pen(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@isdn, &(0x7f0000000080)=0x80, 0x800) bind$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x9, 0x6, 0x20, 0x1, 0x4, 0x3}, 0x400}, 0xa) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) 03:19:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:19:56 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\xf6', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 975.406785][T24679] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 975.414757][T24679] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f12faad16d4 [ 975.422731][T24679] R13: 00000000004bf49a R14: 00000000004d0e80 R15: 0000000000000005 [ 975.448187][T29797] binder: send failed reply for transaction 719, target dead 03:19:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000800000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x7, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x1, 0x0) write$tun(r3, &(0x7f0000001500)={@val={0x0, 0x6003}, @void, @ipv6={0x3, 0x6, "c8bfbc", 0x227e, 0x2b, 0xfffffffffffffffb, @mcast1, @empty, {[@hopopts={0x2f, 0x21, [], [@generic={0x9, 0x27, "f4f05b6c97169593a716d962b8ff71d237af476a6188c5ede5641473b7ddf35078bb7a4a72a8b3"}, @enc_lim={0x4, 0x1, 0x3ff}, @generic={0x10000, 0xbd, "1c03385f00af463347b4e5ef4ec67b53216b43750d56647919509e3b9c603b44819f135268ed1c4c7d1bac93d0876c4ee50619f23cfc01793890735430119b2933d8f8453f815308884c53dee90f5d1342fcd4e6cf249b0e642a1aef8de9e14becd4ccb22d0e3861ff3c8cd3c03457e00acd4577ac6cfa43fd28e640877e3ca5038749bca1c280ea9c9ea2bff0c1fff5cc6cf298080793e8de66a771608c61cffa000b13f4c2a3fd68a5a71d50c0232ff5d51c24b341779dc791f27096"}, @calipso={0x7, 0x10, {0x8, 0x2, 0x65, 0x9, [0x7ff]}}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x8, {0x0, 0x0, 0x40, 0x8}}]}], @icmpv6=@ndisc_rs={0x85, 0x0, 0x0, [], [{0x19, 0x19, "8c4f91551202ea5eded5b3aef5537af8ceb906ba886432c4c84e34fbc034be14a921429b9910bdc5f29778b77a67eda25959fcc49e4ceb388c585afca9fc501658726ab8d3e855d7c81aa1a49c8f56324a0377789ffa2af2fc773b640bf66fc5ba386597538bcaa2b8b7f106acc0888fdf7fcf2f05d78006ccfcd4dc615898b35defa4c9b614b0d54a21fa893831a4c92e409124eabaaa28d41f81a109c3a93b61a32cd8f46acde80adaf5f4d5501b1953272510cc501f247351d859f2bd701631ce0836fc30280b9e63"}, {0x5, 0x200, "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"}, {0x22, 0x200, "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"}, {0x18, 0x11, "d10f69679fe9b3a945e489e82bc5b069b5e7b5a16bd9f1cf6dd355a52ebfcbe1994db34491eb757ec41b0dd10005190fe088810e2d6383f2a8b463c0516182367f2b3e407a7edf6380816df503a8c4d3492a8ed0fda64663822c99b874199861c9ca669d6d1b20da062e604010ab02cc32b5c3203bcd5e9bc3a4bb60c52a4570435592060688350aa1a6e2d0"}]}}}}, 0x22aa) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6, 0x0) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 975.565330][T24837] binder: 24833:24837 ioctl c018620b 0 returned -14 03:19:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:19:56 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:19:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x400002, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000640)={0x1dc, r3, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x263}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffe1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcd}]}, @TIPC_NLA_BEARER={0x13c, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'bpq0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, [], 0x29}, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x100, @local, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6, @mcast1, 0x100000000}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7fff, @ipv4={[], [], @remote}, 0x73a}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xca6c}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @empty, 0x5c1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @rand_addr="a276e397bbd4ebc2432b3b57450eddb3", 0x100000000}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4}, 0x80) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x0, 0x7ff, 0x4, 0x80, 0x0, 0x3, 0x10800, 0x7, 0x85, 0x1000, 0x7, 0xffffffff, 0x3, 0x3ff, 0x80000001, 0x2, 0x3, 0x9, 0x7ff, 0x4, 0x8, 0x80000000, 0x101, 0x6, 0xfc, 0x3ba, 0x48ad3c39, 0x3, 0x6, 0x80, 0x0, 0x101, 0x2, 0x3, 0x3e0000000000000, 0x9, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000040), 0x9}, 0x0, 0x3f, 0x800, 0x7, 0xb, 0xa728, 0xab}, r5, 0x5, r4, 0x2) r6 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x3fffff) openat$random(0xffffffffffffff9c, &(0x7f0000000280)='/dev/urandom\x00', 0x400080, 0x0) getpeername$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000200)=0xe8) r9 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0xffffffff, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@broadcast, 0x4e21, 0x7, 0x4e22, 0x10001, 0xa, 0x80, 0xfc80a7dcbfc7e988, 0x89, r7, r8}, {0x9, 0xfff, 0x2000000000000, 0x2, 0x81, 0x4, 0xd615f48, 0x5}, {0x7, 0x0, 0xea, 0x1000}, 0x4, 0x6e6bb7, 0x0, 0x1, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, [], 0x20}, 0x4d4, 0x3b}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3501, 0x6, 0x3, 0xfffffffffffff001, 0x5b7, 0x1, 0x80000000}}, 0xe8) ioctl$UI_END_FF_UPLOAD(r9, 0x406855c9, &(0x7f0000000500)={0x5, 0x7fff, {0x52, 0x0, 0x800, {0x2, 0x9}, {0x3, 0xff}, @cond=[{0x9, 0xfff, 0x81, 0x8001, 0x200, 0x7}, {0x401, 0x1, 0x0, 0x8d5, 0x3, 0xfffffffffffffff8}]}, {0x55, 0x2c, 0x1, {0x2ba49b9a}, {0x0, 0x800}, @const={0x7, {0x8, 0x3, 0x8e50, 0xffff}}}}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) 03:19:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) prctl$PR_CAPBSET_READ(0x17, 0x25) 03:19:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00') r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:19:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:19:57 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:19:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:19:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ftruncate(r0, 0x81) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000340)={0x8000000, 0xffffffff80000000, 0x3}) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r5, 0x800, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = getpgid(r3) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000240)={0x1, 0x1000}, 0x2) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@ipv4={[], [], @empty}, @in6=@dev={0xfe, 0x80, [], 0x1b}, 0x4e20, 0x6, 0x4e22, 0x2, 0xa, 0x42fe28492b038811, 0x20, 0x2b, r9, r10}, {0x4, 0x2, 0xe880, 0x8, 0xe105, 0x100, 0x6, 0x4}, {0x200, 0x0, 0x2}, 0x5, 0x6e6bb1, 0x0, 0x1, 0x3, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x2b}, 0x4d4, 0xff}, 0x2, @in6=@rand_addr="f61ca870b15080a3968636fca5022ef4", 0x3504, 0x0, 0x1, 0xffff, 0x80000000, 0x1, 0x36}}, 0xe8) fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x1, 0x2, 0x1, 0x5, r7}) ioctl$LOOP_SET_CAPACITY(r8, 0x4c07) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video36\x00', 0x2, 0x0) 03:19:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000040)={0x7, 0x5, 0x2, 0x7f, 0x1f, 0x4, 0x16, "41257a9a45339e528b5857964ceb68421cde9280", "a49c0e27ec6dcd3ff82b069cc4e2ee07d1d24212"}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000300)={"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"}) 03:19:57 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000240)=""/130) r3 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 976.329884][T29797] binder: release 24833:24848 transaction 723 out, still active [ 976.345078][T24901] binder: send failed reply for transaction 723, target dead 03:19:57 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000030000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000240)=@req={0x28, &(0x7f0000000080)={'batadv0\x00', @ifru_settings={0x1, 0x9, @te1=&(0x7f0000000040)={0xc000, 0x0, 0xffffffffffff0000}}}}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 976.485279][T24917] binder: 24884:24917 ioctl c018620b 0 returned -14 03:19:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0xffffffff, 0x3, 0xf21, 0x9, 0x0, 0x4, 0x0, 0x0, 0x7fff, 0xf6ef, 0x0, 0x34, 0x8, 0x2, 0x7fb, 0xb2, 0x2, 0x101, 0x80, 0x3, 0x1f, 0x10000, 0xfff, 0x6, 0x9, 0xfffffffffffffff8, 0x1e5, 0x6, 0xa0, 0x5, 0x101, 0x5a39, 0x0, 0x5, 0x5, 0x4dff, 0x0, 0xf03, 0x7, @perf_config_ext={0x0, 0x7}, 0x10, 0x80000001, 0x1, 0x3, 0x200, 0x80000001, 0x8}, r3, 0xb, r2, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r4, 0x8008700b, &(0x7f0000000040)) 03:19:57 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:19:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:19:57 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @local}, 0x205, 0x0, 0x0, 0x0, 0x4, 0x0, 0x81, 0x7fff, 0x79c000000}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r1, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x80) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)) 03:19:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) [ 977.272732][T25148] binder_alloc: binder_alloc_mmap_handler: 24884 20001000-20004000 already mapped failed -16 [ 977.284103][T24987] binder: 24884:24987 ioctl c018620b 0 returned -14 [ 977.285561][T25148] binder: BINDER_SET_CONTEXT_MGR already set [ 977.300328][T25148] binder: 24884:25148 ioctl 40046207 0 returned -16 [ 977.300390][T25149] binder_alloc: 24884: binder_alloc_buf, no vma [ 977.313429][T25149] binder: 24884:25149 transaction failed 29189/-3, size 24-8 line 3147 03:19:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:19:58 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:19:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000007000000000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:19:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:19:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000040)=0x7ff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000700)) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@file_umask={'file_umask'}}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYBLOB="dd0000003d6186ccd52a3359d68be91a3470b8fc67953d628654a4c3c002140250c2360d7787a9742257f704e71f4d07d558b6a93cdf1c75a984847ec129df56ae3fe7528bfaccba4f9bcbb4e8ed3498f65040c9e00fabfcbc2667770109e7b44cda35e54aac0e599254518781f1a24113f428db4f6e2435c26dc3205ca3cc6ee5fca71026ba9a8831108cac41ae6e885756d0fea66502b2cd1ca358f2083adc668c5d5f3e7b42c26136e087a90eed8319ea7a48ba1bbefa2f7dbaf460648c2f52a098f65e2d7d46d6d8d6a27e34d50e8f1ea7a0436f232291a69f4642f119645f6072e87f5c6868db729c0fc10af68166897bf4d67a84c4"], &(0x7f00000000c0)=0xe5) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000500)={r3, 0xce, "28ce24c5a5443bf98721d3a71fb44ef7079dff31b47707356fc9d61da4e2d98352cc193f07d15138345ed9f173e6cce5642d236cd0cc319a1f1685d779743a8d713d8a3ccb6b68a971e0103533ff63dfc42baef56a1436be960f7856d188e0de64ba91fa7084a545ac54252f2c2cde42d8b4c6678a0f83efbee05acf66514d6a89a473b0efa67c0c82076e4deffc4cbbcca04a7ceb0f4e2c6abcb73ef0707e4acfd4ccf82480cdedcfa03df8035f5d7d8dd2a7ab81819123c70b16677ce406765afa21e02de1d1063f14d989cd07"}, &(0x7f0000000100)=0xd6) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)) 03:19:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0xc40, 0x0) ioctl$RTC_WIE_ON(r2, 0x700f) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{0x1ff, 0x8, 0x0, 0xa1af, 0x57b, 0xfffffffffffffff7, 0x2, 0x8, 0x8, 0x7fffffff, 0x755b, 0x101, 0x6}, {0xffffffffffffff81, 0x0, 0x18, 0x2, 0x3, 0x153000000, 0x7, 0x6fa, 0x1, 0x3, 0x1, 0x9, 0x6}, {0x3, 0x1, 0x9, 0x8, 0x9, 0x80, 0x1ff, 0x6, 0x9, 0x3, 0xbfa, 0x2, 0x80}], 0x100000}) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f00000001c0)=0x800) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000200)=0xfa, 0x4) [ 977.322257][T24901] binder: send failed reply for transaction 727 to 24884:24987 [ 977.330427][T24901] binder: undelivered TRANSACTION_ERROR: 29189 [ 977.418206][T25151] hfs: unable to parse mount options 