086380c65537eff789efe2c05924b9b93f93aebc32f2844b6c9ac952eb33dff2ea24cfd6b755c870e66b5f63a73a542507603e4596a77", 0xd4}, {&(0x7f0000002640)="bde5a13ba814085f598e5f284d3aef7251096b812cbf9485e31ef359b673eb4fdf2ea0e6b71a01bbd443aa4e9c8deb18369bf0900377e6e4a18329f023703f2270cdc68de9fcad03cfad8ddfc32c2a29f9fc3afefc7f1b4ab6687dc1aa50355708afc3044ea919610309eb3fda60bd6ab0608c752312c0d863218be3eb7d7c497c74ebbd9eb4aa481a6a1723669cd51ee0dacbac", 0x94}], 0x3, &(0x7f0000002740)={0x50, 0x113, 0x3, "3d2f0d49c35036b8b46f37c0cd115ab55fe870d8537353dcfa4d24e723f6d5521eb4d131ee8960fd06b98ce9f10146b62c1f75d9ddfd5147baff6d02e12d"}, 0x50, 0x8080}], 0x5, 0x1) waitid(0x3, r0, &(0x7f0000002900), 0x20000000, &(0x7f0000000240)) getrusage(0xffffffffffffffff, &(0x7f0000000040)) [ 1093.682415] binder: 7815:7817 BC_FREE_BUFFER u0000000000000000 no match 03:39:05 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000001c0)) rt_sigqueueinfo(r0, 0x18, &(0x7f0000000100)={0x20, 0x4, 0x9, 0x9}) sysinfo(&(0x7f0000000200)=""/73) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x1) 03:39:05 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) r0 = msgget$private(0x0, 0xa) msgsnd(r0, &(0x7f0000000200)={0x1, "27fa8a9e692910d36e46dc14aaa86beee3a64d594d4567ef101a820939ed5f3b4b6ba9a59c89bca77e7945c2584f1097528bf748b5b0b13ac52d0304dc18a84e9e6fcfa0693a2ee859ae1a762895492a95feb5305f922284fa029a9fac55d938b137cd75151f97947c9c164292355e21ea9554314ddb9275638e05cfa16cbc99c6362ad2bc2522124232669cc300e45f3528db01488e7ab14a582deecc03e982b480f513a8d6de2f17c9123dbb1864e8316ce13ac9b363a83643d132fc6ca9e4b7f7aad601e5fa3bb8ba2aa81e6527a4d2ad38ffb363165a93f2e3bcad1aa2663e9f82ba73"}, 0xed, 0x800) r1 = msgget$private(0x0, 0x2) msgsnd(r1, &(0x7f0000000040)={0x3, "0d3436ac02e727d9463f4b2e4c1244fe9a37859375ca0ace656b1ebbb12ba2f3a84728f172934c6ce08dd6b8d026a8bea4c804a16f15c5ecf90083bdd8cfde0ca5dbaa590725754f3f9eaf3529e06ee2dc150a13498c9711119977f63860065eca2b50d841871fbb2ab46ab0c18323480c2b655857d157a4e8"}, 0x81, 0x800) 03:39:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x689, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:05 executing program 3 (fault-call:4 fault-nth:0): socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:05 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:39:05 executing program 7: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000180)=r1) r2 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r2}, &(0x7f0000000080)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2000, 0x0) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f00000000c0)=0x3, 0x2) 03:39:05 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x1fd}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:39:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x88640000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1094.359732] FAULT_INJECTION: forcing a failure. [ 1094.359732] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.371657] CPU: 1 PID: 7854 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #138 [ 1094.379489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1094.388869] Call Trace: [ 1094.391495] dump_stack+0x1c9/0x2b4 [ 1094.395154] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1094.400466] ? perf_trace_lock+0xde/0x920 [ 1094.404656] should_fail.cold.4+0xa/0x1a [ 1094.408753] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1094.413990] ? graph_lock+0x170/0x170 [ 1094.417816] ? __fget+0x414/0x670 [ 1094.421303] ? find_held_lock+0x36/0x1c0 [ 1094.425432] ? check_same_owner+0x340/0x340 [ 1094.430397] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1094.436166] ? rcu_note_context_switch+0x730/0x730 [ 1094.441131] __should_failslab+0x124/0x180 [ 1094.445416] should_failslab+0x9/0x14 [ 1094.449427] __kmalloc+0x2c8/0x760 [ 1094.452987] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 03:39:05 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x109001, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x4bf) [ 1094.459069] ? _copy_from_user+0xdf/0x150 [ 1094.463263] ? map_update_elem+0x325/0xc90 [ 1094.468143] map_update_elem+0x325/0xc90 [ 1094.472248] __x64_sys_bpf+0x32d/0x510 [ 1094.476211] ? bpf_prog_get+0x20/0x20 [ 1094.480071] ? do_syscall_64+0x9a/0x820 [ 1094.484083] do_syscall_64+0x1b9/0x820 [ 1094.487999] ? finish_task_switch+0x1d3/0x870 [ 1094.492529] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1094.496381] binder: 7815:7817 BC_FREE_BUFFER u0000000000000000 no match [ 1094.497510] ? syscall_return_slowpath+0x31d/0x5e0 [ 1094.497546] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1094.497577] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1094.522609] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1094.527983] RIP: 0033:0x455e29 [ 1094.531192] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1094.550514] RSP: 002b:00007fafe6a1ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 03:39:06 executing program 4 (fault-call:4 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:06 executing program 7: r0 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f00000000c0)={0x100000001, 0x4, 0x80000000, @empty, 'ip6gre0\x00'}) 03:39:06 executing program 6: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, r0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0xc, 0x8000000, 0x0, 0x10000, 0x0, 0x0, 0xed2, 0xffff, 0x6f1}, 0x10) 03:39:06 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 1094.558423] RAX: ffffffffffffffda RBX: 00007fafe6a1f6d4 RCX: 0000000000455e29 [ 1094.565737] RDX: 0000000000000020 RSI: 0000000020000180 RDI: 0000000000000002 [ 1094.573046] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1094.580336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1094.587993] R13: 00000000004bbb6c R14: 00000000004c8db0 R15: 0000000000000000 03:39:06 executing program 3 (fault-call:4 fault-nth:1): socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1094.640054] QAT: Invalid ioctl 03:39:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x500, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1094.686362] binder: 7888:7889 got reply transaction with no transaction stack [ 1094.693834] binder: 7888:7889 transaction failed 29201/-71, size 0-0 line 2759 03:39:06 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) [ 1094.735133] binder: 7888:7889 ioctl c0306201 200000c0 returned -14 [ 1094.753961] FAULT_INJECTION: forcing a failure. [ 1094.753961] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.765802] CPU: 0 PID: 7891 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #138 [ 1094.773471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1094.782870] Call Trace: [ 1094.785517] dump_stack+0x1c9/0x2b4 [ 1094.789175] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1094.794383] ? trace_hardirqs_on+0x10/0x10 [ 1094.798895] should_fail.cold.4+0xa/0x1a [ 1094.802985] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1094.808148] ? print_usage_bug+0xc0/0xc0 [ 1094.812223] ? trace_hardirqs_on+0x10/0x10 [ 1094.816453] ? print_usage_bug+0xc0/0xc0 [ 1094.820528] ? print_usage_bug+0xc0/0xc0 [ 1094.824714] ? find_held_lock+0x36/0x1c0 [ 1094.828794] ? __lock_acquire+0x7fc/0x5020 [ 1094.833112] ? lock_downgrade+0x8f0/0x8f0 [ 1094.837287] ? graph_lock+0x170/0x170 [ 1094.841082] ? __lock_acquire+0x7fc/0x5020 [ 1094.845329] __should_failslab+0x124/0x180 [ 1094.849566] should_failslab+0x9/0x14 [ 1094.853361] kmem_cache_alloc_trace+0x4b/0x780 [ 1094.858269] ? find_held_lock+0x36/0x1c0 [ 1094.862331] sock_hash_ctx_update_elem.isra.27+0x19d/0x1690 [ 1094.868037] ? lock_downgrade+0x8f0/0x8f0 [ 1094.872184] ? sock_map_free+0x530/0x530 [ 1094.876247] ? rcu_is_watching+0x8c/0x150 [ 1094.880412] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1094.884840] ? __fget+0x414/0x670 [ 1094.888322] ? expand_files.part.8+0x9c0/0x9c0 [ 1094.892906] ? find_held_lock+0x36/0x1c0 [ 1094.896980] sock_hash_update_elem+0x157/0x2f0 [ 1094.901576] ? bpf_sock_hash_update+0x90/0x90 [ 1094.906071] ? kasan_check_read+0x11/0x20 [ 1094.910335] ? rcu_is_watching+0x8c/0x150 [ 1094.914478] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1094.919040] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1094.924587] ? bpf_sock_hash_update+0x90/0x90 [ 1094.929085] map_update_elem+0x5c4/0xc90 [ 1094.933146] __x64_sys_bpf+0x32d/0x510 [ 1094.937033] ? bpf_prog_get+0x20/0x20 [ 1094.940839] ? do_syscall_64+0x9a/0x820 [ 1094.944832] do_syscall_64+0x1b9/0x820 [ 1094.948730] ? finish_task_switch+0x1d3/0x870 [ 1094.953320] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1094.958277] ? syscall_return_slowpath+0x31d/0x5e0 [ 1094.963209] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1094.968578] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1094.973436] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1094.978646] RIP: 0033:0x455e29 [ 1094.981841] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1095.001568] RSP: 002b:00007fafe6a1ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1095.010564] RAX: ffffffffffffffda RBX: 00007fafe6a1f6d4 RCX: 0000000000455e29 [ 1095.017844] RDX: 0000000000000020 RSI: 0000000020000180 RDI: 0000000000000002 [ 1095.025254] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 03:39:06 executing program 7: r0 = getpgid(0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xa98c, 0x20000) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000100)={{0x1, 0x1, 0x401, 0x100000000, 'syz0\x00', 0x7cb}, 0x4, 0x440, 0xaf0, r0, 0x4, 0x6, 'syz1\x00', &(0x7f00000000c0)=['\x00', '\x00', 'wlan0%}\\proc(:md5sum/\x00', "7b656d30df7d6b657972696e677d7365637572697479707070307b00"], 0x34, [], [0x1, 0x0, 0x6, 0x7]}) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) [ 1095.032572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1095.039845] R13: 00000000004bbb6c R14: 00000000004c8db0 R15: 0000000000000001 03:39:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:06 executing program 3 (fault-call:4 fault-nth:2): socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x543, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:06 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x4, {0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x21}, 0x80000000}, r1}}, 0x38) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) [ 1095.152542] binder: 7908:7909 got reply transaction with no transaction stack [ 1095.160346] binder: 7908:7909 transaction failed 29201/-71, size 0-0 line 2759 [ 1095.234859] binder: 7908:7909 ioctl c0306201 200000c0 returned -14 [ 1095.238351] FAULT_INJECTION: forcing a failure. [ 1095.238351] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.253578] CPU: 1 PID: 7917 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #138 [ 1095.260984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1095.270365] Call Trace: [ 1095.272974] dump_stack+0x1c9/0x2b4 [ 1095.276612] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1095.281821] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1095.287383] ? __sock_map_ctx_update_elem.isra.20+0x4ef/0x1530 [ 1095.293587] should_fail.cold.4+0xa/0x1a [ 1095.297777] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1095.302971] ? save_stack+0xa9/0xd0 [ 1095.306593] ? save_stack+0x43/0xd0 [ 1095.310232] ? kasan_kmalloc+0xc4/0xe0 [ 1095.314737] ? kmem_cache_alloc_trace+0x152/0x780 [ 1095.319943] ? sock_hash_ctx_update_elem.isra.27+0x19d/0x1690 [ 1095.325838] ? sock_hash_update_elem+0x157/0x2f0 [ 1095.330617] ? map_update_elem+0x5c4/0xc90 [ 1095.334855] ? do_syscall_64+0x1b9/0x820 [ 1095.339539] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1095.344906] ? trace_hardirqs_on+0x10/0x10 [ 1095.349150] ? print_usage_bug+0xc0/0xc0 [ 1095.353309] ? print_usage_bug+0xc0/0xc0 [ 1095.357369] ? graph_lock+0x170/0x170 [ 1095.361176] ? lock_acquire+0x1e4/0x540 [ 1095.365148] __should_failslab+0x124/0x180 [ 1095.369397] should_failslab+0x9/0x14 [ 1095.373298] kmem_cache_alloc_node_trace+0x5a/0x770 [ 1095.378681] __kmalloc_node+0x33/0x70 [ 1095.382481] sock_hash_ctx_update_elem.isra.27+0xaa7/0x1690 [ 1095.388193] ? sock_map_free+0x530/0x530 [ 1095.392247] ? rcu_is_watching+0x8c/0x150 [ 1095.396386] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1095.400806] ? __fget+0x414/0x670 [ 1095.404258] ? expand_files.part.8+0x9c0/0x9c0 [ 1095.408928] ? find_held_lock+0x36/0x1c0 [ 1095.413019] sock_hash_update_elem+0x157/0x2f0 [ 1095.417607] ? bpf_sock_hash_update+0x90/0x90 [ 1095.422124] ? kasan_check_read+0x11/0x20 [ 1095.426358] ? rcu_is_watching+0x8c/0x150 [ 1095.430607] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1095.435036] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1095.440663] ? bpf_sock_hash_update+0x90/0x90 [ 1095.445151] map_update_elem+0x5c4/0xc90 [ 1095.449211] __x64_sys_bpf+0x32d/0x510 [ 1095.453120] ? bpf_prog_get+0x20/0x20 [ 1095.456924] ? do_syscall_64+0x9a/0x820 [ 1095.460906] do_syscall_64+0x1b9/0x820 [ 1095.464798] ? finish_task_switch+0x1d3/0x870 [ 1095.469289] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1095.474218] ? syscall_return_slowpath+0x31d/0x5e0 [ 1095.479167] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1095.484538] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1095.489385] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1095.494592] RIP: 0033:0x455e29 [ 1095.497857] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1095.517608] RSP: 002b:00007fafe6a1ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1095.525422] RAX: ffffffffffffffda RBX: 00007fafe6a1f6d4 RCX: 0000000000455e29 [ 1095.532694] RDX: 0000000000000020 RSI: 0000000020000180 RDI: 0000000000000002 [ 1095.540134] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1095.547407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1095.554763] R13: 00000000004bbb6c R14: 00000000004c8db0 R15: 0000000000000002 03:39:07 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x17b}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:39:07 executing program 7: r0 = getpgid(0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x3, 0x4003) write$P9_RSTATFS(r1, &(0x7f0000000140)={0x43, 0x9, 0x1, {0x2, 0x6, 0x2, 0x3, 0x2cdbdc, 0x5, 0xffffffff00000001, 0x0, 0x6}}, 0x43) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r2 = memfd_create(&(0x7f0000000040)='\x00', 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000001c0)={0xbd8, 0x2, 0x4, 0x7, 0x5a7, 0xfff, 0x2, 0xf20, 0x0}, &(0x7f0000000200)=0x20) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={r3, 0x1}, &(0x7f0000000280)=0x8) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0)) getpgid(r0) 03:39:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:07 executing program 3 (fault-call:4 fault-nth:3): socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:07 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:39:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0xe80, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:07 executing program 6: syz_emit_ethernet(0x55, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipx={0x8137, {0xffff, 0x47, 0x9, 0x4, {@broadcast=0xffffffff, @current}, {@broadcast=0xffffffff, @random="044bcb2d6634", 0x7}, "a102cd1b15bba3154478cddf07d2326f2ff9071c4c8d5d613a4ef79ab0046a584f5a548dcabe192718"}}}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0, r0, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:39:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x200000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x3a, 0x2, &(0x7f0000000180)="3a457ddf8660fee250488a484f8004167f7bc24a12088343d0c492ec1f9c7ea7e6874f2c6383bb2ce2c329fe7e1a13bcd3870346ac30b6519717", &(0x7f00000001c0)=""/2, 0xfff}, 0x28) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2000, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000080)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000100)) [ 1095.700274] binder: 7935:7937 got reply transaction with no transaction stack [ 1095.707892] binder: 7935:7937 transaction failed 29201/-71, size 0-0 line 2759 03:39:07 executing program 7 (fault-call:3 fault-nth:0): clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600), &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x20000000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) [ 1095.797944] FAULT_INJECTION: forcing a failure. [ 1095.797944] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.809358] CPU: 0 PID: 7939 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #138 [ 1095.816652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1095.826022] Call Trace: [ 1095.828638] dump_stack+0x1c9/0x2b4 [ 1095.832287] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1095.837592] ? __lock_acquire+0x7fc/0x5020 [ 1095.841847] ? print_usage_bug+0xc0/0xc0 [ 1095.846213] should_fail.cold.4+0xa/0x1a [ 1095.850299] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1095.855570] ? __lock_acquire+0x7fc/0x5020 [ 1095.859847] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1095.864890] ? print_usage_bug+0xc0/0xc0 [ 1095.868992] ? perf_trace_lock+0xde/0x920 [ 1095.873162] ? __wake_up_common_lock+0x1d0/0x330 [ 1095.877958] ? trace_hardirqs_on+0x10/0x10 [ 1095.882215] ? print_usage_bug+0xc0/0xc0 [ 1095.886302] ? perf_trace_lock+0xde/0x920 [ 1095.890473] ? lock_acquire+0x1e4/0x540 [ 1095.894470] ? zap_class+0x740/0x740 [ 1095.898210] ? graph_lock+0x170/0x170 [ 1095.902034] ? print_usage_bug+0xc0/0xc0 [ 1095.906133] __should_failslab+0x124/0x180 [ 1095.910389] should_failslab+0x9/0x14 [ 1095.914213] kmem_cache_alloc+0x47/0x760 [ 1095.917418] binder: 7951:7953 got reply transaction with no transaction stack [ 1095.918375] ? zap_class+0x740/0x740 [ 1095.918406] __debug_object_init+0xbe1/0x12e0 [ 1095.918431] ? debug_object_free+0x690/0x690 [ 1095.918452] ? lock_downgrade+0x8f0/0x8f0 [ 1095.926757] binder: 7951:7953 transaction failed 29201/-71, size 0-0 line 2759 [ 1095.930453] ? print_usage_bug+0xc0/0xc0 [ 1095.930514] ? lock_downgrade+0x8f0/0x8f0 [ 1095.959378] ? zap_class+0x740/0x740 [ 1095.963123] ? mark_held_locks+0xc9/0x160 [ 1095.967289] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1095.971901] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 1095.977031] ? trace_hardirqs_on_caller+0x19e/0x5c0 [ 1095.980430] binder: 7935:7937 got reply transaction with no transaction stack [ 1095.982081] debug_object_activate+0x32e/0x690 [ 1095.982101] ? debug_object_assert_init+0x4b0/0x4b0 [ 1095.989504] binder: 7935:7937 transaction failed 29201/-71, size 0-0 line 2759 [ 1095.994050] ? graph_lock+0x170/0x170 [ 1095.994068] ? lock_downgrade+0x8f0/0x8f0 [ 1095.994086] __call_rcu.constprop.67+0xc8/0xc00 [ 1095.994104] ? note_gp_changes+0x550/0x550 [ 1096.023514] ? refcount_inc_not_zero+0x2f0/0x2f0 [ 1096.025181] binder: 7951:7953 ioctl c0306201 200000c0 returned -14 [ 1096.028320] ? smap_list_hash_remove+0x347/0x470 [ 1096.028342] ? trace_hardirqs_on+0xd/0x10 [ 1096.028360] ? __local_bh_enable_ip+0x161/0x230 [ 1096.028380] ? smap_list_hash_remove+0x347/0x470 [ 1096.028413] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1096.059314] ? smap_release_sock+0x95/0x320 [ 1096.063661] ? sock_map_alloc+0x410/0x410 [ 1096.068270] kfree_call_rcu+0x15/0x20 [ 1096.070328] binder: 7951:7953 got reply transaction with no transaction stack [ 1096.072088] free_htab_elem+0x34/0x40 [ 1096.072111] sock_hash_ctx_update_elem.isra.27+0x1176/0x1690 [ 1096.072136] ? sock_map_free+0x530/0x530 [ 1096.072151] ? rcu_is_watching+0x8c/0x150 [ 1096.072165] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1096.072188] ? __fget+0x414/0x670 [ 1096.079492] binder: 7951:7953 transaction failed 29201/-71, size 0-0 line 2759 [ 1096.083249] ? expand_files.part.8+0x9c0/0x9c0 [ 1096.083274] ? find_held_lock+0x36/0x1c0 [ 1096.083309] sock_hash_update_elem+0x157/0x2f0 [ 1096.125665] ? bpf_sock_hash_update+0x90/0x90 [ 1096.130199] ? kasan_check_read+0x11/0x20 [ 1096.134372] ? rcu_is_watching+0x8c/0x150 [ 1096.138541] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1096.142976] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1096.143343] binder: undelivered TRANSACTION_ERROR: 29201 [ 1096.148558] ? bpf_sock_hash_update+0x90/0x90 [ 1096.148577] map_update_elem+0x5c4/0xc90 [ 1096.148600] __x64_sys_bpf+0x32d/0x510 [ 1096.148616] ? bpf_prog_get+0x20/0x20 [ 1096.148645] ? do_syscall_64+0x9a/0x820 [ 1096.148666] do_syscall_64+0x1b9/0x820 [ 1096.148684] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1096.183419] ? syscall_return_slowpath+0x31d/0x5e0 [ 1096.188383] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1096.193775] ? trace_hardirqs_off_thunk+0x1a/0x1c 03:39:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x3580, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:07 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0xffffffff7fffffff, 