03:19:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000e5018431216963e454f989bad93f76cef2e44a278413ea3769fa80aa3845b6c608958fd54d0f492296c5d54c7e02be69d1993f7d3c7862ffc3d61a9fe6a54c02af81972b3c9d33bb920f38cd8d79c37fa7b6f5460c25cdbb992f4b2be077ddead21f900f"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 977.484663][T25173] binder: 25162:25173 ioctl c018620b 0 returned -14 [ 977.535696][T25168] hfs: unable to parse mount options 03:19:58 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:19:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:19:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x105001, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x210c00) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) 03:19:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x3}) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x81, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={r2, 0x80000, r3}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syncfs(r0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)) 03:19:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) [ 978.252614][T25220] binder_alloc: binder_alloc_mmap_handler: 25162 20001000-20004000 already mapped failed -16 [ 978.263171][T25178] binder: 25162:25178 ioctl c018620b 0 returned -14 [ 978.264353][T25220] binder: BINDER_SET_CONTEXT_MGR already set [ 978.276202][T25220] binder: 25162:25220 ioctl 40046207 0 returned -16 [ 978.281636][T25221] binder_alloc: 25162: binder_alloc_buf, no vma [ 978.289186][T25221] binder: 25162:25221 transaction failed 29189/-3, size 24-8 line 3147 03:19:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:19:59 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:19:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:19:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000240)={0x43, 0x9, 0x2, {0x1, 0xd7, 0x7fffffff, 0x0, 0x7, 0x8, 0x6, 0x100000001, 0xd1e7}}, 0x43) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000140)={r0, r2}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:19:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x801, 0x0) mount$9p_virtio(&(0x7f0000000000)='/dev/kvm\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x20, &(0x7f0000000380)={'trans=virtio,', {[{@cache_fscache='cache=fscache'}, {@afid={'afid', 0x3d, 0x5}}, {@access_uid={'access', 0x3d, r2}}], [{@fsuuid={'fsuuid', 0x3d, {[0x39, 0x3f, 0x61, 0x34, 0x0, 0x37, 0x35, 0x3f], 0x2d, [0x34, 0x0, 0x30, 0x36], 0x2d, [0x0, 0x61, 0x38, 0x3f], 0x2d, [0x37, 0x36, 0x7f], 0x2d, [0x77, 0x0, 0x75, 0x31, 0x63, 0x64, 0x73]}}}, {@fsname={'fsname', 0x3d, '/dev/kvm\x00'}}, {@uid_eq={'uid', 0x3d, r3}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@pcr={'pcr', 0x3d, 0x1e}}, {@subj_role={'subj_role', 0x3d, '/dev/kvm\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) 03:19:59 executing program 3: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) fcntl$setflags(r0, 0x2, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)) [ 978.299533][ T22] binder: release 25162:25173 transaction 732 out, still active [ 978.316259][ T22] binder: send failed reply for transaction 732, target dead 03:19:59 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 978.476515][T25245] binder: 25237:25245 ioctl c018620b 0 returned -14 03:19:59 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x7, 0x64c2, 0x8, 0x81, 0x0, 0x346, 0x0, 0x1, 0x96b, 0x7, 0x8, 0x1, 0x7, 0x3, 0x6, 0x40, 0x3, 0x7, 0x949, 0x6c3b, 0x1, 0x3, 0x5, 0x3, 0x700ce2c8, 0x0, 0x100, 0x1, 0xfffffffffffffff7, 0x1ff, 0x6, 0xd0, 0x751, 0x1, 0x5, 0x8, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x2000, 0x7, 0x22a9b6e6, 0x7, 0x5, 0x5, 0x1ff}, r0, 0x2, 0xffffffffffffff9c, 0xb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)) 03:19:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:19:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="390000000000000000000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x10000000000, 0x80) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) 03:19:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0xfffffffffffffffd}) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:19:59 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x2, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:19:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:19:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xbde, 0x101080) write$capi20_data(r1, &(0x7f0000000240)={{0x10, 0x0, 0x41, 0x0, 0xfffffffffffffffe, 0xffff}, 0x5e, "353a0fd2ff7bbd02206e975aa00712d2e1a721caa57068532b3738782d46b2390e9d38d5a2f0c14e9ca726029a5fa9a9cc772e3dd0ae766921f15cc936a0127df06502433b6e2738e16a41c8aa9cb058454ef13c702b5bb24589677cccb5"}, 0x70) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000140)={r0, r2}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 979.244765][T25293] binder_alloc: binder_alloc_mmap_handler: 25237 20001000-20004000 already mapped failed -16 [ 979.255370][T25249] binder: 25237:25249 ioctl c018620b 0 returned -14 [ 979.256931][T25293] binder: BINDER_SET_CONTEXT_MGR already set [ 979.269372][T25293] binder: 25237:25293 ioctl 40046207 0 returned -16 [ 979.274411][T25294] binder_alloc: 25237: binder_alloc_buf, no vma [ 979.282427][T25294] binder: 25237:25294 transaction failed 29189/-3, size 24-8 line 3147 03:20:00 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x3, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:00 executing program 4: creat(&(0x7f0000000040)='./file0\x00', 0x1) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000000c0)={0xfd}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40000, 0x0) write$binfmt_elf32(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x981) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000140)=0xfff, 0x1) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) bind$rose(r2, &(0x7f00000001c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000b80), &(0x7f0000000080)=0x4) socket$l2tp(0x18, 0x1, 0x1) prctl$PR_GET_FP_MODE(0x2e) 03:20:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0xffffffffffffff5d) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x200000, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000080)) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000040)={0x3, 0x2, 0x405}) 03:20:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 979.291397][T29797] binder: release 25237:25249 transaction 737 out, still active [ 979.306122][T29797] binder: send failed reply for transaction 737, target dead 03:20:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000040)={0x0, 0x0, {0x8f, 0xb85, 0x2017, 0x2, 0x5, 0x0, 0x1, 0x2}}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) 03:20:00 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x4, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 979.484739][T25318] binder: 25308:25318 ioctl c018620b 0 returned -14 03:20:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)=0x0) r3 = getpgid(r2) kcmp(r2, r3, 0x0, r0, r0) r4 = socket$kcm(0x29, 0x2000000000000005, 0x0) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000001700)=[{&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001500)="c7812a8bcf4700b5286f9050f5e72726aca41219a571c2fcf5f3176722132638f0b6e5fd259fc1c032788bce460c0b8b82e2fd5c78f86a6023665506489052dd4b45825a4066b3cf9c3149945077769fe2d2c1be79b11a45aedc2869e6ded3ed94a6a564fb829ebfacf827ea006a461c41daab47d91594c748c23be2ade8cba8c9bed6a97fa8ce260d5f1fc08f0dbc135caa6c2e1b018d58", 0x98}, {&(0x7f00000015c0)="7792bb00b818811a8deaec856405d4595fce4c0e90f9f0f048c55609ed0fda34ae712aaf363baf5085862b2f87b1f89d75fd69f52197e04ac7295c19eda9877f8d2c32281b39fcbed9e47d636e", 0x4d}, {&(0x7f0000001640)="50441611d9db4edaaf872ac1c54fe3d30bd9d6bf349e944cc1d6bda060d97c4150dbb2b34953bf690655fbe92d00bbdfa10cf03e113653969836c2ffc6b67eb6b7d85640dd99acef9001e95fccc01bcb5d784dc8", 0x54}], 0x4, &(0x7f00000016c0)=[@rights={0x18, 0x1, 0x1, [r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r1, r4]}], 0x38, 0x8001}], 0x1, 0xc810) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$VIDIOC_G_CROP(r6, 0xc014563b, &(0x7f0000000300)={0xc, {0x4, 0x401, 0x9, 0x5}}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) iopl(0x401) write$binfmt_script(r4, &(0x7f0000001740)={'#! ', './file0', [{0x20, 'ppp1md5sumkeyring\\wlan1wlan0/eth0vmnet0wlan1vmnet0'}, {0x20, '/proc/capi/capi20ncci\x00'}, {0x20, 'securityGPL[system'}, {}], 0xa, "e8d59043973d1c65a5952549265218065f7a43d16917c0e6b59cb0dc883bad1390186163c5870855272bb705723c1519461022dd6d0f16f4161029fb902451de8465298379038e6eea3b00ab4fe4b2d0d6a347bf4577d40232a61db3f76107d511aa8f7300ffe3457145d8f727b2105361ec2ae8347e768afa7df0dec2d05b9c723787e10dccb2606011faae716e5cd5080c0f628c1cf138ebbc63083ca42de0f1"}, 0x10a) write$apparmor_exec(r0, &(0x7f0000000040)={'stack ', 'syzkaller\x00'}, 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@empty, @multicast2}, &(0x7f0000000240)=0xc) 03:20:00 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@can={0x1d, 0x0}, &(0x7f0000000080)=0x80) connect$can_bcm(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f00000000c0)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)) 03:20:00 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x5, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x10000004e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180600000000000000000000001000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000040)=r0) [ 980.260967][T25465] binder_alloc: binder_alloc_mmap_handler: 25308 20001000-20004000 already mapped failed -16 [ 980.271525][T25323] binder: 25308:25323 ioctl c018620b 0 returned -14 [ 980.273145][T25465] binder: BINDER_SET_CONTEXT_MGR already set [ 980.285170][T25465] binder: 25308:25465 ioctl 40046207 0 returned -16 [ 980.285233][T25466] binder_alloc: 25308: binder_alloc_buf, no vma [ 980.298345][T25466] binder: 25308:25466 transaction failed 29189/-3, size 24-8 line 3147 03:20:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)) 03:20:01 executing program 3: keyctl$join(0x1, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@tipc, &(0x7f0000000080)=0x80, 0x80800) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xffffffff, @dev={0xfe, 0x80, [], 0x1e}, 0x1}, 0x1c) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000100)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x40000000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000001c0)="0c30b4c4bd0b215e79d92eeeab79292251e36a15ced349d5fe2d097bf9a86786fcb09bfaff35458aefbb8f93125c04efa86293d7603334e502eec0e517036e25bffad16306b4c0a23d8945044d51181c0eb60561f0f5ba3976ab0a42cd8e2370900fbacf40bf9ee9ed20681ee484d54353889de3d6bb0415ec3cb610b5a3120a3d7cfbbb001fe92f3d127ff084e2c8e086", 0x91) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) 03:20:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000080)) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000240)={'filter\x00'}, &(0x7f0000000040)=0x44) 03:20:01 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x300, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 980.307078][T29797] binder: release 25308:25318 transaction 742 out, still active [ 980.314898][T29797] binder: send failed reply for transaction 742, target dead 03:20:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) getsockname$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f0000000240)=0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000037af9301b79e1f354bfa6248a75d00001000769b662e59f61fb3e21003a997dfcaafc265983289c76e1752906396e7467e3faeee0ab4b0a8a8f7389a7f6169c5928faed31afcc4ef5529839f951d86f714d859bb6e1ee456d9cf0740ad143fcec04247e5ed1a0aa4af6eca34e3ba4d3a87"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) poll(&(0x7f0000000040)=[{r0, 0x2000}, {r2, 0x2200}, {r1, 0x200}], 0x3, 0x100000001) 03:20:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x8}) [ 980.489851][T25543] binder: 25495:25543 ioctl c018620b 0 returned -14 03:20:01 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x500, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20000, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000040)={0x2c, 0x4, 0x0, {0x3, 0x81, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) 03:20:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000d0000"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 981.269858][T25629] binder_alloc: binder_alloc_mmap_handler: 25495 20001000-20004000 already mapped failed -16 [ 981.280863][T25597] binder: 25495:25597 ioctl c018620b 0 returned -14 [ 981.282071][T25629] binder: BINDER_SET_CONTEXT_MGR already set [ 981.293958][T25629] binder: 25495:25629 ioctl 40046207 0 returned -16 [ 981.299489][T25630] binder_alloc: 25495: binder_alloc_buf, no vma [ 981.307175][T25630] binder: 25495:25630 transaction failed 29189/-3, size 24-8 line 3147 03:20:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) 03:20:02 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x1000000, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800008000000000aac9d7000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet(0x2, 0x7, 0x8) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) socketpair(0x11, 0x0, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x1, 0xffffffffffffffc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x57, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e24, @loopback}}}, 0x84) [ 981.316173][ T22] binder: release 25495:25597 transaction 747 out, still active [ 981.324061][ T22] binder: send failed reply for transaction 747, target dead 03:20:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000080)={0x2}) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000140)={r0, r2}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 981.522684][T25693] binder: 25641:25693 ioctl c018620b 0 returned -14 03:20:02 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x2000000, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb06, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x5}) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) accept4$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c, 0x800) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 03:20:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000080)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r6 = getgid() r7 = getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x1}, [{0x2, 0x3, r3}], {0x4, 0x4}, [{0x8, 0x0, r4}, {0x8, 0x1, r5}, {0x8, 0x4, r6}, {0x8, 0x0, r7}, {0x8, 0x4, r8}], {0x10, 0x1}, {0x20, 0x3}}, 0x54, 0x1) 03:20:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 982.217935][T25800] binder_alloc: binder_alloc_mmap_handler: 25641 20001000-20004000 already mapped failed -16 [ 982.228553][T25760] binder: 25641:25760 ioctl c018620b 0 returned -14 [ 982.232196][T25800] binder: BINDER_SET_CONTEXT_MGR already set [ 982.241387][T25800] binder: 25641:25800 ioctl 40046207 0 returned -16 [ 982.241440][T25801] binder_alloc: 25641: binder_alloc_buf, no vma [ 982.254473][T25801] binder: 25641:25801 transaction failed 29189/-3, size 24-8 line 3147 03:20:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setfsgid(r2) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x400, 0x40000) sendmsg$nl_crypto(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=@del={0x128, 0x11, 0x200, 0x70bd27, 0x25dfdbfd, {{'ecb-des3_ede-asm\x00'}, [], [], 0x2000, 0x2000}, [{0x8, 0x1, 0x10001}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x100000001}, {0x8, 0x1, 0x5}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0xfffffffffffffffa}, {0x8, 0x1, 0xfffffffffffffc01}]}, 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x800) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) 03:20:03 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x3000000, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'bond_slave_0\x00', 0x1}) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000140)={r0}) 03:20:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x8}) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x100000000, 0x0) ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000080)={0x37, "bc5acbdbe5b482d98c5805d6760d3d53a35bb3cb09a619191bdddf88b74dfb50f00517b86f18a469456e5c3030658e576a4a68acd6b6e3bf14b80bea1ee3dd63f93f48a8c4606a950a62e085605a8732a5531d699479b64e4a366e941deb9fedf7eab5761ed634f3be610ea5f2188d58b765aec1a16af6555fe5f495ed94f327"}) fcntl$setlease(r0, 0x400, 0x2) [ 982.263279][T29797] binder: send failed reply for transaction 752 to 25641:25760 [ 982.271125][T29797] binder: undelivered TRANSACTION_ERROR: 29189 03:20:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x30000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000540)=0xe8) sendmsg$nl_route(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=@ipv4_deladdr={0x88, 0x15, 0x200, 0x70bd2a, 0x25dfdbfc, {0x2, 0x1, 0x8, 0xc8, r2}, [@IFA_LABEL={0x14, 0x3, 'veth1_to_bond\x00'}, @IFA_LABEL={0x14, 0x3, 'gre0\x00'}, @IFA_FLAGS={0x8, 0x8, 0x14}, @IFA_BROADCAST={0x8, 0x4, @empty}, @IFA_FLAGS={0x8}, @IFA_FLAGS={0x8, 0x8, 0x21}, @IFA_CACHEINFO={0x14, 0x6, {0xd402, 0x9, 0x9, 0x3}}, @IFA_LABEL={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4080}, 0x40080) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000000000000000750000"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r4 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000140)={r0, r3}) [ 982.457929][T25845] binder: 25810:25845 ioctl c018620b 0 returned -14 03:20:03 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x4000000, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@empty, @in6=@loopback, 0x4e21, 0x18b333a9, 0x4e23, 0x2, 0xa, 0x20, 0x20, 0x7f, r3, r4}, {0x3, 0x4, 0x9, 0x5, 0x8000, 0x9, 0x9e, 0x200}, {0x5, 0x7f, 0x2, 0x9}, 0x80000001, 0x6e6bb0, 0x2, 0x0, 0x0, 0x2}, {{@in6=@mcast2, 0x4d4}, 0xa, @in=@empty, 0x0, 0x0, 0x3, 0x10001, 0x6d03f3b1, 0x7, 0x9}}, 0xe8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000540)={0x0, 0xfffffffffffffff9}, &(0x7f0000000580)=0x8) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000600)=0xffff) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000640)) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000005c0)={r6, 0x80}, 0x8) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000004c0)={@mcast2, @local, @empty, 0x6, 0x5c6, 0xffffffffffffff81, 0x100, 0x24000, 0x300000, r5}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) 03:20:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000b00000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0xef2556dcfb635af2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000300)=0x9) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f00000003c0)={0x0, @bt={0xcb, 0xfffffffffffffa73, 0x0, 0x3, 0x8001, 0x7b78, 0xbb2, 0xffffffffffff0000, 0xfffffffffffff001, 0x8, 0x3, 0x4, 0x7, 0x4, 0x1c, 0x8}}) r3 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000140)={r0, r1}) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v1={0x1000000, [{0x9, 0x400}]}, 0xc, 0x2) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000240)={{0xff, @remote, 0x4e20, 0x2, 'rr\x00', 0x3b, 0x2, 0x6a}, {@local, 0x4e21, 0x4, 0x4, 0x0, 0x4}}, 0x44) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) [ 982.843069][T25951] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20000 [ 982.889059][T25957] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20000 [ 983.212243][T25964] binder_alloc: binder_alloc_mmap_handler: 25810 20001000-20004000 already mapped failed -16 [ 983.222770][T25903] binder: 25810:25903 ioctl c018620b 0 returned -14 [ 983.223908][T25964] binder: BINDER_SET_CONTEXT_MGR already set [ 983.239052][T25964] binder: 25810:25964 ioctl 40046207 0 returned -16 [ 983.239128][T25965] binder_alloc: 25810: binder_alloc_buf, no vma [ 983.252160][T25965] binder: 25810:25965 transaction failed 29189/-3, size 24-8 line 3147 03:20:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:04 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x5000000, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x103200, 0x0) setsockopt$inet6_buf(r2, 0x29, 0xcf, &(0x7f0000000040)="5d2ac5ec7c981d534e989aac62b38db382149ec6f1f8259d878277c990baf08bcbd7e09e8bc03372132bf69851f93246c1634858591ff15e34055fbc469c66756207172fa649ac56f3b2d79cb358ab49b69f032ba312057075e66605fd248af40cdcb792c9e65640b6f4662abb0a55d9bb7789b5ff196044225633a2f894e07d74998ff6af7c6a4a3f18f2bfb9db07c6c612f8a57a2f262f8c4eb49d040f", 0x9e) 03:20:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) prctl$PR_GET_DUMPABLE(0x3) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) 03:20:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$P9_RFSYNC(r2, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7) [ 983.261086][T29797] binder: send failed reply for transaction 757 to 25810:25845 [ 983.470615][T25997] binder: 25977:25997 ioctl c018620b 0 returned -14 03:20:04 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0xf6ffffff, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b5a9000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x22000, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000240)=""/214) [ 983.573363][T26077] binder: BINDER_SET_CONTEXT_MGR already set [ 983.585160][T26077] binder: 25977:26077 ioctl 40046207 200003c0 returned -16 03:20:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xffffffffffffffff, 0x2000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000400}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x104, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xf2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xb6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="37bb93be6c0652ce66774b725667a4ed"}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) 03:20:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x20) 03:20:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:04 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0xfffffff6, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 984.227420][T26129] binder_alloc: binder_alloc_mmap_handler: 25977 20001000-20004000 already mapped failed -16 [ 984.246310][T26077] binder: 25977:26077 ioctl c018620b 0 returned -14 [ 984.246370][T26129] binder: BINDER_SET_CONTEXT_MGR already set [ 984.263539][T26129] binder: 25977:26129 ioctl 40046207 0 returned -16 [ 984.292292][T26077] binder: BINDER_SET_CONTEXT_MGR already set [ 984.302144][T26130] binder_alloc: 25977: binder_alloc_buf, no vma [ 984.306372][T26077] binder: 25977:26077 ioctl 40046207 200003c0 returned -16 [ 984.308652][ T22] binder: release 25977:26077 transaction 762 out, still active 03:20:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x4d085817, 0x10001}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000240)={r2, @in={{0x2, 0x4e22, @multicast1}}, [0x7, 0x5, 0x9, 0x7, 0x3, 0x80, 0xb799, 0x6, 0x3ff, 0x1, 0x4, 0xc7c, 0x400, 0x1, 0x6]}, &(0x7f00000003c0)=0x100) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r4 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000140)={r0, r3}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:05 executing program 4: 03:20:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:05 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x1000000000000, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) modify_ldt$read(0x0, &(0x7f0000000000)=""/220, 0xdc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @remote}}, [0x9, 0x9, 0x1ff, 0x4, 0x3, 0x2, 0xfffffffffffffffb, 0x4, 0x81, 0x0, 0x6, 0x5, 0xffffffffffffff58, 0x8000, 0x7]}, &(0x7f0000000300)=0x100) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000340)={r3, 0xfffffffffffffffd}, 0x8) [ 984.341327][T26130] binder: 25977:26130 transaction failed 29189/-3, size 24-8 line 3147 [ 984.344198][ T22] binder: send failed reply for transaction 762, target dead 03:20:05 executing program 4: 03:20:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e22, @empty}, 0x10) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x4200, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000240)) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x232240, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r3 = socket(0x10, 0x800000000000802, 0x0) write(r3, &(0x7f0000000000)="240000001a0025f00485bc04fef7001c0a0b49ffed000000800008000800100001000000", 0x24) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r5 = socket$kcm(0x29, 0x3fffffffe, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000140)={r0, r4}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 984.514711][T26189] binder: 26169:26189 ioctl c018620b 0 returned -14 03:20:05 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x100000000000000, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) r3 = dup2(r1, r1) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) [ 984.594342][T26234] binder: release 26169:26234 transaction 767 out, still active 03:20:05 executing program 4: 03:20:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 985.301559][T26383] binder_alloc: binder_alloc_mmap_handler: 26169 20001000-20004000 already mapped failed -16 [ 985.312122][T26234] binder: 26169:26234 ioctl c018620b 0 returned -14 [ 985.314218][T26383] binder: BINDER_SET_CONTEXT_MGR already set [ 985.325780][T26383] binder: 26169:26383 ioctl 40046207 0 returned -16 [ 985.325837][T26384] binder_alloc: 26169: binder_alloc_buf, no vma [ 985.340190][T26384] binder: 26169:26384 transaction failed 29189/-3, size 24-8 line 3147 03:20:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:06 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x200000000000000, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast2}, 0xfffffffffffffde0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000040000000200000000000000950000000000000094d749ff58221fd7b54ed4b1edf6633a14db8b628881275e343232"], &(0x7f00000000c0)='syzkaller\x00', 0xffffffffffffffff, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x4000, 0x0) bind$ax25(r3, &(0x7f0000000180)={{0x3, @bcast, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @bcast, @null, @default, @null, @bcast]}, 0x48) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x40, 0x5, 0x8, 0x1, 0x5, 0x7, 0x0, {0x0, @in6={{0xa, 0x4e21, 0x1, @remote, 0x100}}, 0x6, 0x6, 0xff, 0xfffffffffffffffd, 0x401}}, &(0x7f0000000040)=0xb0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000480)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000440)={r4, 0x4, 0x7, [0x8, 0x10, 0xb2e9, 0x1f, 0x3, 0x4, 0x9]}, 0x16) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:06 executing program 4: 03:20:06 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)) 03:20:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 985.349245][T29797] binder: send failed reply for transaction 767, target dead 03:20:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fchmodat(r1, &(0x7f0000000080)='./file0\x00', 0x0) read(0xffffffffffffffff, 0x0, 0x0) 03:20:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:06 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101000, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)="b9200a8522f6dc80aae44cb7e897ff200ae2bb2fd23c68ecf94cc4709d37134e0255167b5cf98b9720aaf658987eaed0316d9c233f961d892f091b5785e37b87fab5251a8c6416981f50d6c2c73a2bc3a21525fd8bbfd08f37e3308fc64df5ff58896a7578e92d6349fc58efbe5223a23b2bc01af8e06247e33a462f64775fb4554725842cf2b681891a03b9122dfc72094c56674a", 0x95}], 0x1, 0x0, 0x0, 0x4040800}, 0x40) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)) [ 985.530180][T26405] binder: 26400:26405 ioctl c018620b 0 returned -14 03:20:06 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x300000000000000, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000140)={r0, r2}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:06 executing program 4: sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x40010) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xbd1b) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_extract_tcp_res$synack(&(0x7f0000001040), 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x20000081) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x3, 0xfffffffffffffff8}, &(0x7f0000000400)=0x8) [ 985.751304][T26424] Unknown ioctl 1074025828 [ 985.786153][T26430] Unknown ioctl 1074025828 [ 986.306784][T26413] binder_alloc: binder_alloc_mmap_handler: 26400 20001000-20004000 already mapped failed -16 [ 986.318038][T26413] binder: 26400:26413 ioctl c018620b 0 returned -14 [ 986.325579][T26438] binder: BINDER_SET_CONTEXT_MGR already set [ 986.332067][T26438] binder: 26400:26438 ioctl 40046207 0 returned -16 [ 986.339205][T26439] binder_alloc: 26400: binder_alloc_buf, no vma [ 986.345764][T26439] binder: 26400:26439 transaction failed 29189/-3, size 24-8 line 3147 03:20:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:07 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x400000000000000, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x501000, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f6669a17030"], 0x10) 03:20:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = socket$kcm(0x29, 0x2000000000000005, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getdents(r2, &(0x7f00000002c0)=""/238, 0xee) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x7}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000280)={r3, 0x7fffffff}, 0x8) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x4002) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000140)={r0}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 986.354714][ T22] binder: release 26400:26405 transaction 772 out, still active [ 986.365535][ T22] binder: send failed reply for transaction 772, target dead [ 986.498923][T26447] QAT: Invalid ioctl [ 986.546920][T26458] QAT: Invalid ioctl 03:20:07 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x500000000000000, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 986.607485][T26459] binder: 26455:26459 ioctl c018620b 0 returned -14 03:20:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000e4e9718486cbd93e7a62ce76986677e08531c7405011ec51e2574cd0610806a07024c404971e17c709413cb2e74666a86c"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) clock_settime(0x3, &(0x7f0000000040)={0x77359400}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) fcntl$dupfd(r0, 0x406, r1) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 986.742330][T26464] binder: BINDER_SET_CONTEXT_MGR already set [ 986.763335][T26464] binder: 26455:26464 ioctl 4018620d 200003c0 returned -16 03:20:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x1, r2}) 03:20:07 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0xf6ffffff00000000, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x88c1, 0x44) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000240)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, @in6={0xa, 0x4e20, 0xd80d, @ipv4={[], [], @rand_addr=0x7fff}, 0x3b07}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e21, 0x7ff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, @in6={0xa, 0x4e20, 0xfff, @loopback, 0x8}], 0x94) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000140)={r0, r2}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0x4}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000200)={r2, 0x98, "6756bf2e5815f226faf7a8548df5ca2327a9540875b221b5e530956c0c4156f95e8c259d1a06a826666b53f7886eb7f9dda448750792e760505770297a8940777fab36077df74d29170bb1cf515aa592e3a9529b24f0a6cb7355719390465eab76a03ad8e8636b039adfb8bbbe391c9702abcd3b3dd2cadeee90dfb1715d6c5e59afe62687bf63fa21539bc7b23b226e81f70b9e4ca9b7be"}, &(0x7f0000000300)=0xa0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x40) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)={0x2000}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000040)={0x4, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(r4, 0xc0106438, &(0x7f0000000080)={0x3, r5}) [ 987.332603][T26511] binder_alloc: binder_alloc_mmap_handler: 26455 20001000-20004000 already mapped failed -16 [ 987.343356][T26464] binder: 26455:26464 ioctl c018620b 0 returned -14 [ 987.351185][T26511] binder_alloc: 26455: binder_alloc_buf, no vma [ 987.355547][T26464] binder: BINDER_SET_CONTEXT_MGR already set [ 987.358540][T26511] binder: 26455:26511 transaction failed 29189/-3, size 24-8 line 3147 [ 987.364143][T26464] binder: 26455:26464 ioctl 40046207 0 returned -16 03:20:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:08 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x2) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:08 executing program 4: sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x40010) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xbd1b) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_extract_tcp_res$synack(&(0x7f0000001040), 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x20000081) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x3, 0xfffffffffffffff8}, &(0x7f0000000400)=0x8) 03:20:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1806ec751863fb9111"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) readahead(r3, 0x8, 0x6) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000040)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) r6 = getgid() ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0) recvmsg(r3, &(0x7f0000002840)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000000200)=""/140, 0x8c}, {&(0x7f0000000300)=""/108, 0x6c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/71, 0x47}, {&(0x7f0000001400)}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/149, 0x95}, {&(0x7f0000002500)=""/72, 0x48}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/75, 0x4b}], 0xa, &(0x7f0000002780)=""/189, 0xbd}, 0x42) connect$pppoe(r3, &(0x7f00000028c0)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'lapb0\x00'}}, 0x1e) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001400)='/dev/vsock\x00', 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000002880)={'vcan0\x00', r4}) fchown(r2, r5, r6) [ 987.378733][T29797] binder: release 26455:26459 transaction 777 out, still active [ 987.379495][T26511] binder: BINDER_SET_CONTEXT_MGR already set [ 987.393221][T26511] binder: 26455:26511 ioctl 4018620d 200003c0 returned -16 [ 987.393947][T29797] binder: send failed reply for transaction 777, target dead 03:20:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x101000, 0x0) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 987.533429][T26528] binder: 26526:26528 ioctl c018620b 0 returned -14 [ 987.546182][T26523] Unknown ioctl 35123 [ 987.595680][T26533] Unknown ioctl 35123 03:20:08 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x3) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x121000, 0x100) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000040)={0x1, 0x2}, 0x2) 03:20:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) mq_open(&(0x7f0000000280)='/dev/audio\x00', 0x40, 0x80, &(0x7f00000002c0)={0x1, 0xe0, 0x2, 0xc906, 0xffffffffffffffff, 0x7ff, 0x5, 0x6}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400000, 0x0) modify_ldt$write2(0x11, &(0x7f0000000240)={0xfdac, 0x20000800, 0xffffffffffffffff, 0x10001, 0x53b2, 0x4000000000000000, 0xfffffffffffffffd, 0x6, 0x100, 0x4}, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000080)={0x4, 0x0, 0x3013, 0x7cd0b68e, 0xa4f, 0x5, 0x401}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 988.310354][T26573] binder_alloc: binder_alloc_mmap_handler: 26526 20001000-20004000 already mapped failed -16 [ 988.321003][T26539] binder: 26526:26539 ioctl c018620b 0 returned -14 [ 988.322640][T26573] binder: BINDER_SET_CONTEXT_MGR already set [ 988.333998][T26573] binder: 26526:26573 ioctl 40046207 0 returned -16 [ 988.335374][T26574] binder_alloc: 26526: binder_alloc_buf, no vma [ 988.347858][T26574] binder: 26526:26574 transaction failed 29189/-3, size 24-8 line 3147 03:20:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:09 executing program 4: 