0x0, 0x0, 0x10000, 0x0, 0x100, 0x0, 0x0, 0xfffffffffffffffd, 0x800000000}, 0x10) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, &(0x7f00000000c0)=0x80) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000100)=0x4, 0x4) semget$private(0x0, 0x0, 0x80) 03:39:07 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:39:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xaf, 0x0, &(0x7f0000000440)=ANY=[@ANYPTR64=&(0x7f0000000540)=ANY=[@ANYBLOB="ab01f64996e1453e78fab8e21fc6b840b53fa9f484610d3279b806c8e46ba80acd82e69e9361d8d4d915e79825bf6f0563e58089223d5506446ba9db8766799676facda21e08c384619265be69c153c83f2929589bc40ad4d6744aef873996529311f86e8c078ad2134e1684b909e5e43f0ae6ff22c40e68df556fb47b56583fbede00066c8d43368797ebe5ac656ccca0fcc0b26278d0f8b0c55068a1a83c08c6080bdae4845220d6da288f56338f58fb9619176563b83810ff83b79a6be0693d03fe55e7dbf5f71d557cf825a654d5f1af7fd7c8b0495a1b32ae76cea6df7b316dc9c0be3a81eafdd9166942bec3a515ab2e7e674adc8b50f7fe8b25c8432e43742e10fa437afaa23aebf8f69952f76eb79df270292359a661b063d1f5a8568a4e8168d541fef4fa38968317b5e5b19cb8592661872ac5e4e5b57ea63dcd5147ded24d46d57973372ce5ccdd1a0fc8d0ad94838641e1ca003e3a3121819454889bba5abfb2f57d7450a18cab1d91df210967f9b223dc5f5cc512a34ab26010be5acbd4270e5fae838a9b709823caac320ee50c0b87a1e6962bc0bae806f7c13f52087594b122006dbc506604f639cc8a8e39660e45c78612889b5356d93825250c522fc08b3924f4e71d18fdbbefbb280a35471a3ddd2ce31fb199d9a8f7d0918d937ce5764d062740039220e94e4b08646bc5c4b2add856614e86cf9b3b3fab6f3d0a325aaeab58b6fa53c08ce77ae35355172eadeace136e7dd6497ce57b019e811631b58ed95a1c24a2354b935cd3f2203ba4a4d5e62fe42059e61cfa2da515d239baf5915a213b9f44dd97310ca8380fdc2429d239d890ccca5c4101bbc9c6f72a65cc805ac4b8215af8dac24993318f3fbbcce56f367a1886f753275f6208a7fb5b8af8b574435e3762bab7c4f53ee3ee117c14a4192c6523d611ba41a700b00315cf0b0279fcea2a7b3cce37eb69aaa3399f85f975b7acd8a09b48ccde82fdc66e9818dad4280d545d3cbe772f0c0c75f4cef31879649c996e55faad9a2911a2d55d7464c4cf045dff467598cc523ff6f4b56efdcc78a8a53b5df11553133f504916d283b27ff1a5b95ff336d6c587a36eeb93bfabdc6e94bfa1f6257ee1a83cf323a508249066a37c9e52d72b817549c67a10aa0c0892f24914c6c4ca9db2df75258ed3c0464d6218a9c10fd8d49339839681e15220c6c40c20c57480d7480a209f247474c489c364ae386f7366b96754882627bc751bf350a0304d9715996481b9c0e0a7ccfe303cdc04c418bb2e09828650dd9a2ac10474300cfea3c88c2ac48bef4cd0fff8433ee6da8aef3c843745f69a0c41b42e0cac109056d2a5c469562f1cfa49164357f6317a6ad6457cafe94af7749fe6cb5806bd4c7cd1fae13383537d77a215d534bd39022dbb7f361d2a77440a90858aed64f707b4ead5c7d4a717b6dcba1ddfad9b742a7ba48d7a4e95109de50c4ed2477ff284194329f4472ea80f87a6c9f46b4fae5c1f2fb429c37ad0508927d529404c736ee364befd5bc0138137ea0f9ab3db975fce293662769122fde5350ecc1cfd53e96d7f16dec6933242d9984c748651f49ba8c7d6ee76b80a6d38e3f29ad33f4a2a3a0ef47deb1ce2628043e018513ee3fd0440b8503e0957a0f0c4c725e54c360aaad9eaf5e8fe13e072183a6f9f9ca53cb436b3a4b05496c4c8dd9cca54843fa2a351e666ea03c5515fc5630e26e66e5a248862e57f353c9e5275619c3bab1e91dc727d40d73ae1ff6cb7fd1d2e12be8241bbb5e9f2b098f797a30838ac46777ba92e6c834bec367abd067baf062a322ef21e957901732d102b9466f57f48e44108fea154e8e6adeb710d19a22f843d6ab3264f9ee91522c189ec436263c14a5cf7484057fe21ee3415582c332986c10c3b35a3b4f2102f114eb093b5d611cdadb3e26886ac8d64a6b06426b3867bf18ac03206b94db127f2edb606e033274719198a6f12e19a5d1291c849951672912155bc843e43652c8c6e89d6d2616605a7c8a1f297c563972a613611293d8e0e45e37e6d23797f7ff43392defe7cbf611abc8b7fbdc44f790b398d67602f03bdaf150a0b4ebb7229ed0dd5e1565ec616bcf23921c66739f61c461e7392d818b0e2a998a186c25d8abe9a977902925e1fbc260a47e0ad7d9fe4c8979c4b769320026ae6b3a3c9428642bb7134875b16ba890198e2fecf3090275a42d8beebb1c34f174d7a503d32de218a57d972a9edd0b93cae0782213d9399649fc177209dc37818777f5d817665f8c59ae31a97218e76f611fd775c09c70bcc6b8f40514a3b4951415cb71cbd2a49b3fe376e3278000bcde9274ee7f5c1af99b6ab7230e2846649ceb3338cb1eae63a67f28ae18ae0758513badffe57e764777d2489aef9c6d3d1fe046928e8607d6070032e2791787cc5f95d34b7acc1598c7f076450705b0ae1927af676cfbdb1ee2b273aa0792df8bd0a87f66b9dd5aa30eeed339541c41bfcaa8960d0bedae7e10d4458de0f235bbb938d8a85d53efcd6d406189f379bd3f3d9aef834444268c26562f1d0b535c454514c9da78f93e5081f805a6dca71df11637e62340ccfe29dbcde13690a429fc2958e528b1f324bd98875088468701275f198fa32ba342a3c6cd76ebe98186da685fbca4ab7f023ff4049e944c95080948c8afeeb891af2a032610e89358b4348f295459dc9a89c57cda167f26fe2b4311d88106409b74b9bdc190f337a3f7baf8a25b2547be6ff3f679a1b11a2961cab29c8acf02d6835150a33fa9b7ca67ab63a84b0f78d8f10e2862489aa191c39aeccb2aae6df9eaf1093603a8c978a759451a55b90d3e24f7938c03eac329a82b54248cb5b982a433407c14f9a9ae98cbdef414fc368e93c1ef23782e7ec5506d929b7070905ca718fb4d382d80151575f73967348ad4f7bf529c591f48e654bcf5f9f0710d17ca1baea76df2184866319332ae59c2b291501114eb72c1aeceb38631b51b016ddcce2538b0767a424961cbdd14578d29efcc1d9b84d01de9a83535a28c40cd0faac9533c7a500ff535119778b5a2f7bb1743478f14dbf4c85a391c243d3787ceb33f3313f4b55c2291e6338a0aa4ef7a21bea5d5339acf7f357f22ee7a628b973ac9a2281313d9f198d2da8a124b6b73934a0a44b8444d6c6f8bc13f1a06d22d7420f1af45702ab24ea23d61a99a0a78e3765bb05911d10fed3434884320d7bba1db66bc2a2c98da720966f21462243fca1c058917049606ebb8ac1596a3824e549ac21215f1460691aff375d6fb3cb5f57f1961923f2330b33ead9690d42065e3ea71d64650a2287225557550aa5e57bad90a81d0b21e69f830da393faa477130a2346692cc64f75a87fc6eda127ee13b4a1e96b2a3f0278186fcbb60689ba3b616223ca890336a3eed4a0f7d054a0b603cb158e346f71df64b597d9c066ff5e4e30138b5a5702ec47382014cef2abc7c5bb6839c4b3c6d49f10fb33d2648221df88c2cb11d1c5659adcedf9325e19dd73ece30cc6fb8d20ad1ab8a78caed1aad96702b3d5b9d01a0eea52588f6a15be2e10b082e6c7e45f5507abe77ea357f32a137ecb390c5c8cad5d68fad8adf37bfa845087d44560aa52495f1c12748a7812acf3522cecf0db24f50f7250f7c735c8cfd0abcb78309a18e7b1e2434e517a6fea52d1a5bb7da89f859035fae02456d776685c1097a5a53c649d22b1a2d028afb451f7b7a60b725d734ff256628db331fd5ac851191c554ed136cdf7a6f260a368746b442b915ad78b063effb3d936308a27b5be186882734d74a807a1d04271ed41f4b0b9f6d4f897e07d76eb90145f5f7fcbb87543ed24aa5371c4e4cf77aa18476fa068d85cf15ce240aba5037fe3b8400fccf06b48b9f405b2060259c572a7b4880cc54edf3a24a512d6076045df51585073213e73acd02d25d10b5648b25f4ffbd7a9f003c28ea75635764573de8767b77730ffb37fdc450f239221a0151d0682c4735eeed8fbeb84d3c9adbf19b6f8779703b3e89737e6b0df73ce0a44e2c427ad769d1abdee014a82ebdc89e02bf0e3eeb6b950ece809c342759b410d42390a259e3fc53bac86e444f49f71e90845c2411815c6fd1fccb92a7b48d760521ebadcb2823654862fa580c30649523982985e7837c445b1f51380051217dd4eee8dbfe09f8bd7caa27f4eed1d7ed31a0b4d1696597ae29b2bdb21edfe9a37a5c9ab9207eaec6cea98f599b3f78318938472afa3e1f0ccbc13e8ca66e064e10782ca1303945a1d5aebd506a6b95c908835e9f87da4b294d1fe6579d565af76f2ddb3a7750e86accce5fc177cd31b041a9914ae9d7e9014bec27abab89724fba05379893c9599906dd5776e3c6f948df929cc7d51940c0890a27732a47387271c6acd31681dc1d2e990751af531fd1af564abee92d6f22269d680eedadf069c5ef629ef4a4267ae54e3e27036f196c65eca0d508649910e9bc99859cf6cb21edd5a72af31f43abb0d911db1f2b010a731feea320d4d9a1d056873f4d23e7534a50b2853db21d749d5e6eff4a55ce98d45aaff246485dcf075ed54221e15cd332511c3f42109b6ed318e823eafa13097926e1bc5ae5d39bda3b7909b8b149aec8dffc89e40fdb87cd2fa129ca39c11ef09bc41e27b8507a89203f377d7e92b4ad27de6a2ee519d4a754f745109eac50ff5be9528eb633231ff3eaae1e7f37e344c8a3a7d87fa70edf6fe6d20bd387bdd3baf2069f5854e8d961fdb7ac702e23b41823592cb30ce31ada3797f93ea52d9806cdeef70dcc992000f6181703ee35d6af03c55df969981c9bf0cf6334dbd8e03166e59effec143f364067492d606b3cce08e81af74218cf91f9c62068f86681755f27562198b72a2bd719080fcf4f36b59ab61d0280a891f50eb5fd05b1ea12489f9de0c2c0dbf5398296590e7692cc750d09e632ac18877593248c290fed579e753dc09e707d5b9eab9fd86860283b54c4bce48e5b1bfed493854a1d467d46f255d40d504426a71e67b18aeba7a5fde967c2182065dd14b1151e09456bc455620937dfb6834387650716250a4226bd8a1519d12d7d01dc9f4d75ed96b0c11b8be39dd5e77c62c00dfc9d300221a825f06c223fd4fa3a8796b26823424926b712b7ab3367ec5a02f131d4fe5426045b6341353fdf6889577fc27dd558c42fef67f9fdad370aa5743447ac48e58485de17da0abef888f2e186bd243e4266300dd995de016bb7cb22e715241d58eb7a2d3e4865a9223ec750218d767c17d17ea5717483d37c34a745fa03ec63ed7f87d984e79442173da62a236095f5626adc7f7d4a156e7f5385c520fb202b574afdc30eb9684d043a31467d69cacad972e3381a07f591be303b727613d0a9217090ce097783962ac4e175061db20749848c00addbbe1a75ef7d2bf9f3370f66189e1571914b487b25565c7f88e2104803bb5daf467fffa4b9573d45a90637274589a10805c79da17f49927127b6d701211233ea0e93ea905f835ab6de3fd6b5f6f65e857ce6905d3c93bf0a4652639aa5156034c5dffb7302788d422dd0ed1d3c08f8830fc26d4435da156b16438fd0935840d01e695313e16254ef3e59a45c662a582132b2911e4ec2a56a8f1e52b2767380eb1d4f7375cb5ec84649a48a5a5da81da946c27d3d04414346c967213fc65fc9407a86843e2b7cdc6a9aa9b365cda7aa7855650cb0881327cee71b9913bddc6312360f89d5bb546d1d9671ca8a28b998c2c014f81266c2208", @ANYRESHEX=r0], @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB="8200b56e74bb891c060b051a13a35fa428cf0359915573b10cb4e24eaa30750c8b169c54908f82c8305b33604233f2b2c02bc7830595cd11bb16a825d56cbbd71e94452183dabfcc3148c5560137ec025b1de183517bbb9be3fc0dae9dbdcd24d0e4aa1ba76c8c33fefc03f372576c63747066597c7c065a92dcb4f264cfcd66025435671f37b510e1e81db2a75418cb43ea51854c2864"], 0x6c, 0x0, &(0x7f0000000040)="d16239054d6b48f746c7a3356a39e43d4f35d81fc939a3bfa67a859f56b4c293870b9cfb2693411368e9b6aaefd6e29e499841bfe0bc9de7c7bedd7d4fd1790891ead63fc3f3c8ed100ba0960e180ee1427aedcdbdb33c1d30e77e230193a94e393699b5e47cdda7cc6317d3"}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x20000, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000140)={0x1, 'D'}, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x10000, 0x0) fdatasync(r1) [ 1096.198650] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1096.203853] RIP: 0033:0x455e29 [ 1096.207042] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1096.226505] RSP: 002b:00007fafe6a1ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1096.230720] binder: undelivered TRANSACTION_ERROR: 29201 [ 1096.234251] RAX: ffffffffffffffda RBX: 00007fafe6a1f6d4 RCX: 0000000000455e29 03:39:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1096.234260] RDX: 0000000000000020 RSI: 0000000020000180 RDI: 0000000000000002 [ 1096.234269] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1096.234278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1096.234288] R13: 00000000004bbb6c R14: 00000000004c8db0 R15: 0000000000000003 [ 1096.324141] binder: 7974:7975 unknown command 536872256 [ 1096.340478] binder: 7976:7978 got reply transaction with no transaction stack [ 1096.347974] binder: 7976:7978 transaction failed 29201/-71, size 0-0 line 2759 03:39:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x43050000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:07 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x400, 0x10000, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb4}, 0x10) [ 1096.368574] binder: 7974:7975 ioctl c0306201 20000000 returned -22 [ 1096.412639] binder: 7976:7978 ioctl 10 200000c0 returned -22 [ 1096.415725] binder: undelivered TRANSACTION_ERROR: 29201 [ 1096.443675] binder: 7976:7978 got reply transaction with no transaction stack [ 1096.451201] binder: 7976:7978 transaction failed 29201/-71, size 0-0 line 2759 [ 1096.451920] binder: 7976:7984 ioctl 10 200000c0 returned -22 [ 1096.481930] binder: undelivered TRANSACTION_ERROR: 29201 [ 1096.491891] binder: undelivered TRANSACTION_ERROR: 29201 03:39:08 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x3f1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:39:08 executing program 3 (fault-call:4 fault-nth:4): socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:08 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='sched\x00') ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f00000002c0)) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) accept$nfc_llcp(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f00000000c0)=0x60) accept$nfc_llcp(r0, &(0x7f0000000340), &(0x7f0000000100)=0x60) 03:39:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x8906, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:08 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 1096.626938] binder: 7996:7999 got reply transaction with no transaction stack [ 1096.634449] binder: 7996:7999 transaction failed 29201/-71, size 0-0 line 2759 03:39:08 executing program 6: r0 = memfd_create(&(0x7f0000000100)='\x00', 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x180000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x40, r1, 0x8, 0x70bd2b, 0x25dfdbfd, {0x9}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008804}, 0x20000080) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x7, 0x4) r2 = dup(r0) ioctl$TIOCSCTTY(r2, 0x540e, 0xffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) [ 1096.675566] binder: 7996:7999 got reply transaction with no transaction stack [ 1096.683006] binder: 7996:7999 transaction failed 29201/-71, size 0-0 line 2759 03:39:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x800e, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1096.717681] binder: undelivered TRANSACTION_ERROR: 29201 [ 1096.724834] binder: undelivered TRANSACTION_ERROR: 29201 03:39:08 executing program 7: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600), &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x20000000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:39:08 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0045877, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:08 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) sched_getparam(r0, &(0x7f0000000080)) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='eth0!&\\cgroup(system\x00', 0xffffffffffffff9c}, 0x10) execveat(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000240)='ppp0]}keyring\x00', &(0x7f0000000280)='{\x00', &(0x7f00000002c0)='{wlan0keyring\x00', &(0x7f0000000300)='posix_acl_accessvmnet0vboxnet1\\\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='lo\x00', &(0x7f00000003c0)='\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='loproc\x00', &(0x7f0000000480)='eth1selfvmnet0:\x00', &(0x7f00000004c0)='vmnet1]&:\'$nodevppp1^wlan1cgroup\x00', &(0x7f0000000500)='[@lo-\\'], 0x1000) [ 1096.837437] binder: 8023:8024 got reply transaction with no transaction stack [ 1096.845132] binder: 8023:8024 transaction failed 29201/-71, size 0-0 line 2759 [ 1096.912152] binder: 8023:8024 got reply transaction with no transaction stack [ 1096.919752] binder: 8023:8024 transaction failed 29201/-71, size 0-0 line 2759 [ 1096.949433] binder: undelivered TRANSACTION_ERROR: 29201 [ 1096.956417] binder: undelivered TRANSACTION_ERROR: 29201 [ 1097.224942] binder: 7974:8041 unknown command 536872256 [ 1097.230586] binder: 7974:8041 ioctl c0306201 20000000 returned -22 03:39:08 executing program 2: r0 = getegid() setfsgid(r0) r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1263484000000000000000000000000000000000000000000000000000000000000000d4bfb1f500000000000000000000000000ddc50f11da7b1f0b69e76e2cf1e7f600f53702c8aaf51d9c8e880f5081f515a80603f10225c2afe5ac0b83bc0dae3238da49c7bf6ec1327e1c816680a22b2928ea72f0baabc26b4506d74347fd", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x6, 0x8, 0x1, 0x8, 0x2}, &(0x7f0000000240)=0x98) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000019c0)=0x0) fstat(r2, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fcntl$getown(r1, 0x9) r7 = geteuid() r8 = gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002bc0)={0x0, 0x0}, &(0x7f0000002c00)=0xc) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000002f00)={0xc, 0x1, 0x8}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000002c40)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000002c80)={{{@in=@local, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000002d80)=0xe8) sendmmsg$unix(r2, &(0x7f0000002e80)=[{&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001940)=[{&(0x7f0000000600)="09fcde99315c7c279ed4381a820b360611f01f5e54e4bb6cfb224b0d0ff32bd379f5f9aa3ce87193359770fb8cf4776c3bca35740ecee9dd0a93fd7472e1792d3e1b2b9f66cb36721275c0a49a318179e2716ac921bc021547c64fc7ba14c295772c02fda14384f51f7d39bde62d2e00e1674860cae3d607f860c31e333256243fdfca3f2f7651f873115895b45b6faf81ec627fafb54fd176561df9f1e5ce754167771dfc3d0957e1cf3859baecfc4b5bc35924776179b00d97b883550f796c2f4c413a02fc6b96774228ef9985d84776028b4e57cc22168574c84d08", 0xdd}, {&(0x7f0000000700)="3870c7b192d10004ff0b6c45a4087ef2036f7c03d4be0c934b6fe54c8dc6ca7d8780bb574994a7d3b1aa0687ca716e3a10dfd2a7d4b7cdea0437ef552d302a123af71316e20e", 0x46}, {&(0x7f0000000780)="c7efb82ffa4047cd749a3863bbdcba05f3f9b5399c25b4dfe95cf586f8df53d5c12151904becc6091ef2c3970069370442b29dd6c75a658d97a4dac65439f7444f06c472d07e35f3a70ec5ee105840def452a09dbe224145ba956c386e44afb8bd9789d43938f10b88f810dc91a1d74dd614b184506cdce7dccdee0e67519c7441fe60015fe8c6cd724642e2e55e94bc", 0x90}, {&(0x7f0000000840)="3a7e697e85495693d4f70bbc67348b804630a51218a9d6234352a6a70e4426471b115837e1ceb6f821ba09417357f3cfe41d0976a395d31b219c1bcbe4cc9fcccdb31ea4eedd2155ec8b226bb74c645a489f25a958802243646d88aca9eb99eb28e57a67db1e0c78cc31d59b180d8ef41ddb83d1de004cbe899594c0a122f4fad3b2473c8a88b49df9710bdfbc883ac5c011fc3be72589662a6b2262aa8faf5704ccfe90c5a3131ad15dc95ce65fa317eab859d3906b9e88c3391a39f564407152d281c3a9086c9c076f2af9cad3138cc39c2ab39aad8085cbe0463d2e8dc250", 0xe0}, {&(0x7f0000000940)="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", 0x1000}], 0x5, &(0x7f0000001a80)=[@cred={0x20, 0x1, 0x2, r4, r5, r0}, @rights={0x20, 0x1, 0x1, [r2, r1, r1]}, @rights={0x18, 0x1, 0x1, [r1]}], 0x58, 0x85}, {&(0x7f0000001b00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002b80)=[{&(0x7f0000001b80)="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", 0x1000}], 0x1, &(0x7f0000002dc0)=[@cred={0x20, 0x1, 0x2, r6, r7, r0}, @rights={0x28, 0x1, 0x1, [r2, r1, r2, r2, r2, r2]}, @rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2, r8, r9, r0}, @cred={0x20, 0x1, 0x2, r10, r11, r0}], 0x98, 0x40}], 0x2, 0x4000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000480)={r3, @in={{0x2, 0x4e24, @multicast2=0xe0000002}}, 0x3ff, 0x20}, &(0x7f0000000540)=0x90) r12 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}}, [0x9, 0xff, 0x9b9, 0x611bfd20, 0x7, 0x0, 0x4, 0x9, 0x100000000000000, 0x7fff, 0x3f, 0x6, 0x0, 0x9, 0x4]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r12, 0x84, 0x72, &(0x7f0000000080)={r13}, 0xc) fremovexattr(r12, &(0x7f0000002f40)=@random={'osx.', '/dev/binder#\x00'}) getpid() 03:39:08 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x6, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0xffffca88, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1097.377991] binder: 8046:8051 got reply transaction with no transaction stack [ 1097.385466] binder: 8046:8051 transaction failed 29201/-71, size 0-0 line 2759 [ 1097.399911] binder: 8052:8054 got reply transaction with no transaction stack [ 1097.403615] binder: 8046:8051 got reply transaction with no transaction stack [ 1097.412007] binder: 8052:8054 transaction failed 29201/-71, size 16101823-0 line 2759 [ 1097.419266] binder: 8046:8051 transaction failed 29201/-71, size 0-0 line 2759 [ 1097.436922] binder: 8052:8054 ioctl c0306201 200000c0 returned -14 [ 1097.459469] binder: undelivered TRANSACTION_ERROR: 29201 [ 1097.473423] binder: undelivered TRANSACTION_ERROR: 29201 03:39:09 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x2e4}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:39:09 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='\x00') syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7e, 0x400000) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000200)=""/89) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:39:09 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:39:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0xffffa888, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:09 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0xd, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1097.523329] binder: 8052:8054 got reply transaction with no transaction stack [ 1097.530943] binder: 8052:8054 transaction failed 29201/-71, size 16101823-0 line 2759 03:39:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1097.608677] binder: 8078:8079 got reply transaction with no transaction stack [ 1097.616154] binder: 8078:8079 transaction failed 29201/-71, size 0-0 line 2759 [ 1097.628155] binder: undelivered TRANSACTION_ERROR: 29201 03:39:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x400000000000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1097.697977] binder: 8078:8079 got reply transaction with no transaction stack [ 1097.705632] binder: 8078:8079 transaction failed 29201/-71, size 0-0 line 2759 [ 1097.732074] binder: 8095:8097 got reply transaction with no transaction stack [ 1097.739567] binder: 8095:8097 transaction failed 29201/-71, size 0-0 line 2759 [ 1097.768518] binder: undelivered TRANSACTION_ERROR: 29201 [ 1097.776715] binder: undelivered TRANSACTION_ERROR: 29201 [ 1097.801912] binder: 8095:8097 ioctl c0306201 200000c0 returned -14 [ 1097.817524] binder: 8095:8097 got reply transaction with no transaction stack [ 1097.825022] binder: 8095:8097 transaction failed 29201/-71, size 0-0 line 2759 [ 1097.850806] binder: undelivered TRANSACTION_ERROR: 29201 03:39:09 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:39:09 executing program 7: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600), &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x20000000000007, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:39:09 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x14, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x800000000000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) clock_gettime(0x7, &(0x7f0000000040)) [ 1097.943175] binder: 8114:8119 got reply transaction with no transaction stack [ 1097.950797] binder: 8114:8119 transaction failed 29201/-71, size 0-0 line 2759 03:39:09 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x5, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x40030000000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1097.996762] binder: 8114:8119 got reply transaction with no transaction stack [ 1098.004260] binder: 8114:8119 transaction failed 29201/-71, size 0-0 line 2759 [ 1098.013955] binder: 8123:8128 got reply transaction with no transaction stack [ 1098.021478] binder: 8123:8128 transaction failed 29201/-71, size 0-0 line 2759 [ 1098.054630] binder: undelivered TRANSACTION_ERROR: 29201 [ 1098.064191] binder: undelivered TRANSACTION_ERROR: 29201 [ 1098.084120] binder: 8123:8128 ioctl c0306201 200000c0 returned -14 [ 1098.119803] binder: 8123:8128 got reply transaction with no transaction stack [ 1098.127251] binder: 8123:8128 transaction failed 29201/-71, size 0-0 line 2759 [ 1098.161714] binder: undelivered TRANSACTION_ERROR: 29201 03:39:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x8864, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:10 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x800, 0x77e, 0x0, 0x100, 0xfffffffffffffff9, 0x2, 0x6}, 0x10) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:39:10 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x1f2}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:39:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:10 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x10, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = semget(0x1, 0x7, 0x82) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000100)=""/110) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="126348400000000000000000000000000000000000000000000000000000001dee000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000500)}) close(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:10 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 1098.490314] binder: 8149:8159 got reply transaction with no transaction stack [ 1098.497886] binder: 8149:8159 transaction failed 29201/-71, size 0-0 line 2759 [ 1098.511309] binder: 8154:8160 got reply transaction with no transaction stack [ 1098.518800] binder: 8154:8160 transaction failed 29201/-71, size 0-0 line 2759 [ 1098.534460] binder: undelivered TRANSACTION_ERROR: 29201 03:39:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x4788, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:10 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futex(&(0x7f0000000040)=0x1, 0x1, 0x0, &(0x7f00000000c0)={r0, r1+10000000}, &(0x7f0000000100), 0x2) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000200)) [ 1098.565111] binder: 8149:8159 got reply transaction with no transaction stack [ 1098.572617] binder: 8149:8159 transaction failed 29201/-71, size 0-0 line 2759 [ 1098.573740] binder: undelivered TRANSACTION_ERROR: 29201 [ 1098.595551] binder: 8154:8172 got reply transaction with no transaction stack [ 1098.603718] binder: 8154:8172 transaction failed 29201/-71, size 0-0 line 2759 [ 1098.625827] binder: undelivered TRANSACTION_ERROR: 29201 [ 1098.657900] binder: undelivered TRANSACTION_ERROR: 29201 03:39:10 executing program 7: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600), &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x20000000000008, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:39:10 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0xf, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306204, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=""/42, 0x2a) 03:39:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x806000000000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:10 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)={0x0, 0x60, 0xffffffffa6fc23aa}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x400, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000400)="0c6a008d193b2187b570f6b8ebd2013079a929a83e", 0x15}, {&(0x7f0000000440)="0d2d9d8c752d67ee39", 0x9}, {&(0x7f0000000480)="12bfefadc01992d520ac51c88ff1faa702108d84451dc42aea42f43bbbed6475ce59a4b108525bc27a59c352d922205217c2390c775da26f034db34817dc884643e778e4", 0x44}, {&(0x7f0000000500)="de67f643a588838ae3fb90ddeb4446bf7205ed863e93dd9d699d757cc2d6834d165c90bc78fcb39f767d0dad0f56ae17089837f00f7819195d8af15e7e79506397354f1f0d52c93ed86331", 0x4b}, {&(0x7f0000000580)="b741f0b1b29f03a5a4613049deb9272c385518a656f269657fa9dbb7431a7f81a00bf09b9d599de6ab01ea01ce3ddf6e05ede4555387536a7b0d46c91e", 0x3d}, {&(0x7f00000005c0)="8084f65f994b7007680b856565ddd056854f", 0x12}, {&(0x7f0000000600)="ac1df7d1cd810b310e77374b92ab08c4e0bf4ed6299ad0aa632304907c633e8736d71752bd3a8a3a40fc21dd33a27baef14cddb6f0ed3a2787d20fdf8668a3219bb46059fe665530b2b4a637648a1b5aba7e703852db", 0x56}], 0x7) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000300)={0x0, 0x4a, "6c0f99be7d650ec3be1a1d6a8fb20bb48ec6b3cbcd19e5970dac9e791e5ea42b093eb045fa915f0cd93154d7cd42dd7f0d34c16faabcd4ce419a40da7d2d949cd4d99462828b310492fb"}, &(0x7f0000000380)=0x52) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000003c0)={r3}, 0x8) getsockopt$inet6_tcp_buf(r1, 0x6, 0xf, &(0x7f0000000240)=""/60, &(0x7f0000000280)=0x3c) chmod(&(0x7f0000000100)='./file0\x00', 0x2) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) [ 1098.851713] binder: 8190:8193 got reply transaction with no transaction stack [ 1098.859338] binder: 8190:8193 transaction failed 29201/-71, size 0-0 line 2759 [ 1098.879933] binder: 8198:8201 got reply transaction with no transaction stack [ 1098.888231] binder: 8198:8201 transaction failed 29201/-71, size 0-0 line 2759 [ 1098.898532] binder: 8190:8193 ioctl c0306204 200000c0 returned -22 [ 1098.912100] binder: 8190:8193 got reply transaction with no transaction stack [ 1098.916415] binder: 8198:8201 ioctl c0306201 200000c0 returned -14 [ 1098.919700] binder: 8190:8193 transaction failed 29201/-71, size 0-0 line 2759 03:39:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x8000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:10 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x13, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1098.946393] binder: 8198:8201 got reply transaction with no transaction stack [ 1098.953922] binder: 8198:8201 transaction failed 29201/-71, size 0-0 line 2759 [ 1098.979576] binder: undelivered TRANSACTION_ERROR: 29201 03:39:10 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$revoke(0x3, r0) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x1, 0x20000000, 0x6000, 0x93, 0x0, 0x9, 0x80, 0x5, 0xd05c, 0x800}, 0x10) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000017c0)={{{@in6=@ipv4={[], [], @rand_addr}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f00000018c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001900)={'vcan0\x00', r2}) r3 = eventfd2(0x0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000240)=0x10000, 0x4) syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0xef5c, 0x101000) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000200)={0x1, r3}) [ 1099.005860] binder: 8190:8212 ioctl c0306204 200000c0 returned -22 [ 1099.013363] binder: undelivered TRANSACTION_ERROR: 29201 [ 1099.027543] binder: undelivered TRANSACTION_ERROR: 29201 03:39:10 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x15a}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:39:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x143, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB="e9ffffffffffffff747900810070a451431348f3c5f36109000000000000000000000000"], 0x0, 0x0, &(0x7f0000000500)}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x2, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000240)={0x139, 0x38, 0x9ed}) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, [0x9, 0x7ff, 0x7f, 0x240]}) sched_setattr(r2, &(0x7f0000000140)={0x30, 0x0, 0x1, 0x2, 0x775, 0x5, 0x401, 0x10001}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) r3 = semget$private(0x0, 0x3, 0x292) semctl$GETPID(r3, 0x1, 0xb, &(0x7f0000000440)=""/113) 03:39:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306202, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x8035, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:10 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:10 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x8, 0x17, 0x6, 0x8, 0x0, 0x20, 0x100, 0x8, 0x8718, 0x10001, 0xfffffffffffff6d9, 0xffffffffffffffe1, 0x80000000, 0x20, 0x4, 0x6, 0xffff, 0x7, 0xc1, 0x0, 0x400, 0x0, 0x9, 0x4aa9, 0x1, 0x6, 0x7fffffff, 0x5, 0x7, 0x1, 0x7fff, 0x935, 0x3, 0x6, 0x82, 0x5, 0x0, 0x85, 0x4, @perf_bp={&(0x7f0000000040), 0x3}, 0x1522, 0x0, 0x5, 0x5, 0x6, 0x8, 0x800}, r1, 0x1, r0, 0x8) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x200040, 0x4) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000200)=""/15) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:39:10 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 1099.387500] binder: 8239:8243 got reply transaction with no transaction stack [ 1099.390886] binder: 8237:8238 got reply transaction with no transaction stack [ 1099.395130] binder: 8239:8243 transaction failed 29201/-71, size 0-0 line 2759 [ 1099.402458] binder: 8237:8238 transaction failed 29201/-71, size 0-0 line 2759 [ 1099.443364] binder: 8237:8238 ioctl c0306202 200000c0 returned -22 [ 1099.470823] binder: 8237:8238 got reply transaction with no transaction stack [ 1099.478291] binder: 8237:8238 transaction failed 29201/-71, size 0-0 line 2759 [ 1099.492704] binder: 8239:8243 ioctl c0306201 200000c0 returned -14 [ 1099.503789] Process accounting resumed [ 1099.518838] binder: 8239:8243 got reply transaction with no transaction stack [ 1099.526317] binder: 8239:8243 transaction failed 29201/-71, size 0-0 line 2759 [ 1099.553465] binder: 8237:8255 ioctl c0306202 200000c0 returned -22 [ 1099.566169] binder: undelivered TRANSACTION_ERROR: 29201 [ 1099.573109] binder: undelivered TRANSACTION_ERROR: 29201 [ 1099.610820] binder: undelivered TRANSACTION_ERROR: 29201 03:39:11 executing program 7: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600), &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x20000000000005, 0x2001d070, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:39:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x806, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:11 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4080}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:39:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:39:11 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0xc, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') r2 = add_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000500)="27d1af0c8c83ae6682d0e6046626ce31f661bf6513599f07f9220f987ad986591bc3f7a22d396e0205dd6c30049cac3de9bf467c6eca866e9403df558153087953b81803ff89f014eb664417d652ee09303cc8525f2718f0dba00ed12c78a330310ef74c8b97b194cfdf2dcd6c86276de3e673442611cbe34379c905a0e3eb92da22f0369612a4013441145b04ba587728f8e6c9c41578e2c4264c4aeb8066b67fe8b2ede172a839e953c46fac12f3f504f12757b7538358a60559949711d6f59bc28bcd71085d0ac737e94661982507706bb8", 0xd3, 0xffffffffffffffff) r4 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000002c0)="5db011016f3108f39649", 0xa, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000300)={r2, r3, r4}, &(0x7f0000000600)=""/115, 0x73, &(0x7f0000000780)={&(0x7f0000000680)={'rmd320-generic\x00'}, &(0x7f00000006c0)="1fb04bf1ab84df875e3a9f4d7f7d1a9ed13558c919b4d7b074ee5efe60a6ad86400ba53dcabeb51e0ce9bbb38b08654159a28844843c67c50aaf0b8134c28a398587b7cf3c4d6ca47c767e0857b500ad012c0c64d59687f41d02afd43bb63a69799b13c4d4c8bf183f02361b292a52ad5b44a8a2b78aba8571e55f2f540fc5eed1c4a6949838daf964c8e24b92a0e9e7a3843e7ed6514f0ceebe18ac2295c702f2b8850056fe4a3b3c41da8fb861cc", 0xaf}) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f00000003c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1099.782077] binder: 8271:8273 got reply transaction with no transaction stack [ 1099.789718] binder: 8271:8273 transaction failed 29201/-71, size 0-0 line 2759 [ 1099.792543] binder: 8272:8275 got reply transaction with no transaction stack [ 1099.804577] binder: 8272:8275 transaction failed 29201/-71, size 0-0 line 2759 [ 1099.839601] binder: 8272:8275 got reply transaction with no transaction stack [ 1099.847188] binder: 8272:8275 transaction failed 29201/-71, size 0-0 line 2759 [ 1099.861232] binder: 8271:8273 ioctl c0306201 200000c0 returned -14 03:39:11 executing program 6: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0xf, &(0x7f00000000c0)="05", 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) 03:39:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x4800, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1099.901907] binder: 8271:8273 got reply transaction with no transaction stack [ 1099.909389] binder: 8271:8273 transaction failed 29201/-71, size 0-0 line 2759 [ 1099.912444] binder: undelivered TRANSACTION_ERROR: 29201 [ 1099.937124] binder: undelivered TRANSACTION_ERROR: 29201 [ 1099.977701] Process accounting resumed [ 1099.993105] binder: undelivered TRANSACTION_ERROR: 29201 03:39:11 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x22b}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:39:11 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0xb, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:39:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3, 0x20240) socket(0x11, 0xa, 0x2) 03:39:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x4888, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:11 executing program 6: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x8000, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) [ 1100.295419] binder: 8314:8316 got reply transaction with no transaction stack [ 1100.303792] binder: 8314:8316 transaction failed 29201/-71, size 0-0 line 2759 [ 1100.312302] binder: 8312:8319 got reply transaction with no transaction stack [ 1100.319845] binder: 8312:8319 transaction failed 29201/-71, size 0-0 line 2759 [ 1100.378576] binder: 8314:8316 ioctl c0306201 200000c0 returned -14 [ 1100.392912] binder: 8312:8319 got reply transaction with no transaction stack [ 1100.400449] binder: 8312:8319 transaction failed 29201/-71, size 0-0 line 2759 [ 1100.410212] binder: 8314:8316 got reply transaction with no transaction stack [ 1100.417705] binder: 8314:8316 transaction failed 29201/-71, size 0-0 line 2759 [ 1100.426873] Process accounting resumed [ 1100.442332] binder: BINDER_SET_CONTEXT_MGR already set [ 1100.456426] binder: 8312:8330 ioctl 40046207 200000c0 returned -16 [ 1100.463446] binder: undelivered TRANSACTION_ERROR: 29201 [ 1100.474754] binder: undelivered TRANSACTION_ERROR: 29201 [ 1100.481969] binder: undelivered TRANSACTION_ERROR: 29201 03:39:12 executing program 7: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600), &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x20000000000005, 0x70, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:39:12 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x7, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x8864000000000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:12 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x244800, 0x0) openat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000380)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0x1e9, &(0x7f0000000340)={&(0x7f0000000440)={0x24, r1, 0x400, 0x70bd27, 0x25dfdbfb, {0x4}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x0, 0x4, 0x4e21}]}]}, 0xfffffffffffffcaa}, 0x1, 0x0, 0x0, 0x20000800}, 0x24000005) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x24, "f59730e206d33902f5fea0615e49d083d54a6a17be474729efea7f942c3f0b4fc60b4931"}, &(0x7f0000000100)=0x2c) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r2, 0x6, 0x6, 0x80, 0x8b6, 0xfff}, &(0x7f0000000240)=0x14) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:39:12 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x420800, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000100)=""/113) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:12 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:39:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1100.745899] binder: 8344:8348 got reply transaction with no transaction stack [ 1100.753333] binder: 8344:8348 transaction failed 29201/-71, size 0-0 line 2759 [ 1100.762185] binder: 8346:8351 got reply transaction with no transaction stack [ 1100.769693] binder: 8346:8351 transaction failed 29201/-71, size 0-0 line 2759 03:39:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x100000000000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1100.817668] binder: 8346:8351 ioctl c0306201 200000c0 returned -14 [ 1100.827463] binder: 8344:8348 got reply transaction with no transaction stack [ 1100.834928] binder: 8344:8348 transaction failed 29201/-71, size 0-0 line 2759 03:39:12 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x12, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1100.866106] binder: 8346:8351 got reply transaction with no transaction stack [ 1100.873646] binder: 8346:8351 transaction failed 29201/-71, size 0-0 line 2759 [ 1100.906507] binder: undelivered TRANSACTION_ERROR: 29201 [ 1100.919567] binder: undelivered TRANSACTION_ERROR: 29201 [ 1100.961422] binder: undelivered TRANSACTION_ERROR: 29201 03:39:12 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x2df}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:39:12 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x9, 0xb849, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60cd7f6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e22, @broadcast=0xffffffff}, @in6={0xa, 0x4e20, 0x282, @local={0xfe, 0x80, [], 0xaa}, 0x8000000000000}], 0x3c) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:39:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0xffff0000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000001000000000000000000000000000000000000007f00000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000500)}) eventfd(0x80000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:12 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1101.189420] binder: 8384:8390 got reply transaction with no transaction stack [ 1101.189894] binder: 8381:8386 got reply transaction with no transaction stack [ 1101.196921] binder: 8384:8390 transaction failed 29201/-71, size 0-127 line 2759 [ 1101.211949] binder: 8381:8386 transaction failed 29201/-71, size 0-0 line 2759 [ 1101.225357] binder: 8384:8390 ioctl c0306201 200000c0 returned -14 03:39:12 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x11, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1101.258669] binder: 8381:8386 got reply transaction with no transaction stack [ 1101.266171] binder: 8381:8386 transaction failed 29201/-71, size 0-0 line 2759 [ 1101.272922] binder: 8384:8390 got reply transaction with no transaction stack [ 1101.280984] binder: 8384:8390 transaction failed 29201/-71, size 0-127 line 2759 [ 1101.291356] binder: undelivered TRANSACTION_ERROR: 29201 [ 1101.304838] binder: undelivered TRANSACTION_ERROR: 29201 [ 1101.334149] binder: undelivered TRANSACTION_ERROR: 29201 03:39:13 executing program 7: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600), &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x20000000000005, 0x70, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:39:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x88a8ffff, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:13 