03:20:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x100, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r3, &(0x7f0000000240)="678d4149fa23f47f2f88a010197abeac2fddecf05fa91932c0c169cb291cb61bed48a659dc2dcd0f1517a03a2f67e1bba37df5db31358bd9809f8113329c72e1dd4f030987fc52c7789a7af27bfc680983ac792913566d59c4bef10412bcac822bd8e4678857d4fc85df8aeec0cc93262057408eedc73a4b7d6d79ceaec73681d401c99847374cb02abe16122ab65eae4bf86dd55449e22dec1971af416f4995112741caa9ead627052f10ad8963b71a82a13655412c26fed64d13a0a51ca2d86c17e47273e7cd58e45b10e629bebcfd", &(0x7f00000003c0)=""/91}, 0x18) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000480)=0x1) pipe(&(0x7f0000000040)) 03:20:09 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x4) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e22, @multicast2}}}, 0x84) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x1c, 0x35b, 0x725, 0x8, 0x8, 0x5, 0x8, 0x96, 0x10000, 0x100000000, 0x10, 0x5, 0x9, 0x8, 0x1, 0x20}}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)) [ 988.356796][T29797] binder: send failed reply for transaction 782 to 26526:26528 [ 988.364485][T29797] binder: undelivered TRANSACTION_ERROR: 29189 03:20:09 executing program 4: 03:20:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x53de, 0x0, 0x3}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000280)={r4, 0x80, 0x8, 0x400}, &(0x7f00000002c0)=0x10) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 988.527672][T26593] binder: 26587:26593 ioctl c018620b 0 returned -14 03:20:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) r2 = syz_open_dev$mice(&(0x7f0000001740)='/dev/input/mice\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r3, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x70fa46bc}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb973}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0xc084) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000001780)=0x8, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000200)={'caif0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', r5}) 03:20:09 executing program 4: 03:20:09 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x5) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @rand_addr=0x4}, 0x10) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x1, 0x200000000000000, 0x3ffc00000000000, 0x8, 0x4, 0x9, 0x40, 0x4, 0x0, 0x1, 0x3cb6, 0xd01a}, {0x7, 0x3, 0x401, 0x9, 0x80000000, 0x3, 0x36, 0x7cba, 0x8, 0x7, 0x47f1e995, 0x0, 0xa5}, {0x3, 0x10000, 0x0, 0x1483, 0x100000000, 0x9, 0x6, 0x8, 0x3899, 0x8, 0x1d, 0x6, 0x2}], 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) socket$isdn_base(0x22, 0x3, 0x0) r3 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000140)={r0, r2}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 989.290175][T26616] binder_alloc: binder_alloc_mmap_handler: 26587 20001000-20004000 already mapped failed -16 [ 989.300753][T26616] binder: 26587:26616 ioctl c018620b 0 returned -14 [ 989.301708][T26728] binder: BINDER_SET_CONTEXT_MGR already set [ 989.313784][T26728] binder: 26587:26728 ioctl 40046207 0 returned -16 [ 989.314784][T26729] binder_alloc: 26587: binder_alloc_buf, no vma [ 989.327009][T26729] binder: 26587:26729 transaction failed 29189/-3, size 24-8 line 3147 03:20:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:10 executing program 4: 03:20:10 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x300) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000b8ed3ec4616e601253beb8b7b26a85c9314fc3fcf3b81f4c0d2debf8339c76815a617fa03de5419893dc03889567ff90"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x50000ffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) [ 989.335685][T29797] binder: release 26587:26616 transaction 787 out, still active [ 989.343636][T29797] binder: send failed reply for transaction 787, target dead 03:20:10 executing program 4: 03:20:10 executing program 3: [ 989.513548][T26752] binder: 26740:26752 ioctl c018620b 0 returned -14 03:20:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x4000) 03:20:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x80, 0x800) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) 03:20:10 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x500) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 990.241678][T26980] binder_alloc: binder_alloc_mmap_handler: 26740 20001000-20004000 already mapped failed -16 [ 990.252246][T26854] binder: 26740:26854 ioctl c018620b 0 returned -14 [ 990.253776][T26980] binder: BINDER_SET_CONTEXT_MGR already set [ 990.265389][T26980] binder: 26740:26980 ioctl 40046207 0 returned -16 [ 990.270923][T26981] binder_alloc: 26740: binder_alloc_buf, no vma [ 990.278794][T26981] binder: 26740:26981 transaction failed 29189/-3, size 24-8 line 3147 03:20:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:11 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x16}]}, 0x10) 03:20:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x110007e) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) signalfd4(r0, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffff9c, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RREMOVE(r1, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) 03:20:11 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{}, {0x80}}) 03:20:11 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x1000000) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 990.287514][ T22] binder: release 26740:26752 transaction 792 out, still active [ 990.306086][ T22] binder: send failed reply for transaction 792, target dead 03:20:11 executing program 4: timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12}, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x200000, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) write$evdev(r0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000e6, 0x0) accept$packet(0xffffffffffffff9c, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x40008000003, 0x300) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x3c5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200000, 0x2) syz_open_dev$binder(&(0x7f0000001640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000040)={0xfff, 0x0, 0x0, 0xfffffffffffffff9, 0x5, 0x2}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101000, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000140)) tkill(0x0, 0x1000000000016) 03:20:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) r2 = syz_open_dev$mice(&(0x7f0000001740)='/dev/input/mice\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r3, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x70fa46bc}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb973}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0xc084) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000001780)=0x8, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000200)={'caif0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', r5}) 03:20:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:11 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x2000000) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 990.479008][T27003] binder: 26994:27003 ioctl c018620b 0 returned -14 03:20:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 990.701756][T27026] binder: 27019:27026 ioctl c018620b 0 returned -14 [ 990.764756][T27021] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 990.783134][T27021] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 990.806650][T27064] binder: BINDER_SET_CONTEXT_MGR already set [ 990.824519][T27064] binder: 27019:27064 ioctl 40046207 0 returned -16 [ 990.840271][T27021] attempt to access beyond end of device [ 990.860356][T27021] loop4: rw=12288, want=8200, limit=20 [ 990.868239][T27021] attempt to access beyond end of device [ 990.870005][T27064] binder: release 27019:27064 transaction 800 out, still active [ 990.874221][T27021] loop4: rw=12288, want=12296, limit=20 [ 990.888145][T27021] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 991.133735][T27021] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 991.141799][T27021] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 991.150921][T27021] attempt to access beyond end of device [ 991.157439][T27021] loop4: rw=12288, want=8200, limit=20 [ 991.163055][T27021] attempt to access beyond end of device [ 991.169094][T27021] loop4: rw=12288, want=12296, limit=20 [ 991.174721][T27021] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 991.268472][T27016] binder_alloc: binder_alloc_mmap_handler: 26994 20001000-20004000 already mapped failed -16 [ 991.279228][T27016] binder: 26994:27016 ioctl c018620b 0 returned -14 [ 991.280239][T27145] binder: BINDER_SET_CONTEXT_MGR already set [ 991.298906][T27145] binder: 26994:27145 ioctl 40046207 0 returned -16 [ 991.302101][T27146] binder_alloc: 26994: binder_alloc_buf, no vma 03:20:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:12 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x3000000) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0xfffffffffffffffd}) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:12 executing program 4 (fault-call:7 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) [ 991.312678][T27146] binder: 26994:27146 transaction failed 29189/-3, size 24-8 line 3147 [ 991.322672][T29797] binder: release 26994:27016 transaction 797 out, still active [ 991.336272][T29797] binder: send failed reply for transaction 797, target dead [ 991.343845][T29797] binder: send failed reply for transaction 800, target dead 03:20:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 991.410019][T27155] binder: 27149:27155 ioctl c018620b 0 returned -14 [ 991.440194][T27156] binder: 27154:27156 ioctl c018620b 0 returned -14 03:20:12 executing program 3 (fault-call:9 fault-nth:0): r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0xfffffffffffffffd}) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:12 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x4000000) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:12 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x5000000) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0xfffffffffffffffd}) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') [ 992.191821][ T22] binder: release 27149:27166 transaction 806 out, still active [ 992.211468][T27307] binder_alloc: binder_alloc_mmap_handler: 27154 20001000-20004000 already mapped failed -16 [ 992.222752][T27167] binder: 27154:27167 ioctl c018620b 0 returned -14 [ 992.230353][T27307] binder: BINDER_SET_CONTEXT_MGR already set [ 992.236691][T27307] binder: 27154:27307 ioctl 40046207 0 returned -16 [ 992.236729][T27308] binder_alloc: 27154: binder_alloc_buf, no vma [ 992.257509][T27308] binder: 27154:27308 transaction failed 29189/-3, size 24-8 line 3147 [ 992.266805][ T22] binder: send failed reply for transaction 806, target dead 03:20:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:13 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:13 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0xf6ffffff) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) [ 992.286256][ T22] binder: send failed reply for transaction 805 to 27154:27167 [ 992.334048][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 992.421010][T27324] binder: 27312:27324 ioctl c018620b 0 returned -14 03:20:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 992.465396][T27326] binder: 27321:27326 ioctl c018620b 0 returned -14 [ 992.503222][T27320] binder: 27312:27320 transaction failed 29189/-22, size 24-8 line 2994 03:20:13 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0xfffffff6) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 992.558103][T27337] binder: 27312:27337 BC_ACQUIRE_DONE u0000000000000000 no match [ 992.593382][T27336] binder: 27321 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 992.593398][T27336] binder: 27321:27336 ioctl c018620c 200003c0 returned -22 [ 992.657817][T27337] binder: 27312:27337 unknown command 0 [ 992.664635][T27337] binder: 27312:27337 ioctl c0306201 200003c0 returned -22 03:20:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:13 