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0xa001, 0x0) bind$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, {0x100000000, 0x10000, 0xffffffffffffffff, 0x0, 0x6, 0x9}, 0x5}, 0xa) 03:39:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) socketpair(0x18, 0xf, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000028c0)=0x0) setpgid(r2, r3) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'eql\x00', 0x3}) r4 = getpgid(0x0) process_vm_readv(r4, &(0x7f0000001540)=[{&(0x7f00000003c0)=""/4096, 0xfd79}, {&(0x7f0000000100)=""/157, 0x9d}, {&(0x7f00000002c0)=""/100, 0x64}, {&(0x7f00000013c0)=""/164, 0x6e}, {&(0x7f0000002880)=""/41, 0x29}, {&(0x7f0000001480)=""/148, 0x94}], 0x6, &(0x7f0000002800)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/88, 0x58}, {&(0x7f0000000240)=""/42, 0x2a}, {&(0x7f0000002640)=""/50, 0x32}, {&(0x7f0000002680)=""/162, 0xa2}, {&(0x7f0000002740)=""/11, 0xb}, {&(0x7f0000002780)=""/125, 0x7d}], 0x7, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) getpid() 03:39:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:39:13 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x8, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1101.718598] binder: 8423:8424 got reply transaction with no transaction stack [ 1101.721322] binder: 8420:8422 got reply transaction with no transaction stack [ 1101.726121] binder: 8423:8424 transaction failed 29201/-71, size 0-0 line 2759 [ 1101.733723] binder: 8420:8422 transaction failed 29201/-71, size 0-0 line 2759 03:39:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x48000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1101.827158] binder: 8420:8422 ioctl c0306201 200000c0 returned -14 [ 1101.842962] binder: 8420:8422 got reply transaction with no transaction stack [ 1101.850476] binder: 8420:8422 transaction failed 29201/-71, size 0-0 line 2759 03:39:13 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x9, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1101.884775] binder: 8423:8424 got reply transaction with no transaction stack [ 1101.892390] binder: 8423:8424 transaction failed 29201/-71, size 0-0 line 2759 [ 1101.917261] binder: undelivered TRANSACTION_ERROR: 29201 [ 1101.928750] binder: undelivered TRANSACTION_ERROR: 29201 [ 1101.934904] binder: 8420:8422 ioctl c0306201 200000c0 returned -14 03:39:13 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x3df}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:39:13 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0xbe50, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:39:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r2}}, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000040)={{0x7f, @broadcast=0xffffffff, 0x4e22, 0x1, 'nq\x00', 0x1, 0xff, 0x3}, {@multicast1=0xe0000001, 0x4e22, 0x2000, 0x4, 0x6, 0x2}}, 0x44) 03:39:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x4, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:13 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0xa, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1102.115366] binder: 8464:8467 got reply transaction with no transaction stack [ 1102.122873] binder: 8464:8467 transaction failed 29201/-71, size 0-0 line 2759 03:39:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x608, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1102.174287] binder: 8464:8467 got reply transaction with no transaction stack [ 1102.181794] binder: 8464:8467 transaction failed 29201/-71, size 0-0 line 2759 [ 1102.243124] binder: undelivered TRANSACTION_ERROR: 29201 [ 1102.252123] binder: undelivered TRANSACTION_ERROR: 29201 03:39:14 executing program 7: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600), &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x20000000000005, 0x70, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:39:14 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2e4a4f7c, 0x0, 0x0, 0x0, 0x400000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) sysfs$3(0x3) 03:39:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1263484000000000000000000000b330ee6bc57ac27800000000000000000000000000040000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB], 0x0, 0x0, &(0x7f0000000500)}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f00000001c0)) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e23, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0xffffffffffffffc1}, {0xa, 0x4e21, 0x4, @empty, 0x2}, 0x5b, [0x0, 0x7, 0x3, 0x200, 0xa8, 0x200, 0xfffffffffffffff4, 0x8]}, 0x5c) r2 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x80000000, 0x8100) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000540)={0x8, 0x6, [{0x4, 0x0, 0xff}, {0x1, 0x0, 0x91}, {0xf446, 0x0, 0x6b9f184c}, {0x736, 0x0, 0x953}, {0x1000, 0x0, 0x9ebe}, {0x5, 0x0, 0x80}, {0x8, 0x0, 0x2}, {0x1, 0x0, 0x3}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) dup2(r0, r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x84, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x4, @mcast1={0xff, 0x1, [], 0x1}, 0x7fff}, @in6={0xa, 0x4e23, 0x1000, @mcast1={0xff, 0x1, [], 0x1}, 0xf2}, @in={0x2, 0x4e21, @loopback=0x7f000001}, @in6={0xa, 0x4e22, 0x7f, @mcast2={0xff, 0x2, [], 0x1}, 0x1678}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000480)={r3, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x0, 0x1}, 0x90) 03:39:14 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0xe, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1102.683004] binder: 8494:8497 got reply transaction with no transaction stack [ 1102.690574] binder: 8494:8497 transaction failed 29201/-71, size 0-0 line 2759 [ 1102.694450] binder: 8499:8500 got reply transaction with no transaction stack [ 1102.705523] binder: 8499:8500 transaction failed 29201/-71, size 0-0 line 2759 [ 1102.750977] binder: 8494:8497 ioctl c0306201 200000c0 returned -14 [ 1102.769272] binder: 8494:8497 got reply transaction with no transaction stack [ 1102.770277] binder: 8499:8500 got reply transaction with no transaction stack [ 1102.776770] binder: 8494:8497 transaction failed 29201/-71, size 0-0 line 2759 [ 1102.784171] binder: 8499:8500 transaction failed 29201/-71, size 0-0 line 2759 03:39:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) acct(&(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:39:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x88a8ffff00000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:14 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x2, 0x10800) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x34, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {0x3}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x6e}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xbf}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x44014) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) clock_gettime(0x0, &(0x7f0000000340)) clock_gettime(0x0, &(0x7f0000000540)) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000480)="3aa87f69661057bcf77ac28777e6d0a6db06f569867432bc536d8c1ddcfbcb238c752c64df8c9535ab3243797aa58c3da1e09209ade416524dff09d0b14de6a9256862f331625ae669ab36ed443c7b403a23c782c0b3b8f9213c6dca08e455e9803323a85f3b6a3f4477889e6fd794e6ec2a78c505ee5a9354206a488d0b7c883df126e9ef74e31e85c95302a3f363b34f71a5dd6a49f93d06c57457cca2131aca9b0b246534038beb8b6f3edfa57f13f58bbdb7f6ed0f", 0x31, 0x1000, &(0x7f0000000380)={r2, r3+10000000}) 03:39:14 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1102.805569] binder: undelivered TRANSACTION_ERROR: 29201 [ 1102.820111] binder: undelivered TRANSACTION_ERROR: 29201 [ 1102.937241] binder: 8494:8497 ioctl c0306201 200000c0 returned -14 03:39:14 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x25c}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:39:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x8848000000000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:14 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:14 executing program 6: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x72, 0x18000) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, @dev}, &(0x7f0000000280)=0x1c, 0x80800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f00000003c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000500)=0xe8) r6 = accept$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, @multicast2}, &(0x7f0000001b40)=0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001b80)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000001cc0)={0xffffffffffffffff}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = syz_open_dev$sndmidi(&(0x7f0000001c00)='/dev/snd/midiC#D#\x00', 0x0, 0x400) sendmsg$netlink(r0, &(0x7f0000001c80)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc, &(0x7f0000001ac0)=[{&(0x7f0000000540)={0x1560, 0x1e, 0x720, 0x70bd2c, 0x25dfdbff, "", [@typed={0x4, 0x5a}, @nested={0x1e4, 0x45, [@typed={0x8, 0xd, @u32=0x4}, @typed={0xd0, 0x5d, @binary="04aa27624731d2e26d6b126d86778ee21a66a5b62705eba7061843234734e80ce7590c45d3a2dd4e5efa34f6ddcd2378ec500e3a398ec60356f2882c3c8b5902eef568de02e1534fd13539a9deade9418bc6fa69deed173d621cac821dd99f5677648eedcca087e185e1132f8a8f0abe56eeb171cf001eeddfe6b143e38eaad58e77ec8d7a247348feae151122ef32ad445f454962b88adc55fd3dd60cc4aa5aace6310fcc7be73a77351c04158b495b467102dc83ba8a6429f7ffbaf150ecc43cf99d4d4957883195c3a5a9"}, @typed={0x8, 0x5c, @ipv4}, @generic="24fec17df9d58d2c3942b0fc5979ead730db6d02f1d0efd6c0f9a0ca95724c00eb13b20d8c5fbde92eaa3de5ee47d3dc5aea1ad5d333b938592287232e6abe480ed24a9f02bc23c12594e14a4365a6cc3a10c6283a9982e715b70b592b7cc845b0522c9650c436cfaed9954ab57ac9e9cad8b33be435ad966fb9fe4d34eb6186727a947413", @generic="c92935d1fec4d941b527219adcb02dbfc1bff29a6955dd79086fd08812a814d4115992a5d4824f8f92bc50fa3c20956f49e5448ea094ef0f5322134914addabd1d833febc875ae159a0df42ae6b9b69a4282a9eeae4b0edf6509847cd4dd9a3a", @typed={0x8, 0xd, @str='\x00'}, @generic="d6376fcd0d7cf885c52fd85fb064c726"]}, @generic="aa64f60256b23201fa78cdd3406e243311df179b4f895844176d99bf5c41ed4793b2f209d39fde02916c5012487ed5d155c47b12a2a44c312fc0bb39559a08f2ab0b4afd02b1597885bfde10356e34d01c25f734af6ff8ccddc8930bf707d042d3f9b7c66b83e97291ae87cf5cbf305996adf836428bdf4a7d2b7929a1af02b140961b467e07cecff185e71beca2000dc76edf5dd7ea6ce05af94b68cec4bd1418cd04c53c46a33c743d66ae55362101242093cc349a86a5811be98d8696228464b2c44670f3e3c1448dcbf1f7fdef668418ed1dd8e0b21032468f110385102dffd16f758e362d94c079390f0cde9cf029328f1d", @nested={0x102c, 0x55, [@typed={0x8, 0x1a, @u32=0x8}, @typed={0x8, 0x43, @str='\x00'}, @typed={0x8, 0x7b, @pid=r1}, @typed={0x8, 0x4, @pid=r2}, @typed={0x8, 0x2f, @ipv4}, @generic="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"]}, @generic="2c62f6f0e8ee5dc4b735f676afe16ffed57d15084c39f5dbae5fb3ba762567903af7d5c75869c53daf6f74064da56ec751caa69092a05662e6c632990fe48a3658980e0b1d46371a48d171f51318cbf680", @nested={0xc4, 0x54, [@generic="6d2a08e73bfbed1dcac05fc000dd9fe669add7a1b3a84dff6d3a22bb51248cd1396f1c31d546de3a3b2d3fbf7072b77cbbe57d0df2493a68c35360ad4548ce4ba38cf04c1e3cfaf89c17702cacf02f83641a68ee36c6edcd7355b37174", @generic="4fa14f938b062767de6dc98b1b2123126c7ea10d57826f13e6f13172f894397053bd83bba23201ffb5bfbe91e3b4e04abc1202805e0a743976019882612964fbacc37c9f1ecad7d6c3d1aaf66a1f35e7df0bd97672a81a29b01666f55423deb943"]}, @nested={0x14, 0x7d, [@typed={0xc, 0x6c, @u64=0xffffffffffffffff}, @typed={0x4, 0x64}]}, @nested={0xb0, 0x4a, [@typed={0x8, 0x1, @fd=r3}, @generic="308eedf0beb0cd61763b2d0eba91cc92fb7f6dfebd319f6f54727c0c03c29cb7dffb7ae83b9613d87e7943d6b0c78c8e3ce7f399368fa34b95c2efec2810984005b5bad7ce8ad2043442ed15236cbb83836f42ce119b034b5741e7032d96b7ce2236cee1db52b3506e2f84a576ed5812a94e4d5ee1385601cc4505fe0e5c5aee2e6a5431a7012e9ae017750db23ff678da624d", @typed={0x8, 0x14, @uid=r4}, @typed={0x8, 0x15, @ipv4=@dev={0xac, 0x14, 0x14, 0xb}}]}, @typed={0x8, 0xb, @uid=r5}, @generic="695beab5049e5c4c132b08d4722512502ad828130fd19c030f090e9f1d95b9b2fa43f8ee9fbd25a67182f4c2a89814b0778d389b72ad068c008a0556455a83ee7cd0ea417bb329581e5da210009f14938636870c8cf18ef9f54fed07982e73b15ca9f06f56ee7c"]}, 0x1560}], 0x1, &(0x7f0000001c40)=[@rights={0x28, 0x1, 0x1, [r6, r7, r8, r9, r10]}], 0x28, 0x50}, 0x240408c0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0xffffffffffffffff}, 0x10) 03:39:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x40000000000000) socket$vsock_dgram(0x28, 0x2, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x7fff, 0x6, 0xfffffffffffff223}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x7}, &(0x7f00000001c0)=0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xb1, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB="03000000ff9b000004026a7a9a51e7e0c71b1b5fb73d30e805e68b651485cbb32890fabe4cc31cdbf8cebbd0cb6f6f928d64195d9634db9a175f4f7b90c51b07b9a091a38a46352d70838a1c939420075ca74778477a24e13a40071bc6a5bf88f0070dc8761fb138c50d7af7c1"], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1103.066282] binder: 8537:8538 got reply transaction with no transaction stack [ 1103.067140] binder: 8540:8542 got reply transaction with no transaction stack [ 1103.073793] binder: 8537:8538 transaction failed 29201/-71, size 0-0 line 2759 [ 1103.081133] binder: 8540:8542 transaction failed 29201/-71, size 0-0 line 2759 03:39:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x1000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1103.136758] binder: 8540:8542 ioctl c0306201 200000c0 returned -14 [ 1103.155758] binder: 8537:8538 got reply transaction with no transaction stack [ 1103.163350] binder: 8537:8538 transaction failed 29201/-71, size 0-0 line 2759 [ 1103.181160] binder: 8540:8542 got reply transaction with no transaction stack [ 1103.188661] binder: 8540:8542 transaction failed 29201/-71, size 0-0 line 2759 [ 1103.192282] binder: undelivered TRANSACTION_ERROR: 29201 [ 1103.210712] binder: undelivered TRANSACTION_ERROR: 29201 [ 1103.241502] binder: undelivered TRANSACTION_ERROR: 29201 03:39:15 executing program 7: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600), &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x20000000000005, 0x70, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:39:15 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) r1 = dup(r0) ioctl$KDSETLED(r1, 0x4b32, 0x1) 03:39:15 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2000, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000080)={0x8, 0x4, 0x45, &(0x7f0000000100)="9a83a809a273c7c9ea6952683356317c59fe0cd781d0925264b4db79b35030b078000d4bbe361c43c76a96df8ba0f6d9afa5cb95cf7986a4665da8caa1f7c22ad57db5f0f6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1103.616202] binder: 8572:8574 got reply transaction with no transaction stack [ 1103.623699] binder: 8572:8574 transaction failed 29201/-71, size 0-0 line 2759 [ 1103.639381] binder: 8577:8578 got reply transaction with no transaction stack [ 1103.646913] binder: 8577:8578 transaction failed 29201/-71, size 0-0 line 2759 [ 1103.663239] binder: 8577:8578 ioctl c0306201 200000c0 returned -14 [ 1103.678396] binder: 8572:8574 got reply transaction with no transaction stack [ 1103.685856] binder: 8572:8574 transaction failed 29201/-71, size 0-0 line 2759 [ 1103.709506] binder: 8577:8590 got reply transaction with no transaction stack [ 1103.717098] binder: 8577:8590 transaction failed 29201/-71, size 0-0 line 2759 [ 1103.721907] binder: undelivered TRANSACTION_ERROR: 29201 [ 1103.742317] binder: undelivered TRANSACTION_ERROR: 29201 [ 1103.757186] binder: undelivered TRANSACTION_ERROR: 29201 03:39:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) r1 = gettid() ptrace$poke(0x5, r1, &(0x7f0000000040), 0x19af) 03:39:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x88480000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:15 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x7, 0x70, 0x3e5, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x40010, r0, 0xf) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0xfff}, 0x10) 03:39:15 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1103.872167] binder: 8599:8601 got reply transaction with no transaction stack [ 1103.879630] binder: 8599:8601 transaction failed 29201/-71, size 0-0 line 2759 [ 1103.890017] binder: 8599:8601 ioctl c0306201 200000c0 returned -14 [ 1103.899379] binder: 8599:8601 got reply transaction with no transaction stack [ 1103.906828] binder: 8599:8601 transaction failed 29201/-71, size 0-0 line 2759 [ 1103.943075] binder: undelivered TRANSACTION_ERROR: 29201 03:39:15 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x3f3}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:39:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x44000, 0x0) 03:39:15 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x6800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:39:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x88caffff00000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:15 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:15 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x230dc0, 0x0) ioctl$VT_RELDISP(r0, 0x5605) r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1104.032345] binder: 8616:8618 got reply transaction with no transaction stack [ 1104.039851] binder: 8616:8618 transaction failed 29201/-71, size 0-0 line 2759 [ 1104.098966] binder: 8627:8632 got reply transaction with no transaction stack [ 1104.106505] binder: 8627:8632 transaction failed 29201/-71, size 0-0 line 2759 [ 1104.112507] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000203) [ 1104.122275] FAT-fs (loop6): Filesystem has been set read-only [ 1104.133869] binder: 8616:8618 got reply transaction with no transaction stack [ 1104.141338] binder: 8616:8618 transaction failed 29201/-71, size 0-0 line 2759 [ 1104.163395] binder: undelivered TRANSACTION_ERROR: 29201 [ 1104.164907] binder: 8627:8632 ioctl c0306201 200000c0 returned -14 [ 1104.169160] binder: undelivered TRANSACTION_ERROR: 29201 [ 1104.215005] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000203) [ 1104.229349] binder: 8627:8632 got reply transaction with no transaction stack [ 1104.237062] binder: 8627:8632 transaction failed 29201/-71, size 0-0 line 2759 [ 1104.254764] binder: undelivered TRANSACTION_ERROR: 29201 03:39:16 executing program 7: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600), &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x20000000000005, 0x70, 0xf5ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:39:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000000)="4c0000001200ff09fffefd956fa264b724a6007e00000000000000683540150024001d001fc41180b598be593ab6821148a730bb1aa49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 03:39:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x8035000000000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306225, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:16 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x40000000000001) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000080)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$void(r0, 0xc0045878) 03:39:16 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x43e9, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) [ 1104.560174] binder: 8656:8660 got reply transaction with no transaction stack [ 1104.567645] binder: 8656:8660 transaction failed 29201/-71, size 0-0 line 2759 03:39:16 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x20, 0x6a00) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000340)) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000200)={{0x3, 0x1, 0x80000000, 0x1, 0x80000000}, 0x5, 0x6, 'id0\x00', 'timer1\x00', 0x0, 0x762, 0x4, 0x7, 0x100000001}) sendto$inet(r2, &(0x7f0000000080)="4f7eeda0558d7b5e3987b9b9233fae2ee500307a1c1b621e7924be46e29db19c8195405ca9f498969aece3062899513936", 0x31, 0x0, &(0x7f00000000c0)={0x2, 0x4e24, @loopback=0x7f000001}, 0x10) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x28040, 0x0) getpeername$packet(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000004c0)=0x14) ioctl$KDDISABIO(r3, 0x4b37) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='coredump_filter\x00') setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r4, 0x111, 0x3, 0x0, 0x4) 03:39:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x81000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1104.626610] binder: 8656:8660 ioctl c0306225 200000c0 returned -22 [ 1104.651757] binder: 8656:8660 got reply transaction with no transaction stack [ 1104.659449] binder: 8656:8660 transaction failed 29201/-71, size 0-0 line 2759 [ 1104.707987] binder: 8656:8678 ioctl c0306225 200000c0 returned -22 [ 1104.716559] QAT: Invalid ioctl [ 1104.721084] binder: undelivered TRANSACTION_ERROR: 29201 [ 1104.728657] binder: undelivered TRANSACTION_ERROR: 29201 [ 1104.749733] QAT: Invalid ioctl 03:39:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306246, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:16 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x2000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:16 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget(0x0, 0x1000, 0x400, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000200)=""/4096) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:39:16 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x2ba}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 1104.976420] binder: 8694:8696 got reply transaction with no transaction stack [ 1104.983942] binder: 8694:8696 transaction failed 29201/-71, size 0-0 line 2759 [ 1104.995156] binder: 8694:8696 ioctl c0306246 200000c0 returned -22 [ 1105.012572] binder: 8694:8696 got reply transaction with no transaction stack 03:39:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x8847, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:16 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1105.020087] binder: 8694:8696 transaction failed 29201/-71, size 0-0 line 2759 [ 1105.041497] binder: 8694:8706 ioctl c0306246 200000c0 returned -22 [ 1105.050491] binder: undelivered TRANSACTION_ERROR: 29201 [ 1105.066236] binder: undelivered TRANSACTION_ERROR: 29201 03:39:17 executing program 7: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600), &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x20000000000005, 0x70, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:39:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffffffffffd6, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000000)="4c0000001200ff09fffefd956fa264b724a6007e00000000000000683540150024001d001fc41180b598be593ab6821148a730bb1aa49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 03:39:17 executing program 6: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000400)={'HL\x00'}, &(0x7f0000000440)=0x1e) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = msgget(0x2, 0x8) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000500)=0xfffffffffffff000, &(0x7f00000004c0)=0x2) msgctl$IPC_RMID(r1, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x224800, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x2e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r2, &(0x7f0000000480)='./file0\x00', r3, r4, 0x1000) stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000980)) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000280)={0x9, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}}, {{0x2, 0x4e22, @multicast1=0xe0000001}}}, 0x108) sendto$inet(r2, &(0x7f0000000200)="aa40dc4ec350c67b2a9f3dba91644708716d59902edda01e2b1f4410a1a64f3fb0e0e37e549b86f264769a73923ed84d0ebb7b1c4471f4bfd321012b2c40e6abb2bd897bd8c6620145311120da9b48353bf0", 0x52, 0x4048800, &(0x7f0000000100)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 03:39:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4800000000000000, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0xd, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:17 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1105.624014] binder: 8739:8741 got reply transaction with no transaction stack [ 1105.631631] binder: 8739:8741 transaction failed 29201/-71, size 0-0 line 2759 [ 1105.634209] binder: 8738:8743 got reply transaction with no transaction stack [ 1105.646485] binder: 8738:8743 transaction failed 29201/-71, size 0-0 line 2759 [ 1105.671344] binder: 8739:8741 ioctl c0306201 200000c0 returned -14 [ 1105.699696] binder: 8738:8743 ioctl c0306201 200000c0 returned -14 [ 1105.709561] binder: 8738:8743 got reply transaction with no transaction stack [ 1105.717166] binder: 8738:8743 transaction failed 29201/-71, size 0-0 line 2759 [ 1105.724757] binder: 8739:8741 got reply transaction with no transaction stack [ 1105.729445] binder: BINDER_SET_CONTEXT_MGR already set [ 1105.732186] binder: 8739:8741 transaction failed 29201/-71, size 0-0 line 2759 03:39:17 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x2, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:17 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x2, 0x200, 0x6, 0x3, 0x0, 0xffffffffffffff80, 0x10, 0xa, 0x81, 0x8001, 0x100, 0x7, 0x9, 0x1, 0xfff, 0x5, 0x800, 0x8, 0x90000, 0x5, 0xfffffffffffffff9, 0x100000001, 0x7fffffff, 0x20, 0xe7d, 0x31, 0x4ff1, 0x40, 0x8, 0x200, 0x10001, 0xfff, 0x9, 0x3, 0x800, 0x8, 0x0, 0x4, 0x6, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x0, 0x2, 0x0, 0x3ff, 0xf7, 0xb7}, r1, 0x2, r0, 0x9) 03:39:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1105.741272] binder: 8739:8754 ioctl 40046207 0 returned -16 [ 1105.753224] binder: 8738:8753 unknown command 0 [ 1105.754668] binder: undelivered TRANSACTION_ERROR: 29201 [ 1105.758628] binder: 8738:8753 ioctl c0306201 200000c0 returned -22 [ 1105.782432] binder: undelivered TRANSACTION_ERROR: 29201 03:39:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x2000000, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1105.886803] binder: 8769:8770 got reply transaction with no transaction stack [ 1105.894342] binder: 8769:8770 transaction failed 29201/-71, size 0-0 line 2759 [ 1105.902516] binder: 8769:8770 ioctl c0306201 200000c0 returned -14 [ 1105.909905] binder: 8769:8770 got reply transaction with no transaction stack [ 1105.917391] binder: 8769:8770 transaction failed 29201/-71, size 0-0 line 2759 03:39:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x4800000000000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:17 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:17 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='\x00') perf_event_open(&(0x7f0000000180)={0x2, 0xfffffe30, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, @perf_bp, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x4, 0x0, 0x10000}, 0x10) r1 = geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) write$P9_RSTATu(r0, &(0x7f0000000340)={0x7c, 0x7d, 0x2, {{0x0, 0x4b, 0x0, 0x2, {0x44, 0x2, 0x8}, 0x0, 0x3f, 0xfffffffffffffffe, 0xfffffffffffffffa, 0xd, '$)#vmnet0ppp1', 0x1, '\x00', 0x1, '\x00', 0x9, 'vboxnet0.'}, 0x1c, 'loselfselinuxcgroupvboxnet1,', r1, r2, r3}}, 0x7c) 03:39:17 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x198}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 1105.949429] binder: 8775:8776 got reply transaction with no transaction stack [ 1105.957026] binder: 8775:8776 transaction failed 29201/-71, size 0-0 line 2759 [ 1105.965068] binder: undelivered TRANSACTION_ERROR: 29201 [ 1105.990940] binder: 8775:8776 ioctl c0306201 200000c0 returned -14 [ 1106.001331] binder: 8775:8776 got reply transaction with no transaction stack [ 1106.008903] binder: 8775:8776 transaction failed 29201/-71, size 0-0 line 2759 [ 1106.052207] binder: 8775:8778 unknown command 0 [ 1106.069850] binder: 8775:8778 ioctl c0306201 200000c0 returned -22 [ 1106.104113] binder: undelivered TRANSACTION_ERROR: 29201 03:39:17 executing program 7: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600), &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x20000000000005, 0x70, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:39:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x1b, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000040)='\b'}) 03:39:18 executing program 6: time(&(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0xfffffffffffffffe}, 0x10) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x401, 0x8, [0x65, 0x800, 0x7fffffff, 0x1ff, 0x8, 0x0, 0x8, 0x7]}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r2, 0x2, 0x30}, &(0x7f0000000200)=0xc) 03:39:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x48000000, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:18 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x89060000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1106.627179] binder: 8811:8814 got reply transaction with no transaction stack [ 1106.634686] binder: 8811:8814 transaction failed 29201/-71, size 0-0 line 2759 [ 1106.648745] binder: 8816:8821 got reply transaction with no transaction stack [ 1106.656343] binder: 8816:8821 transaction failed 29201/-71, size 0-0 line 2759 03:39:18 executing program 6: syz_extract_tcp_res(&(0x7f0000000040), 0x9, 0xffffffffffff0000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x200, 0x2000) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000200)={0x82, ""/130}) [ 1106.678902] binder: 8811:8814 ioctl c0306201 200000c0 returned -14 [ 1106.701147] binder: 8816:8821 ioctl c0306201 200000c0 returned -14 [ 1106.705611] binder: 8811:8814 got reply transaction with no transaction stack [ 1106.709238] binder: 8816:8821 got reply transaction with no transaction stack 03:39:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x6488, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:18 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1106.715051] binder: 8811:8814 transaction failed 29201/-71, size 0-0 line 2759 [ 1106.722508] binder: 8816:8821 transaction failed 29201/-71, size 0-0 line 2759 [ 1106.738296] binder: 8816:8829 unknown command 0 [ 1106.762224] binder: 8816:8829 ioctl c0306201 200000c0 returned -22 03:39:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:18 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x100}, &(0x7f0000000100)=0x8) r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) fchdir(r1) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000140)=0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1106.804815] binder: undelivered TRANSACTION_ERROR: 29201 03:39:18 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x1f5}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:39:18 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x3f) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000000c0)=0x3) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:39:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x200000000000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:18 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1106.914414] binder: undelivered TRANSACTION_ERROR: 29201 [ 1106.924839] binder: 8851:8855 got reply transaction with no transaction stack [ 1106.932411] binder: 8851:8855 transaction failed 29201/-71, size 0-0 line 2759 [ 1107.012343] binder: 8851:8855 ioctl c0306201 200000c0 returned -14 [ 1107.057308] binder: 8851:8855 got reply transaction with no transaction stack [ 1107.064819] binder: 8851:8855 transaction failed 29201/-71, size 0-0 line 2759 [ 1107.086545] binder: undelivered TRANSACTION_ERROR: 29201 03:39:18 executing program 7: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600), &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x20000000000005, 0x70, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:39:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x6c00, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x8847000000000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x24a, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000040)="f9"}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000240)={0x0, 0x0, 0x55, 0x2}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000003c0)={r2, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}, [0x4, 0x5, 0x0, 0x7f, 0x10000, 0x20, 0x4, 0x3, 0x1d51, 0x0, 0x0, 0x8, 0x4, 0x800, 0x100000001]}, &(0x7f00000002c0)=0x100) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x62100, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000140)=""/40, &(0x7f0000000180)=0x28) 03:39:18 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x80000, 0x10000, 0x0, 0xfffffffffffffffc}, 0x10) 03:39:18 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1107.313506] binder: 8884:8886 got reply transaction with no transaction stack [ 1107.320957] binder: 8884:8886 transaction failed 29201/-71, size 0-0 line 2759 [ 1107.335485] binder: 8887:8895 got reply transaction with no transaction stack [ 1107.342988] binder: 8887:8895 transaction failed 29201/-71, size 0-0 line 2759 03:39:18 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x10000}, 0xffffffffffffff2c) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000fe05000003000000000000000500000000000000ffffffff0000000016feff000000000003000000000000003f00000000000000"]) 03:39:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x8906000000000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1107.370531] binder: 8887:8895 ioctl c0306201 200000c0 returned -14 [ 1107.380013] binder: 8884:8886 ioctl c0306201 200000c0 returned -14 [ 1107.395715] binder: 8884:8886 got reply transaction with no transaction stack [ 1107.403184] binder: 8884:8886 transaction failed 29201/-71, size 0-0 line 2759 [ 1107.412222] binder: 8887:8895 ioctl 40305828 20000240 returned -22 [ 1107.428490] binder: 8887:8895 got reply transaction with no transaction stack [ 1107.436121] binder: 8887:8895 transaction failed 29201/-71, size 0-0 line 2759 03:39:19 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1107.495330] binder: 8887:8906 unknown command 1986356271 [ 1107.516776] binder: 8887:8906 ioctl c0306201 200000c0 returned -22 [ 1107.532318] binder: 8884:8903 unknown command 0 03:39:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) [ 1107.542117] binder: 8887:8918 ioctl 40305828 20000240 returned -22 [ 1107.561603] binder: 8884:8903 ioctl c0306201 200000c0 returned -22 [ 1107.573818] binder: undelivered TRANSACTION_ERROR: 29201 [ 1107.597379] binder: undelivered TRANSACTION_ERROR: 29201 03:39:19 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x246}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:39:19 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80002, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5d59) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0xffffffff, 0x110000, 0x0, 0x0, 0x800000000000000}, 0x10) modify_ldt$write(0x1, &(0x7f0000000040)={0x9, 0xffffffff, 0x400, 0x9d0, 0x4, 0x6, 0x80000001, 0x4, 0x400, 0x400}, 0x10) 03:39:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x88caffff, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x7400000000000000, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1107.883096] binder: 8937:8941 got reply transaction with no transaction stack [ 1107.890598] binder: 8937:8941 transaction failed 29201/-71, size 0-0 line 2759 [ 1107.907254] binder: 8937:8941 ioctl c0306201 200000c0 returned -14 [ 1107.914972] binder: 8937:8941 got reply transaction with no transaction stack [ 1107.922344] binder: 8937:8941 transaction failed 29201/-71, size 0-0 line 2759 [ 1107.932196] binder: 8937:8947 unknown command 0 [ 1107.937311] binder: 8937:8947 ioctl c0306201 200000c0 returned -22 [ 1107.948123] binder: undelivered TRANSACTION_ERROR: 29201 03:39:19 executing program 7: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600), &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x20000000000005, 0x70, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:39:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB="003420ac00000013941098003f00000000140000ff"], 0x0, 0x0, &(0x7f0000000500)}) r1 = mmap$binder(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x20010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x140, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="076304400400000012634840000000000000000004000000000000000000000001000000000000000000000000000000000000004000000000000000", @ANYPTR=&(0x7f0000000640)=ANY=[], @ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000002000000000000000200000000000000000000000000000003800000000000000180000000000000000000000000000000000000000000000"], @ANYBLOB="00000000ffffffff01634040010000000000000000000000000000000000000011000000000000000000000050000000000000000800000000000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="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", @ANYRES64=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000"], @ANYBLOB="09631040", @ANYRES64=r1, @ANYBLOB="010000000000000001634040040000000000000001000000000000000000000010000000000000000000000040000000000000004000000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000004000000000000003300000000000000852a62770a000000", @ANYRES64=r1, @ANYBLOB="0300000000000000"], @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x\x00\x00\x00\x00\x00\x00\x00x\x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="05630440000000000b63000001634040040000000000000000000000000000000000000001000000000000000000000020000000000000004800000000000000", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="8561646600000000090000000000000002000000000000000900000000000000"], @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="2000000000000000380000000000000038000000000000004800000000000000df53c212ec0ea56b4000000000000000780000000000000018000000000000003000000000000000"]], 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:19 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:19 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x0, 0x100000000, 0x4}, 0xffffffffffffff9e) 03:39:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x400300, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x7000000, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1108.260743] binder: 8959:8961 got reply transaction with no transaction stack [ 1108.268161] binder: 8959:8961 transaction failed 29201/-71, size 0-0 line 2759 [ 1108.280210] binder: 8963:8965 got reply transaction with no transaction stack [ 1108.287655] binder: 8963:8965 transaction failed 29201/-71, size 0-0 line 2759 [ 1108.298979] binder: 8959:8961 ioctl c0306201 200000c0 returned -14 [ 1108.306879] binder: 8963:8965 ioctl c0306201 20000600 returned -14 03:39:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x5, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:19 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x8000000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x30300, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@empty, 0x0}, &(0x7f00000000c0)=0x14) r2 = geteuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in=@rand_addr=0x6, @in6=@loopback={0x0, 0x1}, 0x4e21, 0x6ebc, 0x4e24, 0x7, 0xa, 0xa0, 0x80, 0xba, r1, r2}, {0x5, 0x7fff, 0x20, 0x2, 0x100000001, 0xe7, 0x3, 0x7ff}, {0x9, 0xfffffffffffffff8, 0x7, 0x5}, 0x1, 0x6e6bbf, 0x3, 0x0, 0x1, 0x3}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4d4}, 0xa, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x34ff, 0x4, 0x0, 0x6, 0x0, 0x8001, 0x401}}, 0xe8) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) [ 1108.332874] binder: 8959:8961 got reply transaction with no transaction stack [ 1108.340331] binder: 8959:8961 transaction failed 29201/-71, size 0-0 line 2759 [ 1108.355825] binder: 8963:8965 got reply transaction with no transaction stack [ 1108.363326] binder: 8963:8965 transaction failed 29201/-71, size 0-0 line 2759 [ 1108.420425] binder: 8959:8973 unknown command 0 03:39:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:20 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1108.443107] binder: 8959:8973 ioctl c0306201 200000c0 returned -22 [ 1108.446200] binder: undelivered TRANSACTION_ERROR: 29201 [ 1108.478510] binder: undelivered TRANSACTION_ERROR: 29201 03:39:20 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x3a4}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:39:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x4305000000000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB="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"], 0x0, 0x0, &(0x7f0000000500)}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') r2 = fcntl$getown(r0, 0x9) write$P9_RGETLOCK(r1, &(0x7f0000000080)={0x2b, 0x37, 0x2, {0x0, 0x0, 0x5, r2, 0xd, '/dev/binder#\x00'}}, 0x2b) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4c00000000000000, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1108.742894] binder: 9007:9009 got reply transaction with no transaction stack [ 1108.750376] binder: 9007:9009 transaction failed 29201/-71, size 0-0 line 2759 [ 1108.759255] binder: 9008:9010 got reply transaction with no transaction stack [ 1108.766710] binder: 9008:9010 transaction failed 29201/-71, size 0-0 line 2759 [ 1108.777300] binder: 9007:9009 ioctl c0306201 200000c0 returned -14 [ 1108.784520] binder: 9008:9010 ioctl c0306201 200000c0 returned -14 [ 1108.784920] binder: 9007:9009 got reply transaction with no transaction stack [ 1108.792245] binder: 9008:9010 got reply transaction with no transaction stack [ 1108.798319] binder: 9007:9009 transaction failed 29201/-71, size 0-0 line 2759 [ 1108.805712] binder: undelivered TRANSACTION_ERROR: 29201 [ 1108.813109] binder: 9008:9010 transaction failed 29201/-71, size 0-0 line 2759 [ 1108.823668] binder: 9008:9017 unknown command 0 [ 1108.831246] binder: 9008:9017 ioctl c0306201 200000c0 returned -22 [ 1108.839274] binder: undelivered TRANSACTION_ERROR: 29201 03:39:20 executing program 7: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600), &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x20000000000005, 0x70, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:39:20 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x20000800, 0xfffffffffffffffc, 0x10000, 0x0, 0x0, 0x0, 0x3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x80080, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000300)={[0x2, 0x76ae, 0x1000, 0x1, 0xfff, 0xfffffffffffff59b, 0x7, 0x5, 0x2, 0x40, 0x31973bf9, 0x7, 0x6, 0x40, 0x3601c6b, 0x40], 0x11000, 0x200}) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)=r2) r3 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xb3, 0x100) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffff}, 0x13f, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0xffffffffffff71e6, @mcast2={0xff, 0x2, [], 0x1}, 0x1}, r4}}, 0x30) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000000c0)=r2) 03:39:20 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x700, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xc000000000000, 0x208301) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000080)=0xff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000100)=0x7fffffff, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0xd00000000000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1109.204887] binder: 9029:9037 got reply transaction with no transaction stack [ 1109.212422] binder: 9029:9037 transaction failed 29201/-71, size 0-0 line 2759 [ 1109.220971] binder: 9032:9035 got reply transaction with no transaction stack [ 1109.228433] binder: 9032:9035 transaction failed 29201/-71, size 0-0 line 2759 03:39:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0xffffffff00000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:20 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1109.289127] binder: 9032:9035 ioctl c0306201 200000c0 returned -14 [ 1109.298904] binder: 9029:9037 ioctl c0306201 200000c0 returned -14 [ 1109.309573] binder: 9032:9035 got reply transaction with no transaction stack [ 1109.317159] binder: 9032:9035 transaction failed 29201/-71, size 0-0 line 2759 [ 1109.329460] binder: 9029:9037 got reply transaction with no transaction stack 03:39:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:20 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) [ 1109.336977] binder: 9029:9037 transaction failed 29201/-71, size 0-0 line 2759 [ 1109.363422] binder: undelivered TRANSACTION_ERROR: 29201 [ 1109.397566] binder: 9029:9049 unknown command 0 03:39:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x4010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x200, 0x0, &(0x7f00000001c0)=ANY=[@ANYPTR64, @ANYRES64=r1, @ANYBLOB="0400000000000000"], 0x0, 0x0, &(0x7f0000000500)}) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x1890c2) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x1, 0x0) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000200)) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f0000000100), 0x4) [ 1109.425722] binder: 9029:9049 ioctl c0306201 200000c0 returned -22 [ 1109.441636] binder: undelivered TRANSACTION_ERROR: 29201 [ 1109.486705] binder: 9068:9070 unknown command 0 [ 1109.504887] binder: 9068:9070 ioctl c0306201 20000000 returned -22 03:39:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x86ddffff, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x400000000000000, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:21 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x347}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 1109.607963] binder: 9076:9077 got reply transaction with no transaction stack [ 1109.615559] binder: 9076:9077 transaction failed 29201/-71, size 0-0 line 2759 [ 1109.628654] binder: 9076:9077 ioctl c0306201 200000c0 returned -14 [ 1109.636675] binder: 9076:9077 got reply transaction with no transaction stack [ 1109.644154] binder: 9076:9077 transaction failed 29201/-71, size 0-0 line 2759 [ 1109.652496] binder: 9076:9087 unknown command 0 [ 1109.657784] binder: 9076:9087 ioctl c0306201 200000c0 returned -22 [ 1109.665882] binder: undelivered TRANSACTION_ERROR: 29201 03:39:21 executing program 7: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600), &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x20000000000005, 0x70, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:39:21 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:21 executing program 6: r0 = shmget$private(0x0, 0x3000, 0x11, &(0x7f0000ffa000/0x3000)=nil) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000100)=0xe8) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000003c0)=0x0) r6 = getpid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000400)={{0x4, r1, r2, r3, r4, 0x8, 0x9}, 0x8001, 0x7ff, 0x7, 0x2d, r5, r6, 0x4}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x9, 0x0, 0x0, 0xfffd}, 0xffffffffffffff90) 03:39:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4c00, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:21 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x8848, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1110.153574] binder: 9099:9107 got reply transaction with no transaction stack [ 1110.161090] binder: 9099:9107 transaction failed 29201/-71, size 0-0 line 2759 03:39:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0xffffdd86, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:21 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) [ 1110.203366] binder: 9099:9107 ioctl c0306201 200000c0 returned -14 [ 1110.226078] binder: 9099:9107 got reply transaction with no transaction stack [ 1110.233592] binder: 9099:9107 transaction failed 29201/-71, size 0-0 line 2759 [ 1110.243444] binder: 9099:9115 unknown command 0 03:39:21 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) [ 1110.268499] binder: 9099:9115 ioctl c0306201 200000c0 returned -22 03:39:21 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x7a00, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1110.313551] binder: undelivered TRANSACTION_ERROR: 29201 [ 1110.382261] binder: 9132:9133 got reply transaction with no transaction stack [ 1110.389733] binder: 9132:9133 transaction failed 29201/-71, size 0-0 line 2759 [ 1110.400433] binder: 9068:9122 unknown command 0 [ 1110.405602] binder: 9068:9122 ioctl c0306201 20000000 returned -22 [ 1110.429350] binder: 9132:9133 ioctl c0306201 200000c0 returned -14 [ 1110.445492] binder: 9132:9133 got reply transaction with no transaction stack [ 1110.452927] binder: 9132:9133 transaction failed 29201/-71, size 0-0 line 2759 [ 1110.475467] binder: 9132:9143 unknown command 0 [ 1110.480926] binder: 9132:9143 ioctl c0306201 200000c0 returned -22 [ 1110.496756] binder: undelivered TRANSACTION_ERROR: 29201 03:39:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000180)=0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="126348400000000000000000000000000000000000c346d20cad91e496708c7703cffd00000000000000000000000000000000000000000000000000000000000000252d27f0b37a18042907d2ada0681f72e6f92b73b51c1f9ecc7f826e84f88df6ac318395aad5e7b62b5c1c52ec837f79ee0a189ad2dabc2111cfd5a6719f7dc7dd79f1e1bf9c6d81ffd8e11d39bcfc10e0b9c359abb8", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) vmsplice(r1, &(0x7f00000005c0)=[{&(0x7f00000002c0)="6af84600714b103abc282f89d9b7c4a706711a982bfc6be75e68a84213836abc9ccfb68cc1e473c28e8c4998ddbe5a87215a18700b956491c8ddf2103c6bd2a2c47e122c6a8081cf834c8eb3092fc64a88f3d99ed2b46418c1ef6b354b899a9d6f354e9c3f27faea8ee03244e534afebbcc77976e0fcb3061fee3a02a155406edf256d23b03b6506a7bce1f1d27141ed5ecdd8693f77473856ea82ad693702867d6d35fad6a3d166e9cefb1a442c36ff6f962067376436af341f36f944b104a3f5abd80e851c918b356a303846", 0xcd}, {&(0x7f0000000040)="f7f56fafb4458c5daa7447e4784576599c6bee69cb9a1a81d3e1ef787fd812cc53", 0x21}, {&(0x7f0000000080)}, {&(0x7f0000000100)="a7da97fb81f3996577d7a08096b9d74a6af1", 0x12}, {&(0x7f00000004c0)="ff8b67251734e1247838ab0a2adc9cc408b36e53850dfa33585a2a65fad65554149c98d592ab96de69d8da9d7718e5e1256a45dcbc3e8447d7dc88d7baa3b434b909766f4cdc26c2eb2129ddaa5a866acf92a10782a698733d1c46f80e0dd00713584664dd4f7798693b4042b4d243cf84fe00f0d561aab53398314121dcdf410ddc993b5cb769b837aa7a4d85d49dc38fed0fe138088ff893dad174a3d2ab913e7d706a21208f6fce7e62e71a97d23ce728c3c10c9bdf5eaf7d090ba8786eb3316e61a30e0d42f5da50c790b055153bcd90723e40271b44586b7f0cd608d330", 0xe0}], 0x5, 0x6) 03:39:22 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:22 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x10000, 0x10000) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000080)={0xffffffffffffff81, 0x0, 0x6, 0x9, 0x9}) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:39:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x8, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:22 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1110.590497] binder: 9158:9159 got reply transaction with no transaction stack [ 1110.597959] binder: 9158:9159 transaction failed 29201/-71, size 0-0 line 2759 [ 1110.608650] binder: 9158:9159 ioctl c0306201 200000c0 returned -14 [ 1110.624933] binder: 9158:9159 got reply transaction with no transaction stack [ 1110.632486] binder: 9158:9159 transaction failed 29201/-71, size 0-0 line 2759 [ 1110.666590] binder: undelivered TRANSACTION_ERROR: 29201 03:39:22 executing program 7: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600), &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x20000000000005, 0x70, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:39:22 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x3e3}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:39:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:22 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)='\'nodevselinux\x00', 0xfffffffffffffffb) keyctl$revoke(0x3, r0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:39:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x8100000000000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:22 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:22 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0xfffffffffffffffc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:22 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x400200) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000100)={0x74, 0x0, [0x7df, 0x10001, 0x1000, 0x1]}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1111.080089] binder: 9177:9178 got reply transaction with no transaction stack [ 1111.087886] binder: 9177:9178 transaction failed 29201/-71, size 0-0 line 2759 03:39:22 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0xd000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:22 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) [ 1111.169827] binder: 9197:9199 got reply transaction with no transaction stack [ 1111.177424] binder: 9197:9199 transaction failed 29201/-71, size 0-0 line 2759 [ 1111.178415] binder: 9177:9178 ioctl c0306201 200000c0 returned -14 03:39:22 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:22 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) [ 1111.247492] binder: 9197:9199 ioctl c0306201 200000c0 returned -14 [ 1111.254436] binder: 9177:9178 got reply transaction with no transaction stack [ 1111.261914] binder: 9177:9178 transaction failed 29201/-71, size 0-0 line 2759 [ 1111.276233] binder: 9197:9199 got reply transaction with no transaction stack [ 1111.283692] binder: 9197:9199 transaction failed 29201/-71, size 0-0 line 2759 [ 1111.291974] binder: 9177:9208 unknown command 0 03:39:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x8060000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:22 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/54) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xdd4, 0x2c0042) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) [ 1111.322226] binder: 9177:9208 ioctl c0306201 200000c0 returned -22 [ 1111.359968] binder: undelivered TRANSACTION_ERROR: 29201 [ 1111.378793] binder: undelivered TRANSACTION_ERROR: 29201 03:39:23 executing program 7: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600), &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x20000000000005, 0x70, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:39:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x6c, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB="0000000000000000c69ae8c3f094a96324a19441bc96e200bd9e3be7c88bbda990bb32219a29bb944393ff1c7abf474e9fe457b572f47af5"], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x2ec, 0x0, &(0x7f0000000100), 0xd2, 0x6c000000, &(0x7f00000002c0)="856da71e00edd6a72e592d3649d6e5ce06a321101da11911fe5218ec6d78a32808eb6c80a9b3bcf3bbbdffa41c1aa20e1582601d196da9f5bc879b2529f3e9075c7f8ea26b7103f94f7b221a477477cc155cbdf7af8244af82147a1231d5bf841d41291a3dcf4301123d7f3dd536c22b70c83575fc23245830f0868c7bbbe67cb276819d2aa7ab00863a6b17d837ad52ed23be7e42bc67bd1cf6e07c3049d025ea54cad2b275ecc0f248f7df75f99cb6864b80224785576a3f53ad962d5d9dedf170aab9344d3bc7342afadd79dfabaefec3"}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000100)) 03:39:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x5000000, 0x0, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:23 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:23 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:23 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ipddp0\x00', 0x10) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) write$P9_RSYMLINK(r0, &(0x7f0000000080)={0x14, 0x11, 0x2, {0x5, 0x0, 0x1}}, 0x14) 03:39:23 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x22d}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 1112.032414] binder: 9246:9249 got reply transaction with no transaction stack [ 1112.037984] binder: 9255:9258 got reply transaction with no transaction stack [ 1112.039846] binder: 9246:9249 transaction failed 29201/-71, size 0-0 line 2759 [ 1112.047191] binder: 9255:9258 transaction failed 29201/-71, size 0-0 line 2759 [ 1112.080784] binder: 9255:9258 ioctl c0306201 200000c0 returned -14 03:39:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x0, 0x88a8ffff00000000, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1112.108783] binder: 9255:9258 got reply transaction with no transaction stack [ 1112.116304] binder: 9255:9258 transaction failed 29201/-71, size 0-0 line 2759 [ 1112.129700] binder: 9246:9249 ioctl c0306201 20000140 returned -14 03:39:23 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xffff, 0x20080) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) ioctl$TCSETS(r0, 0x5402, &(0x7f00000005c0)={0x5, 0x2, 0x6, 0x1e, 0x23ad, 0x7, 0xff, 0x7f, 0xfffffffffffffe01, 0x4, 0x6, 0x4}) r1 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x42000) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000004c0)) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000200)={0x5, 0x4, 0xfff, 0x4, 0x1}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e21}}, 0x8, 0x7fffffff}, &(0x7f0000000340)=0x90) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000380)={r2, 0x7, 0xec, "37913ec87ccda8ebdf89c735600a02541cf1978ff1c1601015fd144bce0f16b4151ac929fabcb8e100fa15a6f9abc8ab402634a7573040a173a0425a27eb082f212a2aa9804b66229c9d8e1076a844ec86f270a46b8f48f83307c6db8b97c153138e8556bdd02312e0b41fdd29c766e1751c6136be326d5b4f7b83ab207f36b4a519d1d6484401b3974c0e7c80b9d6cb9aa335b8f42514ef6a79bc1a0e812dc51fc8e4fdb08dc3cfad9bb0b343fcc6047b5ff0c0d59e8ddcf9e10c23a11ce77cdb449165dae1cb3ac076466c54a8797dbf1211f9cb29620d6fc2fb516534c3786e6551d5abc029a7e73e3927"}, 0xf4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000080)={0xf3, 0x1, 'client1\x00', 0x2, "75166c44d7332d8c", "1c867bd09e13a8cdbb9ae06281c42d71b8fdd5988c9ad3d88e0847730e40a36b", 0xbd0, 0x3}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000240)={0x4, 0x2, 0x5, @random="3bfec81ddd42", 'yam0\x00'}) 03:39:23 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1112.164966] binder: 9246:9249 got reply transaction with no transaction stack [ 1112.172621] binder: 9246:9249 transaction failed 29201/-71, size 0-0 line 2759 [ 1112.178248] binder: 9246:9273 unknown command 20 [ 1112.184973] binder: 9255:9268 unknown command 0 [ 1112.196514] binder: 9255:9268 ioctl c0306201 200000c0 returned -22 03:39:23 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x0, 0x500, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1112.223013] binder: 9246:9273 ioctl c0306201 20000140 returned -22 [ 1112.244897] binder: undelivered TRANSACTION_ERROR: 29201 [ 1112.250927] binder: undelivered TRANSACTION_ERROR: 29201 03:39:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x6c000000, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:23 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101200, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000200)=""/4096, &(0x7f0000000080)=0x1000) 03:39:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="125d3bcbeda915b62f00000000000000000000000000000000000000ebff00000000000000000800eeffffff4e600000000000000000f80ffeff0100000c6b54273ae45fce7451e4065e1d0a420aa071ba34576a14c5e69d8c6b3ca7cdba6307b3cd9595f94c69d522a396d9ebab0790ba4d3f7ba854e4a578912fae7fa78ba3f16390a0bc5159fdacb05d38be30bf388f9f039587635eeb65a8efffceb6b8427c14bbde68d8028d1051aff080fd8fd9614f4cfc3d20d8f81b0bedab7b85a3c2c2e833cbfc98ff032c4d89027380478135ae014445d8", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB="0420004870000000"], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)) [ 1112.364672] binder: 9296:9297 got reply transaction with no transaction stack [ 1112.372292] binder: 9296:9297 transaction failed 29201/-71, size 0-0 line 2759 [ 1112.396983] binder: 9299:9302 unknown command -885301998 [ 1112.431366] binder: 9299:9302 ioctl c0306201 20000000 returned -22 [ 1112.449891] binder: 9296:9297 ioctl c0306201 200000c0 returned -14 [ 1112.460320] binder: 9296:9297 got reply transaction with no transaction stack [ 1112.467787] binder: 9296:9297 transaction failed 29201/-71, size 0-0 line 2759 [ 1112.499341] binder: 9296:9306 unknown command 0 [ 1112.504366] binder: 9296:9306 ioctl c0306201 200000c0 returned -22 [ 1112.513065] binder: undelivered TRANSACTION_ERROR: 29201 03:39:24 executing program 7: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600), &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x20000000000005, 0x70, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:39:24 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x0, 0x8864, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:24 executing program 6: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xc2}}, r0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:39:24 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x2000, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:24 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x30f}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 1113.001586] binder: 9322:9330 got reply transaction with no transaction stack [ 1113.009097] binder: 9322:9330 transaction failed 29201/-71, size 0-0 line 2759 03:39:24 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x0, 0xd, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:24 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x3, 0x2000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)) finit_module(r0, &(0x7f0000000100)='&&+\x00', 0x2) [ 1113.080526] binder: 9322:9330 ioctl c0306201 200000c0 returned -14 [ 1113.089176] binder: 9322:9330 got reply transaction with no transaction stack [ 1113.096815] binder: 9322:9330 transaction failed 29201/-71, size 0-0 line 2759 03:39:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) [ 1113.128847] binder: 9322:9348 unknown command 0 03:39:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x0, 0x4788, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1113.160288] binder: 9322:9348 ioctl c0306201 200000c0 returned -22 [ 1113.199622] binder: undelivered TRANSACTION_ERROR: 29201 03:39:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xffffff7f00000000, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:24 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1113.300174] binder: 9299:9357 unknown command -885301998 [ 1113.312570] binder: 9299:9357 ioctl c0306201 20000000 returned -22 [ 1113.327230] binder: 9371:9374 got reply transaction with no transaction