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x1000000000000) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:13 executing program 3: socket$vsock_dgram(0x28, 0x2, 0x0) syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0xcf88, 0x40000) epoll_create1(0x80000) openat$cgroup_subtree(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = inotify_init() openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x802, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x4, r1) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(r3, 0x0, 0x4010080) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_nanosleep(0x1, 0x0, &(0x7f0000000340)={r4, r5+10000000}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r3) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000000)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000280)=0xffffffffffffffd2) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000140)={0x3, @default, r6}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:14 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x100000000000000) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 993.224272][T27482] binder_alloc: binder_alloc_mmap_handler: 27321 20001000-20004000 already mapped failed -16 [ 993.254158][T27336] binder: 27321:27336 ioctl c018620b 0 returned -14 [ 993.263768][T27482] binder: BINDER_SET_CONTEXT_MGR already set [ 993.270956][T27485] binder_alloc: 27321: binder_alloc_buf, no vma [ 993.278003][T27482] binder: 27321:27482 ioctl 40046207 0 returned -16 [ 993.285182][T27485] binder: 27321:27485 transaction failed 29189/-3, size 24-8 line 3147 [ 993.295430][ T22] binder: release 27321:27326 transaction 814 out, still active [ 993.304059][T27336] binder: 27321 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 993.304075][T27336] binder: 27321:27336 ioctl c018620c 200003c0 returned -22 03:20:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:14 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x200000000000000) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 993.321868][ T22] binder: send failed reply for transaction 814, target dead 03:20:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 993.393863][T27490] binder: 27487:27490 ioctl c018620b 0 returned -14 03:20:14 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') [ 993.453681][T27497] binder: 27494:27497 ioctl c018620b 0 returned -14 [ 993.499126][T27503] binder: 27487:27503 transaction failed 29189/-22, size 24-8 line 2994 03:20:14 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x300000000000000) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:14 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='<,eth0\xc0\x00', r1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r2) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000), 0x4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8404040}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r3, 0x208, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x7f}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2c}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x8040) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:14 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:14 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x400000000000000) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:15 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') [ 994.167019][T27503] binder_alloc: binder_alloc_mmap_handler: 27487 20001000-20004000 already mapped failed -16 [ 994.190206][T27503] binder: 27487:27503 ioctl c018620b 0 returned -14 [ 994.205581][T30765] binder: release 27487:27645 transaction 823 out, still active [ 994.263554][T27506] binder_alloc: binder_alloc_mmap_handler: 27494 20001000-20004000 already mapped failed -16 [ 994.289905][T27506] binder: 27494:27506 ioctl c018620b 0 returned -14 [ 994.302810][T27653] binder: BINDER_SET_CONTEXT_MGR already set 03:20:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:15 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x500000000000000) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:15 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x10, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) [ 994.309329][T27653] binder: 27494:27653 ioctl 40046207 0 returned -16 [ 994.316532][T27654] binder_alloc: 27494: binder_alloc_buf, no vma [ 994.323023][T27654] binder: 27494:27654 transaction failed 29189/-3, size 24-8 line 3147 [ 994.334866][T30765] binder: send failed reply for transaction 820 to 27494:27506 [ 994.342649][T30765] binder: send failed reply for transaction 823, target dead 03:20:15 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) [ 994.379152][T30765] binder: undelivered TRANSACTION_ERROR: 29189 [ 994.397977][T27658] binder: 27655:27658 ioctl c018620b 0 returned -14 03:20:15 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 994.479183][T27672] binder: 27668:27672 ioctl c018620b 0 returned -14 [ 994.485282][T27673] binder: 27655:27673 transaction failed 29189/-22, size 24-8 line 2994 [ 994.507209][T27673] binder: 27655:27673 ioctl 10 200003c0 returned -22 03:20:15 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0xf6ffffff00000000) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:15 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:15 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 995.182247][T27811] binder_alloc: binder_alloc_mmap_handler: 27655 20001000-20004000 already mapped failed -16 [ 995.192908][T27673] binder: 27655:27673 ioctl c018620b 0 returned -14 [ 995.200314][T27673] binder: 27655:27673 ioctl 10 200003c0 returned -22 [ 995.208508][ T22] binder: release 27655:27812 transaction 832 out, still active [ 995.273943][T27814] binder_alloc: binder_alloc_mmap_handler: 27668 20001000-20004000 already mapped failed -16 [ 995.284877][T27672] binder: 27668:27672 ioctl c018620b 0 returned -14 [ 995.290700][T27814] binder: BINDER_SET_CONTEXT_MGR already set [ 995.297920][T27814] binder: 27668:27814 ioctl 40046207 0 returned -16 [ 995.298696][T27815] binder_alloc: 27668: binder_alloc_buf, no vma [ 995.311112][T27815] binder: 27668:27815 transaction failed 29189/-3, size 24-8 line 3147 03:20:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x3f00, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:16 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ipvs(0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='nodevmime_type\x00') openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080)=0x10000, 0x8) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8800) 03:20:16 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x80080, 0x0) close(r2) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000000)) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)={0x87, 0x1, 0x54f8b9f1, "ac69a0be604013da3a62807f32a6b949c48a6e79efde46b8c48d10bfa3c000424bb1798f9de5b38beae4f0159883f7d9b0d192efecd283878aa43baf4e62daa336a5a1df1b4e13a5245409fb4214efd4fd7a64aa5220cca765b3d5bd23dcc5d0d7b3668ef5c83c1b87a46e29e0b28d3be67233b1661484920b599ba4d0b73fd7acb439573ea38e"}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:16 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) [ 995.320174][ T22] binder: send failed reply for transaction 829 to 27668:27677 [ 995.328731][ T22] binder: send failed reply for transaction 832, target dead 03:20:16 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 995.492528][T27832] binder: 27824:27832 ioctl c018620b 0 returned -14 [ 995.501300][T27827] binder: 27822:27827 ioctl c018620b 0 returned -14 [ 995.506095][T27838] binder: 27822:27838 transaction failed 29189/-22, size 24-8 line 2994 03:20:16 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:16 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0xc) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 995.729027][T27856] binder: 27854:27856 ioctl c018620b 0 returned -14 [ 996.256792][T27972] binder_alloc: binder_alloc_mmap_handler: 27824 20001000-20004000 already mapped failed -16 [ 996.267421][T27971] binder: 27824:27971 ioctl c018620b 0 returned -14 [ 996.269004][T27972] binder: BINDER_SET_CONTEXT_MGR already set [ 996.280338][T27972] binder: 27824:27972 ioctl 40046207 0 returned -16 [ 996.285583][T27973] binder_alloc: 27824: binder_alloc_buf, no vma [ 996.293865][T27973] binder: 27824:27973 transaction failed 29189/-3, size 24-8 line 3147 03:20:17 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:17 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4180000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x80f41) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r2) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000200)=0x6, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @remote, 0x8}, 0xffffffffffffffff, 0xe0}}, 0xffffffffffffff55) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x1000000, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:17 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x1, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 996.302642][T30765] binder: send failed reply for transaction 838 to 27824:27832 [ 996.311167][T30765] binder: send failed reply for transaction 841 to 27854:27867 03:20:17 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(0x0) 03:20:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 996.512851][T27989] binder: 27987:27989 ioctl c018620b 0 returned -14 [ 996.519847][T27867] binder_alloc: binder_alloc_mmap_handler: 27854 20001000-20004000 already mapped failed -16 [ 996.543275][T27867] binder: 27854:27867 ioctl c018620b 0 returned -14 03:20:17 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 996.565905][T27999] binder: 27854:27999 transaction failed 29189/-22, size 24-8 line 2994 [ 996.593230][ T22] binder: undelivered TRANSACTION_ERROR: 29189 03:20:17 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(0x0) 03:20:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:17 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x6, 0x408200) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x40000, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x401}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="df00000062ecd87fdf894a05db48387769b14152b0222f096badc7f5848f686b42454e778e026aabbafeece6f2c488b0dcbc3b7c1f888cf02ee14bc4d20afbcc204b907a3f678872141943d0e72fac49d61c04784bc78d74b3c5812b66d9cdc783860b0a4de89586191868174d499a34b67d39250c2143d09619909b56196a050ea11a90aa304620abd09abad4773f1e11f064de750480b99850dfcba67b06daea2618a2b95922772e6f2dee147205bd66ef7bbe0a7705a78c588a7ed31e824b78401bd9ee6da64e604f8673ab05038a1c1e38b194e616bd052cc77105ca6fcc90485d7010dbbdc21a289c"], &(0x7f0000000200)=0xe7) close(r2) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffd) keyctl$assume_authority(0x10, r4) mkdir(&(0x7f0000000240)='./file0\x00', 0x10) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000280)=0x20, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:17 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x800, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000100)) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x8000000000000681, 0x0) mq_getsetattr(r1, &(0x7f0000000040)={0x7, 0x3, 0xc0, 0x9, 0x2, 0xfff, 0xfffffffffffff000, 0x20}, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x8) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000080)={0x2, "e1f874962def4bb2e7dc6c5d25036c2f6a93fac165005d5f6636c18180ebf7ad", 0x3, 0x1}) [ 996.770800][T28114] binder: 28077:28114 ioctl c018620b 0 returned -14 03:20:17 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(0x0) [ 997.261645][T28145] binder_alloc: binder_alloc_mmap_handler: 27987 20001000-20004000 already mapped failed -16 [ 997.272631][T28144] binder: 27987:28144 ioctl c018620b 0 returned -14 [ 997.272706][T28145] binder: BINDER_SET_CONTEXT_MGR already set [ 997.280648][T28146] binder_alloc: 27987: binder_alloc_buf, no vma [ 997.286346][T28145] binder: 27987:28145 ioctl 