stack [ 1113.334707] binder: 9371:9374 transaction failed 29201/-71, size 0-0 line 2759 03:39:24 executing program 2: r0 = accept$alg(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000001, 0xd851, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1263484000000000000000000055000000cad7efa63d2738b90000000000000000000080581854e956baa6e1485962985dfb000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) r3 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000300)) ioctl$TUNSETOWNER(r0, 0x400454cc, r2) [ 1113.372006] binder: 9371:9374 ioctl c0306201 200000c0 returned -14 [ 1113.400711] binder: 9371:9374 got reply transaction with no transaction stack [ 1113.408176] binder: 9371:9374 transaction failed 29201/-71, size 0-0 line 2759 [ 1113.441843] binder: 9382:9384 got reply transaction with no transaction stack [ 1113.443733] binder: 9371:9381 unknown command 0 [ 1113.449362] binder: 9382:9384 transaction failed 29201/-71, size -2186855686597240744-276379407112520 line 2759 [ 1113.470376] binder: 9371:9381 ioctl c0306201 200000c0 returned -22 [ 1113.476205] binder: 9382:9384 ioctl c0306201 200000c0 returned -14 [ 1113.481898] binder: undelivered TRANSACTION_ERROR: 29201 [ 1113.486376] binder: 9382:9384 got reply transaction with no transaction stack [ 1113.496096] binder: 9382:9384 transaction failed 29201/-71, size -2186855686597240744-276379407112520 line 2759 [ 1113.512057] binder: undelivered TRANSACTION_ERROR: 29201 03:39:25 executing program 7: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600), &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x20000000000005, 0x70, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:39:25 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x7c1e}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1, 0x100000000, 0xa32, 0x4}, &(0x7f0000000200)=0x10) 03:39:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x0, 0x543, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:25 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1263484064975b2f5635000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB="00000000002fb001000000000000002cccb13307c12abc"], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x12d, 0x6c000000, &(0x7f0000000280)='\b'}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x20000, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) 03:39:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x1000000, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:25 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x260}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 1113.926790] binder: 9406:9407 got reply transaction with no transaction stack [ 1113.931639] binder: 9399:9409 got reply transaction with no transaction stack [ 1113.934322] binder: 9406:9407 transaction failed 29201/-71, size 0-0 line 2759 [ 1113.941721] binder: 9399:9409 transaction failed 29201/-71, size 0-0 line 2759 [ 1113.969246] binder: 9399:9409 ioctl c0306201 200000c0 returned -14 [ 1113.976713] binder: 9406:9407 ioctl c0306201 200000c0 returned -14 [ 1113.998818] binder: 9399:9409 got reply transaction with no transaction stack [ 1114.006258] binder: 9399:9409 transaction failed 29201/-71, size 0-0 line 2759 [ 1114.014560] binder: 9399:9421 unknown command 0 03:39:25 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x48000402}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xf0, r1, 0x320, 0x70bd2b, 0x25dfdbfd, {0x11}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x33}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffff8}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1=0xe0000001}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffc}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xf67}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback={0x0, 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x801) 03:39:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x0, 0x4, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1114.031365] binder: 9399:9421 ioctl c0306201 200000c0 returned -22 [ 1114.063187] binder: 9406:9407 got reply transaction with no transaction stack [ 1114.066517] binder: undelivered TRANSACTION_ERROR: 29201 03:39:25 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB="000000000000000098eea3d0b1f1884a8f2675ff8e6bfe04430092fec45fe37f4718ede9b4141c2a0175cc555a3f51fc91c41bec58df9f2425b9b971643e9b2f70e04c2b308c9b7a5439c6907a61f737ec54010048ca0b87e7b71c4be2bde7d30dec545e01080d320b44765d6ae444bb2dbd2b0de7312cf029a39ec74af60f92ec826ffb4ca958269b4df1ed98c9c1e8ae520d19eb40a079bae726b57896da08dde60440"], 0x0, 0x0, &(0x7f0000000500)}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xc98, 0x80) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000100)={0x4, &(0x7f0000000080)=[{}, {}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1114.070600] binder: 9406:9407 transaction failed 29201/-71, size 0-0 line 2759 03:39:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x6000000000000000, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1114.165970] binder: undelivered TRANSACTION_ERROR: 29201 [ 1114.183677] binder: 9440:9442 got reply transaction with no transaction stack [ 1114.191158] binder: 9440:9442 transaction failed 29201/-71, size 0-0 line 2759 03:39:25 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1114.216199] binder: 9443:9444 got reply transaction with no transaction stack [ 1114.223712] binder: 9443:9444 transaction failed 29201/-71, size 0-0 line 2759 03:39:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x0, 0x800000000000000, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1114.261704] binder: 9440:9442 ioctl c0306201 200000c0 returned -14 [ 1114.269212] binder: 9443:9444 ioctl c0306201 200000c0 returned -14 [ 1114.284852] binder: 9440:9442 got reply transaction with no transaction stack [ 1114.292333] binder: 9440:9442 transaction failed 29201/-71, size 0-0 line 2759 [ 1114.303796] binder: 9443:9444 got reply transaction with no transaction stack [ 1114.311203] binder: 9443:9444 transaction failed 29201/-71, size 0-0 line 2759 [ 1114.311388] binder: undelivered TRANSACTION_ERROR: 29201 [ 1114.326567] binder: 9443:9454 unknown command 0 [ 1114.360735] binder: 9443:9454 ioctl c0306201 200000c0 returned -22 [ 1114.399622] binder: undelivered TRANSACTION_ERROR: 29201 03:39:26 executing program 7: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600), &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x20000000000005, 0x70, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:39:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:26 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000040)='./file0\x00') modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:39:26 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1263484000000000000000000000000000000000000000000000000000000000000000000000000000007e788944ad5ac000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000500)}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getsockname$llc(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000100)=0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x0, 0x2000000, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x700000000000000, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:26 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x3f6}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 1114.893392] binder: 9472:9475 got reply transaction with no transaction stack [ 1114.900825] binder: 9472:9475 transaction failed 29201/-71, size 0-0 line 2759 [ 1114.913780] binder: 9477:9485 got reply transaction with no transaction stack [ 1114.921350] binder: 9477:9485 transaction failed 29201/-71, size 8682377131616894976-826155025545 line 2759 [ 1114.939264] binder: 9472:9475 ioctl c0306201 200000c0 returned -14 [ 1114.951631] binder: 9472:9475 got reply transaction with no transaction stack [ 1114.959142] binder: 9472:9475 transaction failed 29201/-71, size 0-0 line 2759 [ 1114.973481] binder: 9477:9485 ioctl c0306201 200000c0 returned -14 03:39:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x0, 0x34000, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:26 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000040)=0x7, 0x4) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x2, 0x0, 0x101, 0x10000000}, 0xfffffe5f) [ 1114.998521] binder: 9477:9485 got reply transaction with no transaction stack [ 1115.006144] binder: 9477:9485 transaction failed 29201/-71, size 8682377131616894976-826155025545 line 2759 [ 1115.023562] binder: 9472:9490 unknown command 0 [ 1115.037455] binder: 9472:9490 ioctl c0306201 200000c0 returned -22 03:39:26 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1115.046137] binder: undelivered TRANSACTION_ERROR: 29201 [ 1115.056912] binder: undelivered TRANSACTION_ERROR: 29201 03:39:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) ioctl$int_out(r0, 0x5462, &(0x7f0000000040)) 03:39:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4c000000, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x0, 0x608, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1115.181204] binder: 9514:9515 got reply transaction with no transaction stack [ 1115.189023] binder: 9514:9515 transaction failed 29201/-71, size 0-0 line 2759 [ 1115.241441] binder: 9519:9522 got reply transaction with no transaction stack [ 1115.248930] binder: 9519:9522 transaction failed 29201/-71, size 0-0 line 2759 [ 1115.256612] binder: 9514:9515 ioctl c0306201 200000c0 returned -14 [ 1115.280454] binder: 9514:9515 ioctl 5462 20000040 returned -22 [ 1115.297300] binder: 9514:9515 got reply transaction with no transaction stack [ 1115.304827] binder: 9514:9515 transaction failed 29201/-71, size 0-0 line 2759 [ 1115.311225] binder: 9519:9522 ioctl c0306201 200000c0 returned -14 [ 1115.323072] binder: 9519:9522 got reply transaction with no transaction stack [ 1115.324524] binder: undelivered TRANSACTION_ERROR: 29201 [ 1115.330560] binder: 9519:9522 transaction failed 29201/-71, size 0-0 line 2759 [ 1115.345418] binder: 9519:9531 unknown command 0 [ 1115.357120] binder: 9519:9531 ioctl c0306201 200000c0 returned -22 [ 1115.371246] binder: undelivered TRANSACTION_ERROR: 29201 03:39:27 executing program 7: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600), &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x20000000000005, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:39:27 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x10000, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000340)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x18, r1, 0x202, 0x70bd28, 0x25dfdbfd, {0x3}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) r2 = syz_open_dev$adsp(&(0x7f0000000440)='/dev/adsp#\x00', 0x2, 0x0) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000080)={0x6, 0xfffffffffffffff7}) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={r3, 0x101}, 0x8) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000100)) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0)) 03:39:27 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x40, 0x20100) mq_notify(r1, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={&(0x7f00000003c0)="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", &(0x7f0000000100)="1e1a1c139b48d7fad75b55bffa3f7f3d476fbd965a2400a7b193c48c1d74804e60e7924cca01b984f6a2eeb6b4ca1a742420f109b86a6b7ec6b8d82d03c86d57d897efc7dc1d3babf1b1b0930826f2b31cc3c2df16e2e331fba33e0d7c75fb57f30cc613f673a6c5814b83ffc74a013c76fc9d4b3373b50ef7b4b0b484a5bca2173668a5d34713662dae175ebd2887dec61773dea8dcfbb975e821e7f5e4b5a00e39c413313070a64a9e1d84af22ad1b0dc46288829e64d0e40ce892"}}) 03:39:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x0, 0x800e000000000000, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x60000000, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:27 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x3a1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 1115.875870] binder: 9548:9555 got reply transaction with no transaction stack [ 1115.883297] binder: 9548:9555 transaction failed 29201/-71, size 0-0 line 2759 [ 1115.892211] binder: 9553:9556 got reply transaction with no transaction stack [ 1115.899698] binder: 9553:9556 transaction failed 29201/-71, size 0-0 line 2759 03:39:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x0, 0xffffffff00000000, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1115.925600] binder: 9548:9555 ioctl c0306201 200000c0 returned -14 [ 1115.938121] binder: 9553:9556 ioctl c0306201 200000c0 returned -14 [ 1115.963604] binder: 9548:9555 got reply transaction with no transaction stack 03:39:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:27 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1115.970204] binder: 9553:9556 got reply transaction with no transaction stack [ 1115.971082] binder: 9548:9555 transaction failed 29201/-71, size 0-0 line 2759 [ 1115.978369] binder: 9553:9556 transaction failed 29201/-71, size 0-0 line 2759 [ 1116.010569] binder: undelivered TRANSACTION_ERROR: 29201 [ 1116.037842] binder: 9548:9565 unknown command 0 03:39:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x3, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:27 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012dbd7000ffdbdf2501000500080001004e2100000800040001000000080002000a00cefe0000000000000500"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x40c4) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) r3 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, r3) r4 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 1116.068157] binder: 9548:9565 ioctl c0306201 200000c0 returned -22 03:39:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x0, 0x5000000, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) [ 1116.114501] binder: undelivered TRANSACTION_ERROR: 29201 [ 1116.154323] binder: 9581:9587 got reply transaction with no transaction stack 03:39:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x6800, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1116.161825] binder: 9581:9587 transaction failed 29201/-71, size 0-0 line 2759 [ 1116.233867] binder: 9598:9600 got reply transaction with no transaction stack [ 1116.241431] binder: 9598:9600 transaction failed 29201/-71, size 0-0 line 2759 [ 1116.270093] binder: 9581:9587 ioctl c0306201 200000c0 returned -14 [ 1116.281468] binder: 9581:9587 got reply transaction with no transaction stack [ 1116.288942] binder: 9581:9587 transaction failed 29201/-71, size 0-0 line 2759 [ 1116.303744] binder: 9598:9600 ioctl c0306201 200000c0 returned -14 [ 1116.322398] binder: undelivered TRANSACTION_ERROR: 29201 [ 1116.331283] binder: 9598:9600 got reply transaction with no transaction stack [ 1116.338680] binder: 9598:9600 transaction failed 29201/-71, size 0-0 line 2759 [ 1116.374745] binder: 9598:9605 unknown command 0 [ 1116.379686] binder: 9598:9605 ioctl c0306201 200000c0 returned -22 [ 1116.387688] binder: undelivered TRANSACTION_ERROR: 29201 03:39:28 executing program 7: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600), &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x20000000000005, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:39:28 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x0, 0x86ddffff00000000, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:28 executing program 6: r0 = semget$private(0x0, 0x1, 0x81) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='/dev/usbmon#\x00'}, 0x10) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000380), &(0x7f00000003c0)=0x4) set_thread_area(&(0x7f00000002c0)={0xfffffffffffffff9, 0x0, 0x4400, 0x7fff, 0x10001, 0xf8d4, 0x8001, 0x9, 0x4, 0x401}) semtimedop(r0, &(0x7f0000000040)=[{0x2, 0x7}, {0x0, 0x1f}, {0x0, 0x6, 0x1000}, {0x3, 0x2, 0x1000}, {0x0, 0x4, 0x800}], 0x5, &(0x7f00000000c0)={r1, r2+10000000}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000400)='/dev/input/mice\x00', 0x0, 0x521002) r4 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x6, 0x8000) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000200)=""/136) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:39:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000400)='/dev/input/mouse#\x00', 0x8, 0x212000) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000140)={[0xf002, 0x6000, 0x3000, 0x1f004], 0x1, 0x2c, 0x1}) write$P9_RLCREATE(r1, &(0x7f0000000100)={0x18, 0xf, 0x1, {{0x11, 0x2, 0x3}, 0x7}}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12f00677e0b4e8e20e295690e60c634840130000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000440)={0x12, @tick=0xfff, 0x3f, {0xeae, 0x4}, 0x7, 0x2, 0x4}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {0x5}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2e}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5e}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xbc}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6f}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 03:39:28 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x3bb}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 1116.841675] binder: 9624:9628 got reply transaction with no transaction stack [ 1116.849175] binder: 9624:9628 transaction failed 29201/-71, size 0-0 line 2759 [ 1116.864255] binder: 9627:9630 unknown command 1996943378 [ 1116.876951] binder: 9627:9630 ioctl c0306201 20000000 returned -22 03:39:28 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1116.891686] binder: 9624:9628 ioctl c0306201 200000c0 returned -14 [ 1116.900608] binder: 9624:9628 got reply transaction with no transaction stack [ 1116.908101] binder: 9624:9628 transaction failed 29201/-71, size 0-0 line 2759 [ 1116.928653] binder: 9624:9637 unknown command 0 03:39:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x0, 0x800e0000, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:28 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2c102, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) [ 1116.955420] binder: 9624:9637 ioctl c0306201 200000c0 returned -22 [ 1116.978216] binder: undelivered TRANSACTION_ERROR: 29201 03:39:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x6c00000000000000, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x0, 0x6488, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:28 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) [ 1117.078367] binder: 9655:9657 got reply transaction with no transaction stack [ 1117.085884] binder: 9655:9657 transaction failed 29201/-71, size 0-0 line 2759 [ 1117.102196] binder: 9655:9657 ioctl c0306201 200000c0 returned -14 [ 1117.115709] binder: 9655:9657 got reply transaction with no transaction stack 03:39:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) [ 1117.123231] binder: 9655:9657 transaction failed 29201/-71, size 0-0 line 2759 [ 1117.196952] binder: 9655:9658 unknown command 0 [ 1117.203228] binder: 9655:9658 ioctl c0306201 200000c0 returned -22 [ 1117.232652] binder: undelivered TRANSACTION_ERROR: 29201 03:39:29 executing program 7: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600), &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x20000000000005, 0x70, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:39:29 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x0, 0x4888, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:29 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10) 03:39:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x6800000000000000, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) [ 1117.760668] binder: 9627:9691 unknown command 1996943378 [ 1117.767938] binder: 9686:9696 got reply transaction with no transaction stack [ 1117.775361] binder: 9686:9696 transaction failed 29201/-71, size 0-0 line 2759 [ 1117.783406] binder: 9627:9691 ioctl c0306201 20000000 returned -22 [ 1117.793343] binder: 9686:9696 ioctl c0306201 200000c0 returned -14 [ 1117.812835] binder: 9686:9696 got reply transaction with no transaction stack [ 1117.820403] binder: 9686:9696 transaction failed 29201/-71, size 0-0 line 2759 [ 1117.855265] binder: 9686:9702 unknown command 0 [ 1117.874646] binder: 9686:9702 ioctl c0306201 200000c0 returned -22 [ 1117.889615] binder: undelivered TRANSACTION_ERROR: 29201 03:39:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ppp1md5sumposix_acl_access\x00', 0xffffffffffffff9c}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x68, 0x0, &(0x7f00000002c0)=[@register_looper={0x630b}, @release={0x40046306, 0x4}, @decrefs={0x40046307}, @reply_sg={0x40486312, {{0x2, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x38, 0x10, &(0x7f0000000140)=[@fda={0x66646185, 0x7, 0x1, 