40046207 0 returned -16 [ 997.292817][T28146] binder: 27987:28146 transaction failed 29189/-3, size 24-8 line 3147 03:20:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x3f000000, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:18 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:18 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:18 executing program 0 (fault-call:1 fault-nth:0): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:18 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x2, 0x9, 0xfff, 0x0, 0x1f}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) [ 997.308532][T30765] binder: release 27987:28002 transaction 847 out, still active [ 997.322707][T30765] binder: send failed reply for transaction 847, target dead [ 997.333656][T30765] binder: send failed reply for transaction 850 to 28077:28122 [ 997.382707][T28152] FAULT_INJECTION: forcing a failure. [ 997.382707][T28152] name failslab, interval 1, probability 0, space 0, times 0 [ 997.431678][T28152] CPU: 0 PID: 28152 Comm: syz-executor.0 Not tainted 5.1.0-rc2 #36 [ 997.440144][T28152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 997.450540][T28152] Call Trace: [ 997.454089][T28152] dump_stack+0x172/0x1f0 [ 997.458534][T28152] should_fail.cold+0xa/0x15 [ 997.463300][T28152] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 997.469708][T28152] ? ___might_sleep+0x163/0x280 [ 997.477144][T28152] __should_failslab+0x121/0x190 [ 997.484104][T28152] should_failslab+0x9/0x14 [ 997.491510][T28152] kmem_cache_alloc+0x2b2/0x6f0 [ 997.497131][T28152] ? fput+0x1b/0x20 [ 997.501349][T28152] ? ksys_write+0x166/0x1f0 [ 997.506191][T28152] getname_flags+0xd6/0x5b0 [ 997.510982][T28152] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 997.517063][T28152] getname+0x1a/0x20 [ 997.521303][T28152] __x64_sys_mq_unlink+0xc2/0x550 [ 997.526756][T28152] do_syscall_64+0x103/0x610 [ 997.531544][T28152] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 997.537684][T28152] RIP: 0033:0x458209 [ 997.541804][T28152] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 997.562172][T28152] RSP: 002b:00007feb0a8ffc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f1 [ 997.581485][T28152] RAX: ffffffffffffffda RBX: 00007feb0a8ffc90 RCX: 0000000000458209 [ 997.589676][T28152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200003c0 [ 997.599171][T28152] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 997.607552][T28152] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feb0a9006d4 [ 997.615594][T28152] R13: 00000000004c4023 R14: 00000000004d7348 R15: 0000000000000004 03:20:18 executing program 0 (fault-call:1 fault-nth:1): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') [ 997.679959][T28245] binder: 28156:28245 ioctl c018620b 0 returned -14 [ 997.681571][T28247] binder: 28156:28247 transaction failed 29189/-22, size 24-8 line 2994 [ 997.688158][T28122] binder_alloc: binder_alloc_mmap_handler: 28077 20001000-20004000 already mapped failed -16 03:20:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x100000000000000, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 997.755658][T28122] binder: 28077:28122 ioctl c018620b 0 returned -14 [ 997.874693][T28269] binder: 28077:28269 transaction failed 29189/-22, size 24-8 line 2994 03:20:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:18 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:18 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000040)="1013307f70ef9f7549747493d195fdd2674ae45996087beec332c54e0120c04f7d52b6fdd1e49f44c432e41eb5b323b2b5d7acc760586a9d1f860599b26a269de62c48af33afd63c557eda50e72410dbe805c59572cb5769acda5cee90e9d7e90e9d216b1e", 0x65) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f00000000c0)=0x7) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 997.926608][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 997.946218][T28279] FAULT_INJECTION: forcing a failure. [ 997.946218][T28279] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 997.959596][T28279] CPU: 1 PID: 28279 Comm: syz-executor.0 Not tainted 5.1.0-rc2 #36 [ 997.967614][T28279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 997.978079][T28279] Call Trace: [ 997.981436][T28279] dump_stack+0x172/0x1f0 [ 997.985953][T28279] should_fail.cold+0xa/0x15 [ 997.990800][T28279] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 997.996662][T28279] ? debug_smp_processor_id+0x3c/0x280 [ 998.002178][T28279] ? perf_trace_lock+0xeb/0x510 [ 998.007177][T28279] should_fail_alloc_page+0x50/0x60 [ 998.012631][T28279] __alloc_pages_nodemask+0x1a1/0x7e0 [ 998.018307][T28279] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 998.024252][T28279] ? find_held_lock+0x35/0x130 [ 998.029167][T28279] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 998.035037][T28279] cache_grow_begin+0x9c/0x860 [ 998.039856][T28279] ? getname_flags+0xd6/0x5b0 [ 998.039875][T28279] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 998.039933][T28279] kmem_cache_alloc+0x62d/0x6f0 [ 998.039948][T28279] ? fput+0x1b/0x20 [ 998.039967][T28279] getname_flags+0xd6/0x5b0 [ 998.039983][T28279] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 998.039999][T28279] getname+0x1a/0x20 [ 998.040015][T28279] __x64_sys_mq_unlink+0xc2/0x550 [ 998.040035][T28279] do_syscall_64+0x103/0x610 [ 998.040061][T28279] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 998.047541][T28287] binder: 28286:28287 ioctl c018620b 0 returned -14 [ 998.051344][T28279] RIP: 0033:0x458209 [ 998.051363][T28279] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 998.051370][T28279] RSP: 002b:00007feb0a8dec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f1 [ 998.051383][T28279] RAX: ffffffffffffffda RBX: 00007feb0a8dec90 RCX: 0000000000458209 [ 998.051391][T28279] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200003c0 [ 998.051399][T28279] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 998.051406][T28279] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feb0a8df6d4 [ 998.051414][T28279] R13: 00000000004c4023 R14: 00000000004d7348 R15: 0000000000000004 [ 998.079551][T28280] binder: 28273:28280 ioctl c018620b 0 returned -14 [ 998.121629][T28290] binder_alloc: binder_alloc_mmap_handler: 28286 20001000-20004000 already mapped failed -16 03:20:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x3f00000000000000, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:19 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000040)={0xffffffff, 0x6, 0x6, 0x0, 0x7, 0x4, 0x1, 0x5c68, 0x6, 0x1, 0x80, 0x3, 0x0, 0x32ba, 0x8, 0x55, 0x2, 0x8, 0x10001}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0800000000000000df0a00000000000009000000000000007f4d564b000000000800000000000000be0a000000000000000000000000000000000000000000000000000000000000260b0000000000000500000000000000fa0e00000000000001800000000000002302000000000000000100000000000000000000000000000000000000000000"]) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 998.304106][T28290] binder: 28286:28290 ioctl c018620b 0 returned -14 03:20:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:19 executing program 0 (fault-call:1 fault-nth:2): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:19 executing program 1: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RCREATE(r0, &(0x7f00000000c0)={0x18, 0x73, 0x2, {{0x80, 0x4, 0x4}}}, 0x18) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x41) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000100)) [ 998.356849][T28402] binder: 28401:28402 ioctl c018620b 0 returned -14 03:20:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:19 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') [ 998.543936][T28418] binder: 28414:28418 ioctl c018620b 0 returned -14 03:20:19 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000040)=""/74) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:19 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='.dev/kvm\x00') 03:20:19 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @window={0x3, 0x6, 0x5}, @mss={0x2, 0x7}, @timestamp, @timestamp], 0x5) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, 0x0, 0x1000000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) sendmsg$rds(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/197, 0xc5}, {&(0x7f00000001c0)=""/212, 0xd4}, {&(0x7f0000000400)=""/222, 0xde}, {&(0x7f0000000680)=""/243, 0xf3}, {&(0x7f0000000340)=""/85, 0x55}, {&(0x7f0000000500)=""/124, 0x7c}, {&(0x7f0000000780)=""/174, 0xae}], 0x7, &(0x7f00000008c0)=[@cswp={0x58, 0x114, 0x7, {{}, &(0x7f0000000140)=0xb5e, &(0x7f0000000580)=0x2, 0x1, 0x5, 0x31bf, 0x7, 0x1a, 0x4}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x2}], 0x70, 0x4880}, 0x4) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000ac0)=""/131) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000980)={0x5, 0x2, 0xf000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000d40)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000a40)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x83c, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000a00)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:19 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 999.106245][T28661] binder_alloc: binder_alloc_mmap_handler: 28401 20001000-20004000 already mapped failed -16 [ 999.119019][T28660] binder: 28401:28660 ioctl c018620b 0 returned -14 [ 999.127859][T28661] binder: BINDER_SET_CONTEXT_MGR already set [ 999.134148][T28661] binder: 28401:28661 ioctl 40046207 0 returned -16 [ 999.134186][T28663] binder_alloc: 28401: binder_alloc_buf, no vma 03:20:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done={0x630b}], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:20 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev.kvm\x00') [ 999.157632][T28663] binder_transaction: 3 callbacks suppressed [ 999.157834][T28663] binder: 28401:28663 transaction failed 29189/-3, size 24-8 line 3147 [ 999.165287][ T22] binder: send failed reply for transaction 860 to 28401:28402 [ 999.186154][ T22] binder: send failed reply for transaction 863 to 28414:28524 [ 999.261703][ T22] binder: undelivered TRANSACTION_COMPLETE [ 999.288651][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 999.302931][T28524] binder_alloc: binder_alloc_mmap_handler: 28414 20001000-20004000 already mapped failed -16 [ 999.313699][T28673] binder: 28672:28673 ioctl c018620b 0 returned -14 [ 999.346769][T28524] binder: 28414:28524 ioctl c018620b 0 returned -14 [ 999.347957][T28675] binder: 28414:28675 transaction failed 29189/-22, size 24-8 line 2994 03:20:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:20 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0xff0000000000000, 0x80000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20200}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x90, r2, 0x408, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4c, 0x7, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r0}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7f1f614c}]}, 0x90}}, 0x1) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040), 0x4) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000100)={[{0x3, 0x101, 0xcd10, 0x2, 0x50cd, 0x81, 0x8, 0x8, 0x4, 0x8, 0x7fff, 0x1, 0x3}, {0x8c, 0x4, 0xfff, 0xbb0, 0x3, 0x3, 0x8000, 0x6b, 0x3, 0x8001, 0x10000, 0x7, 0xb8}, {0x1ff, 0x7, 0x0, 0x8, 0x6c, 0xac, 0x80000000, 0x100000001, 0x3, 0x7f, 0x9, 0xd6, 0xa0000000000}], 0xe02}) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x7ff) 03:20:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 999.378776][T28676] binder: 28672:28676 ERROR: BC_REGISTER_LOOPER called without request [ 999.396770][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 999.413270][T28676] binder: 28672:28676 unknown command 0 [ 999.419931][T28676] binder: 28672:28676 ioctl c0306201 200003c0 returned -22 03:20:20 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x02') [ 999.548735][T28703] binder: 28688:28703 ioctl c018620b 0 returned -14 