0x40}, @fd={0x66642a85, 0x0, r0, 0x0, 0x3}], &(0x7f0000000180)=[0x18, 0x18]}, 0x4}}, @increfs={0x40046304, 0x2}], 0x52, 0x0, &(0x7f00000003c0)="1b89c0d733dcdda8b0bbad7188a295a9197d653d9137955b4c1dda54492c44943366a2b3d85b9a6412e887612cea2d539c20485614814dbbee2d881a5afad7c00ab854cd5d3364615fe0bcce190346d0e503"}) write$P9_ROPEN(r1, &(0x7f0000000100)={0x18, 0x71, 0x1, {{0x0, 0x1, 0x1}, 0x4}}, 0x18) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000580)={@mcast1, 0x0}, &(0x7f00000005c0)=0x14) connect$packet(r1, &(0x7f0000000600)={0x11, 0x10, r2, 0x1, 0x6, 0x6}, 0x14) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) 03:39:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@canfd={0xd, {{}, 0x0, 0x0, 0x8848000000000000, 0x0, "bada6ce495dc87cfaa0f45accb685e7639893cec2e6d0c8a3e658df63f9ca48ea578f37e22613f5d4f6c7d8f0b983f64159c441ad95afbc93fa66c232a1eac2c"}}}}, &(0x7f0000000200)) 03:39:29 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x1d0}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:39:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) 03:39:29 executing program 6: r0 = socket$unix(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f0000002dc0)={&(0x7f0000002680)=@in={0x2, 0x4e21}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000002700)=ANY=[@ANYBLOB="20000000000000000000000007000000440fc708daef27ff161f000000000000"], 0x20}, 0x4090) 03:39:29 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) 03:39:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000500)}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x6000000, 0x0, &(0x7f0000000100), 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) 03:39:29 executing program 6: r0 = socket(0x10, 0x80002, 0x0) r1 = dup2(r0, r0) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 03:39:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) [ 1118.017620] binder: 9725:9726 got reply transaction with no transaction stack [ 1118.025109] binder: 9725:9726 transaction failed 29201/-71, size 0-0 line 2759 [ 1118.048225] binder: 9727:9729 got reply transaction with no transaction stack [ 1118.055715] binder: 9727:9729 transaction failed 29201/-71, size 0-0 line 2759 [ 1118.077696] ================================================================== [ 1118.086159] BUG: KASAN: stack-out-of-bounds in __list_add_valid+0x8f/0xb0 [ 1118.093120] Read of size 8 at addr ffff880191a72510 by task udevd/12095 [ 1118.099879] [ 1118.101536] CPU: 1 PID: 12095 Comm: udevd Not tainted 4.18.0-rc4+ #138 [ 1118.108292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1118.117681] Call Trace: [ 1118.120301] dump_stack+0x1c9/0x2b4 [ 1118.123951] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1118.129161] ? printk+0xa7/0xcf [ 1118.132465] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 1118.137265] ? __list_add_valid+0x8f/0xb0 [ 1118.141430] print_address_description+0x6c/0x20b [ 1118.146285] ? __list_add_valid+0x8f/0xb0 [ 1118.150448] kasan_report.cold.7+0x242/0x2fe [ 1118.154890] __asan_report_load8_noabort+0x14/0x20 [ 1118.159877] __list_add_valid+0x8f/0xb0 [ 1118.163897] list_add_tail_rcu+0x97/0x200 [ 1118.168063] ? recalc_sigpending+0x8d/0x1a0 [ 1118.172430] ? copy_signal+0xc10/0xc10 [ 1118.176343] ? kasan_check_write+0x14/0x20 [ 1118.180596] ? do_raw_spin_lock+0xc1/0x200 [ 1118.184863] copy_process.part.39+0x4246/0x7220 [ 1118.186575] PANIC: double fault, error_code: 0x0 [ 1118.189567] ? __cleanup_sighand+0x70/0x70 [ 1118.194292] CPU: 0 PID: 9718 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #138 [ 1118.198509] ? print_usage_bug+0xc0/0xc0 [ 1118.205744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1118.205763] RIP: 0010:mark_lock+0x46/0x19f0 [ 1118.209821] ? graph_lock+0x170/0x170 [ 1118.219137] Code: 00 [ 1118.223463] ? trace_hardirqs_on+0x10/0x10 [ 1118.227220] 00 00 [ 1118.229643] ? graph_lock+0x170/0x170 [ 1118.233835] 41 56 [ 1118.235996] ? print_usage_bug+0xc0/0xc0 [ 1118.239754] 41 d3 [ 1118.241905] ? print_usage_bug+0xc0/0xc0 [ 1118.245938] e7 41 [ 1118.248086] ? find_held_lock+0x36/0x1c0 [ 1118.252109] 55 4c [ 1118.254279] ? print_usage_bug+0xc0/0xc0 [ 1118.258298] 8d 6e [ 1118.260444] ? __lock_acquire+0x7fc/0x5020 [ 1118.264466] 20 41 [ 1118.266615] ? kasan_check_read+0x11/0x20 [ 1118.270821] 54 49 [ 1118.272984] ? print_usage_bug+0xc0/0xc0 [ 1118.277103] 89 f4 [ 1118.279246] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1118.283273] 53 48 [ 1118.285442] ? __lock_acquire+0x7fc/0x5020 [ 1118.289826] 8d [ 1118.291967] ? print_usage_bug+0xc0/0xc0 [ 1118.296165] 9d f8 [ 1118.298082] ? trace_hardirqs_on+0x10/0x10 [ 1118.302109] fe ff [ 1118.304255] ? graph_lock+0x170/0x170 [ 1118.309147] ff 48 [ 1118.311291] ? __lock_acquire+0x7fc/0x5020 [ 1118.315063] c1 eb [ 1118.317213] ? kasan_kmalloc+0xc4/0xe0 [ 1118.321404] 03 48 [ 1118.323564] ? kasan_slab_alloc+0x12/0x20 [ 1118.327418] 8d 04 [ 1118.329578] ? kmem_cache_alloc+0x12e/0x760 [ 1118.333709] 13 48 [ 1118.335858] ? get_empty_filp+0x12d/0x530 [ 1118.340152] 81 ec [ 1118.342309] ? create_pipe_files+0x606/0x950 [ 1118.346429] 08 01 [ 1118.348585] ? do_pipe2+0x9d/0x310 [ 1118.352966] 00 00 [ 1118.355122] ? trace_hardirqs_on+0x10/0x10 [ 1118.358626] <48> c7 [ 1118.360777] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1118.364971] 85 f8 [ 1118.367292] ? expand_files.part.8+0x571/0x9c0 [ 1118.372281] fe ff [ 1118.374429] ? graph_lock+0x170/0x170 [ 1118.378972] ff b3 [ 1118.381725] ? find_held_lock+0x36/0x1c0 [ 1118.385487] 8a b5 [ 1118.387642] ? find_held_lock+0x36/0x1c0 [ 1118.391657] 41 48 [ 1118.393833] ? lock_downgrade+0x8f0/0x8f0 [ 1118.397855] c7 85 [ 1118.400018] ? kasan_check_read+0x11/0x20 [ 1118.404136] 00 ff [ 1118.406280] ? rcu_is_watching+0x8c/0x150 [ 1118.410398] ff ff [ 1118.412543] ? __lock_is_held+0xb5/0x140 [ 1118.416664] 70 6f [ 1118.418808] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1118.422831] bd 88 [ 1118.424993] _do_fork+0x291/0x12a0 [ 1118.429382] RSP: 0018:ffff88018d7fff70 EFLAGS: 00010082 [ 1118.431523] ? fork_idle+0x1a0/0x1a0 [ 1118.440383] ? lock_release+0xa30/0xa30 [ 1118.444073] RAX: ffffed0031affff3 RBX: 1ffff10031affff3 RCX: 0000000000000008 [ 1118.444085] RDX: dffffc0000000000 RSI: ffff880193832a20 RDI: ffff8801938321c0 [ 1118.448057] ? check_same_owner+0x340/0x340 [ 1118.455316] RBP: ffff88018d8000a0 R08: 0000000000000008 R09: 0000000000000001 [ 1118.455328] R10: ffff8801938321c0 R11: ffff8801938329e4 R12: ffff880193832a20 [ 1118.463300] ? lockref_get+0x42/0x50 [ 1118.467583] R13: ffff880193832a40 R14: ffff8801938321c0 R15: 0000000000000100 [ 1118.467597] FS: 0000000000d51940(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 1118.474870] ? fd_install+0x4d/0x60 [ 1118.482093] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1118.482105] CR2: ffff88018d7fff68 CR3: 00000001ae8d6000 CR4: 00000000001406f0 [ 1118.485804] ? do_pipe2+0xb3/0x310 [ 1118.493064] DR0: 0000000020000000 DR1: 0000000020000180 DR2: 0000000000000000 [ 1118.501278] ? __do_pipe_flags+0x250/0x250 [ 1118.504879] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 1118.510755] __x64_sys_clone+0xbf/0x150 [ 1118.518001] Call Trace: [ 1118.521549] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1118.528789] Kernel panic - not syncing: Machine halted. [ 1118.533038] do_syscall_64+0x1b9/0x820 [ 1118.561179] ? syscall_slow_exit_work+0x500/0x500 [ 1118.566033] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1118.570975] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1118.576347] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1118.581194] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1118.586383] RIP: 0033:0x7ff0af760f46 [ 1118.590082] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 14 25 10 00 00 00 31 d2 49 81 c2 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 31 01 00 00 85 c0 41 89 c4 0f 85 3b 01 00 [ 1118.609379] RSP: 002b:00007ffe7c16f060 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1118.617090] RAX: ffffffffffffffda RBX: 00007ffe7c16f060 RCX: 00007ff0af760f46 [ 1118.624355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1118.631619] RBP: 00007ffe7c16f0c0 R08: 0000000000002f3f R09: 0000000000002f3f [ 1118.638887] R10: 00007ff0b007da70 R11: 0000000000000246 R12: 0000000000000000 [ 1118.646161] R13: 00007ffe7c16f080 R14: 0000000000000005 R15: 0000000000000005 [ 1118.653443] [ 1118.653457] CPU: 0 PID: 9718 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #138 [ 1118.653468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1118.655074] Allocated by task 3672258224: [ 1118.662326] Call Trace: [ 1118.662348] <#DF> [ 1118.671691] BUG: unable to handle kernel paging request at ffffffff8c3f5988 [ 1118.675819] dump_stack+0x1c9/0x2b4 [ 1118.678365] PGD 8e6d067 [ 1118.680515] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1118.687580] P4D 8e6d067 [ 1118.691201] panic+0x238/0x4e7 [ 1118.693832] PUD 8e6e063 [ 1118.699010] ? add_taint.cold.5+0x16/0x16 [ 1118.701645] PMD 0 [ 1118.704829] ? get_cpu_entry_area+0xc/0x30 [ 1118.711603] df_debug+0x2d/0x2e [ 1118.713730] BUG: unable to handle kernel paging request at ffff88018d790000 [ 1118.717933] do_double_fault+0x113/0x200 [ 1118.717948] double_fault+0x23/0x30 [ 1118.717965] RIP: 0010:mark_lock+0x46/0x19f0 [ 1118.717967] Code: 00 00 00 41 56 41 d3 e7 41 55 4c 8d 6e 20 41 54 49 89 f4 53 48 8d 9d f8 fe ff ff 48 c1 eb 03 48 8d 04 13 48 81 ec 08 01 00 00 <48> c7 85 f8 fe ff ff b3 8a b5 41 48 c7 85 00 ff ff ff 70 6f bd 88 [ 1118.718167] RSP: 0018:ffff88018d7fff70 EFLAGS: 00010082 [ 1118.718177] RAX: ffffed0031affff3 RBX: 1ffff10031affff3 RCX: 0000000000000008 [ 1118.718185] RDX: dffffc0000000000 RSI: ffff880193832a20 RDI: ffff8801938321c0 [ 1118.718191] RBP: ffff88018d8000a0 R08: 0000000000000008 R09: 0000000000000001 [ 1118.718200] R10: ffff8801938321c0 R11: ffff8801938329e4 R12: ffff880193832a20 [ 1118.718207] R13: ffff880193832a40 R14: ffff8801938321c0 R15: 0000000000000100 [ 1118.718225] WARNING: kernel stack regs at 00000000abd8b0b7 in syz-executor3:9718 has bad 'bp' value 0000000035b8ab81 [ 1118.718234] unwind stack type:0 next_sp:000000008a2e4e54 mask:0x20 graph_idx:0 [ 1118.718245] 0000000011c65e3a: fffffe0000008d78 (0xfffffe0000008d78) [ 1118.718261] 000000000e2832a6: ffffffff812a9105 (show_trace_log_lvl+0x1f6/0x28c) [ 1118.718275] 000000006a19d5e2: ffffffff815e8736 (mark_lock+0x46/0x19f0) [ 1118.718285] 00000000445c25ce: fffffe0000008fd8 (0xfffffe0000008fd8) [ 1118.718293] 000000003acae730: 0000000000000020 (0x20) [ 1118.718300] 000000002d90777a: 0000000000000005 (0x5) [ 1118.718308] 00000000bcf92a94: fffffe0000007000 (0xfffffe0000007000) [ 1118.718317] 0000000046696183: fffffe0000009000 (0xfffffe0000009000) [ 1118.718325] 0000000051cc7b21: ffff88018d7fff70 (0xffff88018d7fff70) [ 1118.718335] 00000000ad1421a7: 0000000000000000 ... [ 1118.718344] 00000000b44dfc7d: fffffe0000007000 (0xfffffe0000007000) [ 1118.718353] 0000000048dd5e7e: fffffe0000009000 (0xfffffe0000009000) [ 1118.718362] 00000000532531a7: ffff88018d7fff70 (0xffff88018d7fff70) [ 1118.718370] 000000003da14371: 0000000000000020 (0x20) [ 1118.718379] 0000000074fec874: ffff8801938321c0 (0xffff8801938321c0) [ 1118.718387] 00000000f02682f1: 0000010100000000 (0x10100000000) [ 1118.718392] 00000000b3933bee: 0000000000000000 ... [ 1118.718401] 00000000c216c5c4: fffffe0000008ca8 (0xfffffe0000008ca8) [ 1118.718415] 0000000059abc9f2: ffffffff815e8736 (mark_lock+0x46/0x19f0) [ 1118.718425] 00000000f95e142e: fffffe0000008f58 (0xfffffe0000008f58) [ 1118.718433] 00000000a825936f: 1a483779dc746700 (0x1a483779dc746700) [ 1118.718441] 000000000e52dc86: 0000000000000093 (0x93) [ 1118.718446] 00000000f5c0c39a: 0000000000000000 ... [ 1118.718462] 00000000ec4d28de: ffffffff88f1b060 (pv_cpu_ops+0x120/0x120) [ 1118.718470] 000000000fadd504: 00000000ffffffff (0xffffffff) [ 1118.718479] 000000006dffc97d: fffffe0000008d88 (0xfffffe0000008d88) [ 1118.718492] 00000000bee89135: ffffffff812a91d3 (show_stack+0x38/0x3a) [ 1118.718501] 00000000373f7c5d: fffffe0000008e38 (0xfffffe0000008e38) [ 1118.718513] 00000000b3a805cc: ffffffff878c9805 (dump_stack+0x1c9/0x2b4) [ 1118.718520] 00000000ed9c788c: fffffbfff11e360c (0xfffffbfff11e360c) [ 1118.718526] 00000000b7cd02c5: dffffc0000000000 (0xdffffc0000000000) [ 1118.718532] 00000000e28fc69e: 1fffffc0000011b6 (0x1fffffc0000011b6) [ 1118.718538] 00000000f853976d: 0000000041b58ab3 (0x41b58ab3) [ 1118.718552] 000000003cf373b6: ffffffff88bd5184 (regoff.34021+0x3683e4/0x37af20) [ 1118.718563] 000000007f61be70: ffffffff878c963c (dump_stack_print_info.cold.2+0x52/0x52) [ 1118.718569] 00000000005aaea1: fffffe0000008df8 (0xfffffe0000008df8) [ 1118.718572] 00000000c69748bb: 0000000000000000 ... [ 1118.718579] 00000000dfb1a23a: fffffe0000008e40 (0xfffffe0000008e40) [ 1118.718585] 00000000ccdea2b7: ffff88018d800000 (0xffff88018d800000) [ 1118.718591] 000000009955066f: fffffe0000008e18 (0xfffffe0000008e18) [ 1118.718598] 000000008063f15a: 1a483779dc746700 (0x1a483779dc746700) [ 1118.718604] 00000000a1e7e17e: ffff88018d800000 (0xffff88018d800000) [ 1118.718616] 00000000e6d8daa2: ffffffff89e72d60 (buf.37943+0x40/0x40) [ 1118.718622] 00000000a437f221: 1a483779dc746700 (0x1a483779dc746700) [ 1118.718625] 0000000006bc106a: 0000000000000000 ... [ 1118.718638] 000000005d88482d: ffffffff87e742e0 (hpet_msi_domain_info+0xe40/0x1a80) [ 1118.718642] 000000003f661dfc: 0000000000000000 ... [ 1118.718648] 00000000ad6cf5d5: fffffe0000008f00 (0xfffffe0000008f00) [ 1118.718662] 00000000105a4d8c: ffffffff81473a99 (panic+0x238/0x4e7) [ 1118.718668] 00000000ea1cf3fc: 0000000041b58ab3 (0x41b58ab3) [ 1118.718679] 00000000cc26e597: ffffffff88beb1cc (K512_4+0x130c/0x1207ec) [ 1118.718689] 000000000d6db304: ffffffff81473861 (add_taint.cold.5+0x16/0x16) [ 1118.718693] 00000000ac9990d6: 0000000000000000 ... [ 1118.718699] 000000008d323c2f: 0000000000000008 (0x8) [ 1118.718705] 000000002a8dbd29: fffffe0000008f10 (0xfffffe0000008f10) [ 1118.718711] 00000000ce35ef65: fffffe0000008ea8 (0xfffffe0000008ea8) [ 1118.718715] 000000007f046036: 0000000000000000 ... [ 1118.718721] 0000000092ff565b: ffff8801938321c0 (0xffff8801938321c0) [ 1118.718727] 0000000093903490: 0000010000000000 (0x10000000000) [ 1118.718730] 00000000d6ae2d7b: 0000000000000000 ... [ 1118.718736] 000000003d596291: 1a483779dc746700 (0x1a483779dc746700) [ 1118.718740] 000000001bd81401: 0000000000000000 ... [ 1118.718749] 000000007ce30abf: ffffffff8137bfbc (get_cpu_entry_area+0xc/0x30) [ 1118.718756] 000000004c0554c2: fffffe0000002000 (0xfffffe0000002000) [ 1118.718761] 00000000fb7857ed: 0000000000000004 (0x4) [ 1118.718767] 00000000c84e4d39: 000000000001ede0 (0x1ede0) [ 1118.718773] 000000005c52b451: fffffe0000008e60 (0xfffffe0000008e60) [ 1118.718780] 000000005bae7c3c: fffffe0000008f58 (0xfffffe0000008f58) [ 1118.718783] 00000000b88bc23e: 0000000000000000 ... [ 1118.718793] 000000001006473b: ffffffff87e4a580 (__func__.44965+0x40/0x40) [ 1118.718800] 0000000059da66bf: ffff88018d7fff70 (0xffff88018d7fff70) [ 1118.718803] 0000000061ae3183: 0000000000000000 ... [ 1118.718809] 00000000d15d51b0: fffffe0000008f18 (0xfffffe0000008f18) [ 1118.718817] 00000000200d2614: ffffffff813470df (df_debug+0x2d/0x2e) [ 1118.718823] 0000000052590327: fffffe0000008f58 (0xfffffe0000008f58) [ 1118.718829] 000000009217c31b: fffffe0000008f48 (0xfffffe0000008f48) [ 1118.718839] 000000002a97aea2: ffffffff8129c1f3 (do_double_fault+0x113/0x200) [ 1118.718845] 00000000b7cf1c34: 0000000000000001 (0x1) [ 1118.718848] 0000000006dc8138: 0000000000000000 ... [ 1118.718854] 00000000f01ad848: fffffe0000008f59 (0xfffffe0000008f59) [ 1118.718862] 00000000bcc08966: ffffffff87a00bd3 (double_fault+0x23/0x30) [ 1118.718868] 00000000abd8b0b7: 0000000000000100 (0x100) [ 1118.718874] 000000005f12dddb: ffff8801938321c0 (0xffff8801938321c0) [ 1118.718880] 00000000ead70e51: ffff880193832a40 (0xffff880193832a40) [ 1118.718887] 00000000d718c2e9: ffff880193832a20 (0xffff880193832a20) [ 1118.718893] 00000000b7393a57: ffff88018d8000a0 (0xffff88018d8000a0) [ 1118.718899] 000000006b8f79da: 1ffff10031affff3 (0x1ffff10031affff3) [ 1118.718905] 0000000073225875: ffff8801938329e4 (0xffff8801938329e4) [ 1118.718912] 000000006a48234c: ffff8801938321c0 (0xffff8801938321c0) [ 1118.718917] 000000000ab39d1a: 0000000000000001 (0x1) [ 1118.718922] 00000000a5cc91cf: 0000000000000008 (0x8) [ 1118.718928] 000000004fd9e263: ffffed0031affff3 (0xffffed0031affff3) [ 1118.718933] 00000000a71f05a2: 0000000000000008 (0x8) [ 1118.718940] 0000000073375687: dffffc0000000000 (0xdffffc0000000000) [ 1118.718946] 000000007b87ac70: ffff880193832a20 (0xffff880193832a20) [ 1118.718952] 00000000f831b6b0: ffff8801938321c0 (0xffff8801938321c0) [ 1118.718958] 00000000fdd203d1: ffffffffffffffff (0xffffffffffffffff) [ 1118.718969] 000000004b90c146: ffffffff815e8736 (mark_lock+0x46/0x19f0) [ 1118.718974] 0000000069f8aee6: 0000000000000010 (0x10) [ 1118.718980] 000000000f74e6d1: 0000000000010082 (0x10082) [ 1118.718986] 0000000031726549: ffff88018d7fff70 (0xffff88018d7fff70) [ 1118.718991] 000000000c1de5ed: 0000000000000018 (0x18) [ 1118.718995] [ 1118.719003] PANIC: double fault, error_code: 0x0 [ 1118.719007] CPU: 1 PID: 12095 Comm: udevd Not tainted 4.18.0-rc4+ #138 [ 1118.719013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1118.719016] RIP: 0010:__lock_acquire+0x2e/0x5020 [ 1118.719017] Code: 41 57 41 89 cf 41 56 41 55 49 89 fd 41 54 45 89 cc 53 65 4c 8b 34 25 40 ee 01 00 48 83 e4 f0 48 81 ec 60 03 00 00 48 8b 45 10 <89> 94 24 80 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 84 24 98 [ 1118.719113] RSP: 0018:ffff88018d795ed0 EFLAGS: 00010082 [ 1118.719119] RAX: 0000000000000000 RBX: 1ffff10031af2c57 RCX: 0000000000000000 [ 1118.719124] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff88f89118 [ 1118.719128] RBP: ffff88018d796260 R08: 0000000000000001 R09: 0000000000000001 [ 1118.719133] R10: fffffbfff11f11e4 R11: ffffffff88f88f23 R12: 0000000000000001 [ 1118.719137] R13: ffffffff88f89118 R14: ffff8801c543e1c0 R15: 0000000000000000 [ 1118.719142] FS: 00007ff0b007d7a0(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 1118.719146] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1118.719151] CR2: ffff88018d795ec8 CR3: 00000001b02a6000 CR4: 00000000001406e0 [ 1118.719155] DR0: 000000000000b8c4 DR1: 0000000000000000 DR2: 0000000000000000 [ 1118.719160] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1118.719162] Call Trace: [ 1118.719167] BUG: unable to handle kernel paging request at ffff88018d795ed0 [ 1118.719169] PGD b4e0067 P4D b4e0067 PUD 1b44b4063 PMD 18e0f6063 PTE 0 [ 1118.719182] BUG: unable to handle kernel paging request at ffff88018d790000 [ 1118.719184] PGD b4e0067 P4D b4e0067 PUD 1b44b4063 PMD 18e0f6063 PTE ffffffff88f92620 [ 1118.719199] BUG: unable to handle kernel paging request at ffff88018d790000 [ 1118.719201] PGD b4e0067 P4D b4e0067 PUD 1b44b4063 PMD 18e0f6063 PTE ffffffff88f92620 [ 1118.719215] BUG: unable to handle kernel paging request at ffff88018d790000 [ 1118.719217] PGD b4e0067 P4D b4e0067 PUD 1b44b4063 PMD 18e0f6063 PTE ffffffff88f92620 [ 1118.719231] BUG: unable to handle kernel paging request at ffff88018d790000 [ 1118.719233] PGD b4e0067 P4D b4e0067 PUD 1b44b4063 PMD 18e0f6063 PTE ffffffff88f92620 [ 1118.719246] PANIC: double fault, error_code: 0x0 [ 1118.719250] CPU: 1 PID: 12095 Comm: udevd Not tainted 4.18.0-rc4+ #138 [ 1118.719256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1118.719259] RIP: 0010:write_comp_data+0x0/0x70 [ 1118.719261] Code: fd ff ff 48 8b bd d0 fe ff ff e8 7b db 3d 00 e9 ad fc ff ff 4c 89 ef e8 ce da 3d 00 e9 76 fc ff ff e8 84 27 cb ff 90 90 90 90 <55> 65 4c 8b 04 25 40 ee 01 00 65 8b 05 8f e2 85 7e 48 89 e5 a9 00 [ 1118.719359] RSP: 0018:fffffe0000038000 EFLAGS: 00010002 [ 1118.719365] RAX: 0000000000000008 RBX: 0000000000000001 RCX: ffffffff87902c74 [ 1118.719370] RDX: 0000000000000073 RSI: 0000000000000020 RDI: 0000000000000001 [ 1118.719374] RBP: fffffe0000038030 R08: ffff8801c543e1c0 R09: ffffed003b5e43cf [ 1118.719379] R10: ffffed003b5e43d2 R11: ffff8801daf21e97 R12: ffffffff88868400 [ 1118.719383] R13: 0000000000000073 R14: 0000000000000001 R15: 0000000000000005 [ 1118.719389] FS: 00007ff0b007d7a0(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 1118.719393] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1118.719397] CR2: fffffe0000037ff8 CR3: 00000001b02a6000 CR4: 00000000001406e0 [ 1118.719402] DR0: 000000000000b8c4 DR1: 0000000000000000 DR2: 0000000000000000 [ 1118.719406] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1118.719408] Call Trace: [ 1119.797595] Shutting down cpus with NMI [ 1119.798225] Dumping ftrace buffer: [ 1119.798236] (ftrace buffer empty) [ 1119.798241] Kernel Offset: disabled [ 1120.861175] Rebooting in 86400 seconds..