03:20:20 executing program 3: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2002, 0x0) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:20 executing program 1: syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffff9c, 0xfffffffffffffffd, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nfc_llcp(r0, &(0x7f0000000300)={&(0x7f00000003c0)={0x27, 0x0, 0x2, 0x1, 0x1, 0xfffffffffffffffa, "05ef7e189efd67d2d8c15486abe8134e8c910267a417f096e8d32d553e04808952e0ae857359b2c010edc7ee7a1458ff52c5a7ec68cd98d36ffe5c3a4ee4cf", 0x20}, 0x60, &(0x7f0000000240)=[{&(0x7f00000000c0)='<1\f', 0x3}, {&(0x7f0000000100)="9869222effc677173a7301c608f55cc78ca87ca7a795670f5a0a79399be390a4e07622fa6780e641cc", 0x29}, {&(0x7f0000000140)="a01cf560ddab36ed7a18ec1d021d4d01c51f96c25f25fbb5cc93c54e01a1261d33ff93b6d4", 0x25}, {&(0x7f0000000180)="9dc9a33d82c7b61815afde17a5a2b54a06e40fd25ae2387a118be9998271c5be0ad26bc28da8e0c2c810172572f4da7a08201b", 0x33}, {&(0x7f00000001c0)="bcee1bc21a4b13ea137fe3e9cff1a50815943d192d64ad9241b08a512191d5199e57f342637e7bdfbd60a686544951f55e0188f24c2e6d731ed7464f225c94d6dc5a7a1d6016461becf51e6badb083fe52cda2e68db23782f9b2ad8c", 0x5c}], 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="2800000000000005000000001fffde00be0f000100000000000000a03f1adcc1cbb811810ff732006d2c060e95a23ccac91b5862578562be948cab2f5205891cd08f3873d58828317c1a31ed6a267a"], 0x4f, 0xc0}, 0x4000080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) 03:20:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:20 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 1000.112536][T28826] binder_alloc: binder_alloc_mmap_handler: 28672 20001000-20004000 already mapped failed -16 [ 1000.123467][T28676] binder: 28672:28676 ioctl c018620b 0 returned -14 [ 1000.126790][T28826] binder: BINDER_SET_CONTEXT_MGR already set [ 1000.137306][T28826] binder: 28672:28826 ioctl 40046207 0 returned -16 [ 1000.144510][T28827] binder_alloc: 28672: binder_alloc_buf, no vma [ 1000.152089][T28827] binder: 28672:28827 transaction failed 29189/-3, size 24-8 line 3147 03:20:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done={0x630c}], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:21 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:21 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/dlm_plock\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000002cc0)=@assoc_value={0x0, 0x9}, &(0x7f0000002d00)=0x8) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000100)={0x4, {{0xa, 0x4e22, 0x2, @empty, 0x4}}, {{0xa, 0x3, 0x7fffffff, @loopback, 0x40}}}, 0x108) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000002d40)={r1, 0x1}, &(0x7f0000002d80)=0x8) r2 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x8) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000040)={'raw\x00'}, &(0x7f00000000c0)=0x54) [ 1000.162865][T30765] binder: send failed reply for transaction 869 to 28672:28676 [ 1000.174763][T30765] binder: send failed reply for transaction 872 to 28688:28792 [ 1000.186564][T30765] binder: undelivered TRANSACTION_ERROR: 29189 [ 1000.262826][T28836] binder: 28835:28836 ioctl c018620b 0 returned -14 [ 1000.317336][T28841] binder: 28835:28841 unknown command 0 [ 1000.323063][T28841] binder: 28835:28841 ioctl c0306201 200003c0 returned -22 [ 1000.326758][T28792] binder_alloc: binder_alloc_mmap_handler: 28688 20001000-20004000 already mapped failed -16 03:20:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:21 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:21 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:21 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x10013, r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 1000.369766][T28792] binder: 28688:28792 ioctl c018620b 0 returned -14 [ 1000.376862][T30765] binder: undelivered TRANSACTION_ERROR: 29189 [ 1000.383225][T30765] binder: release 28688:28844 transaction 880 out, still active 03:20:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:21 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') [ 1000.528112][T28857] binder: 28855:28857 ioctl c018620b 0 returned -14 03:20:21 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000480)="e5be4a9ae0d6d0fa9f306cc26ae590554c19c1256df63a78a4ee29bb84cff9fa878da61b5163d8ec84f57cbef163ad5cd0b730dabe4bb6fb8daccf6b458d18ddb2cf5c9f5724f2db721fea225ab94239b34c0518f3613a9bd960dc", 0x5b}], 0x1, &(0x7f0000000540)=[{0x1010, 0x19f, 0x401, "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"}, {0xc8, 0x17, 0x54f2cc4b, "4470823bb189b0dcd76b1cd58707e8dc0401165cd159cb89009b09f37662ce7b61c16ba23cfcf53bdc820397301e5d65f3b07f92d8e202b626e0abedf765bb1a1275373054295c7f658c23c615e4380292ee70ff0062e23e9bb1293b201fb51742d911a15593a766c39c1d348d17fe4c1385c1cf1edca6c382f0637d2adfe7b472b48413682f2fb9fc179ddb45f70ac00593d2f28c59f5450ce279a6692e4ff3a04970cc31dbef788542a481ea38c69d8823b77fd4eaeb"}, {0x100, 0x111, 0x1000, "184051518b32603eb3ebecb33c1b13954f589162b81c4ca4a66d5fe822c26f1927a1f46c6a22fdd1110cd060568635dff7c18fb5fc204b3e88e38f6a64dc39780e2c524910e73e196e457c4562d33ee60a4fa391e1f55cb394cc73397d86b21deeb7ab7e3655640a4ffaea99274ed0f623d7a2f40aac20dd745c535c7cad0cdc7740cea7e9617ecf9f7c3683de20e21076e8b393690a89bde909e6be76f7e4b122eb5d5ae0331937f22bd16cd166b187ff789206e498b72e9b17485ae54adcda298ce8e92a2310ced2dcb4d9526289961749f257d0254efbe8871d05bce9c4a461577924199863ff94aa6998992de5"}, {0x1010, 0x119, 0xa193, "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"}, {0x88, 0x108, 0xd23, "c1fc2f77222278f9f120b976eb1546dfee54d9a774d46780d71cf6a35a079a533e0d278751d5b1aafdf47f8c75cdd409db29069dcc595d0456a230ee2c24b6adb78480041a837106c9a9d698421da739f6d045d2f2c506ce171260174b098a60e4b2e884cd8fbf0c5c7ac554a3ea180fb1ff623e00fe"}, {0x80, 0x0, 0x3, "e11c398465e894386fb2bce14fa5b14306274c03a49d72a200e3660ff87270b3d711d9237fd10b4cf59a3be87a6760f46dd7fa5794afe56d8649db87a75a2c3b6c348727744b8460a1760778c64679023da70f9d25d151e7b7514316023f7761ebd28d00df1c38061a0a808bab"}, {0x60, 0x111, 0x100, "065c9ecb2bfdee9a6f8040f55f5a61da96120a2d11ef09114215bf58dd03dadad544394cf46524f048403592448ae28fd1c47663a115eb216d51f1e58386edbf4d1abf98968d4feab37b221ae33747"}, {0xb8, 0x18f, 0xff, "2868883c55ca9d3f6f82b98ff999dbcc705273f9ee47d5ce4d304baaf5fbc7626f443bc348aff880f0dc9f324f8f72a62363038348f24987837462fda4d2c2f1bd96cc10fa3cd2fd56b7610bdf6e6370cde94dbe2c643e7d59a9921a461db3a066a1d5971e8c2daa066cfcc9c390f64d3c203dbccf221230dc6adb1c99f302bf39dc362f0decba2ffcdfb81401175473f9f244a0642f12e1b9964ba33ea36280b5"}, {0x10, 0x108, 0xfffffffffffffff8}, {0xb8, 0x108, 0x8, "c7f182e45aa9970bd18fc7b189017e79ef50cd2b7d7a2380aa37c0a94bd63b3432a5ef0aca580c86a753310cab98bcc278d8694af3cc89e881630ebf1d8d7ddf5c16776c4f4a39969a4cd07b87980ebf4a805a64aeb6a4c43860cfd21a215aa8f5ccb6b3864e710e68a00eaf33f0298ff091a2dd68a06e59d27d4d9d141a412f43d524c655f9b7c838ed5bcb0427b9a5b3361f6e3e312be67ea9ec4662c46075e6927e"}], 0x24d0}, 0x5}, {{&(0x7f0000002a40)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x3, 0x3, 0x4}}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002ac0)="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", 0xfc}], 0x1}, 0x10000}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002c00)="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", 0xff}, {&(0x7f0000002d00)="7a9de5ac36028d674074c9cb791c241c4818ac2a825ae869acdb1105ad253fccb4c0b1e63ad4d4a9525e8d399f1badd4ff78d1076097d5a48e1fb1c3d745bd36e2b4bc6badb82dbdbe4f0cf19f2b6f4db1015810f201ce95d93b3822083129503de6a0108476efcbfdbdb73c6ce2051859982cece7cb003a59fcda7f54ea51e1aa2ea5dd2027b356d4cf023eecae9e8a5d872b72424318d23f2a7428f32059dc8d35ecbefce2e3a0be5bab5a8a510101b6a801ca9047a4ef50b2a9676fcc1c4b5fb25e4bdcbf693bcb9d2b38155174eaeddf", 0xd2}], 0x2, &(0x7f0000002e40)=[{0x60, 0x0, 0x70b, "7188642b08cde4eccae6f97fb660c87e6de259e789d90dad559b9c89e0b3d1dc27cc8a0c3373ca19b578456e1627d8d0509045eb8c06c8c4a2a9ca94537f98ce518d850d9e7e8b3b7feb810e"}, {0x78, 0x6, 0x7, "1fe9583d5f437924ee9b475d9779d28c15a71f79b4a06bcc58baad361841ac78e488455a8653f1f61e8f42144ac59c90a982ed3934274267a7b8d63ca2cbf8e86689f9c176406b503cee3c2da7126062e283ebbdb5dc8d42c44c0fd2d993209a8690657511ba7d22"}], 0xd8}, 0x8}, {{&(0x7f0000002f40)=@nfc_llcp={0x27, 0x1, 0x1, 0x6, 0x0, 0x8, "2615038aa7f425563616cde2ba49170bc789c5c68ea3558297f2d197ffdab177e7cff43cfa22520e65041a869ab5ea3a246c7fb3fe17c0638063393f4da716", 0x31}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000002fc0)="af048d7c0484deec4a53147da5becbf2c132590f040838a128919fe339e2d4993256b8f09bacc0362ac71c124671725b6fb413866d3bdc68851f60d155c5705c47d82cc91ec2ad67c769c4f43920b59ed25793e34f433ae025fd0e25ff6f161366a8ee3ecc1f85fa565eff3ee24d81345b788722dc9fcc91b9e886fa165c19253c660d3408a9350671a29c808c224b78a701cb3e874c4e5844df7267b1e5ed6f4d8b1e81412b7e7898189d5626ea6f81fc67979a9dd9c1fde5b580442214d24f902d538a5ff1153de3a3cfa4ab2067af8de8eff4", 0xd4}, {&(0x7f00000030c0)="1c9b5ea5946f45915cf4870623b92ae8c67c24977b01855df713cfa1a93707501f7259c31bedd2643af5f6a8e170a099b4993c37fcea00f1ba346262d9", 0x3d}, {&(0x7f0000003100)="19b7e77f4d92f733b5dfa10598a2b80e5ac56e4496d0520d7ae6a4df1c1ca479a422f5ad1591fdd13adadd976c6ef615e915dabafc5a367841396ea5b6d6513577817de2096250488d6f23e7d8cfdb4a02a5c7a6d9ba53efafe1b835744c6b9d1135d64a804d3540205217734e9c44bfb5eaf648c9743b4ab56d99fd870794bfdd25eb573cec597a0626de1a0ceaff30d79d9f65c559a8037cb261d6e31ed1d50166d24dc4988d91285839096293853f4bf6a62cc0b07351c08bbed565eac2d49928a158ab32ede5b4be60c28314c675cd8111705f1191e11b2265d531d39ceac52bb0424fc13245dfed9de8057a", 0xee}, {&(0x7f0000003200)="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", 0x1000}, {&(0x7f0000004200)="2f9be2cb2e35b09068cb93ba05cc99e40ca0a44537c1789b616d02a5a96929df2b0159ca4d9491e1c8589811a0ea63b9acba062ed844ba535b2a5c1d632594ac9e77823ede3e775f5637", 0x4a}, {&(0x7f0000004280)="c334f45f3730bdf36c7568cab036db922ab13ebd69a6114aef7c9652ec3af63462f6bf1cfd134860ac3914cd15dec32aef9e03acd1d7b937df70a91243e08358507ee389112533b0cbf2fe008afccde1c705744203a2fea3f33fe2946cdd12eef31f9ee703927359e1d02a890e3970ebaa08b9df8a3766e7313dbea051391ada3d07073dc7f1a3cf8c6be10e2400609c14538f679c1ecc", 0x97}, {&(0x7f0000004340)="e112ecd4ee2577dafd53f4c029a14d1cebc78a9da956a460b4f7303786dc4eff3ddee487f4c651690cdc8278dab7b65c55e40d08b5f6c4f6a2d6ed9b20dce1f70c92273052c14a987f74a0ae507df9963f3bf87c40f8cb23935b6256606cf8e71f70940bf4b11f89ee9e96d4ab3d9d17d49e9cf5396f7a527825f060b11a67668b50f11649f41c5648281434c0ed77a4b22e62042d0d3ad3", 0x98}, {&(0x7f0000004400)="6bed627f758fd820a8a81a20acec96a1bbaee0408e963e4fa493bb9fb61f8d8ddfcc7701fba817774c9b96d3bb73754d92c8ae1f0e998ad5c334ed2f17830bac34cc02bcddf0804788dea563fb0ab0fc1a4b3e849fa30b787d1bdd5df2b4242f9b8692e254a8fcd45d750d67e7a58ffb783854c9eeb6282b7f89f8cd37b73f45dcecb5f09d5dd750b851545569106df0cb25f2ae90eef1a45d4dc3a9dbb2bf83dc5550a5ddb2b043", 0xa8}], 0x8, &(0x7f0000004540)=[{0x48, 0x6, 0x5, "9e98c093b95be2b8453bf9b2dd8ada4a9f228ec94962e43440a6d0dc9ccc7c8a181beaa0b417729b6ab88a816102e0ee2e80"}, {0x48, 0x0, 0x7f, "97739203c8f85296c0b31efb824a81de81557e586d0bc673a51771f38054c3d643311cd2d1ba343e0bceafcc4b6319df99ec58a0e4"}, {0x68, 0x115, 0x7, "be4bd339ed69c6584d52dec6481179dc1b5eddb72bb56186c4ccf897e4ef33801ff594783cd0ab055e0bb2ce4367a8db87b6522bae2db1e7ebfcd66c5c407cc64a634b5284e05532f8a13e3c13dc29a831fa1b2b94ac83"}, {0xc8, 0x116, 0x5, "36cd851b266c11c1a4fb5c0f489aa456b3562f6d303f2abe378acab0187ab026abe1bc87ebd7b1a3972338802defcc6b188d9414b0859581dfd2bdb69930b9db7fd8f73566ac2b72a00645e937d60863791b7bc8f7ff71947a68dca7463a035b18b93d43128da8e74dbffdaa344bb4ea11786a9f95ef29a5580a4b9e6f23f9d25c7bebbe946587076c713b044fe2ab24423c193c4365c529f02b589d6ae137c41d37032c3e80c3836eb6a869b905b76f653ba078b9b76e97"}], 0x1c0}, 0x5}, {{&(0x7f0000004700)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23}}, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000004780)="ae0725d37b30fd4996359693b9446b018b7fb876227ccd09a617da4d4e2df7cc7f943811f88651773bfaa83b3a2d3658e63a2b9d939c78cbee9ebbf2ab769b6ef5f06607f766bf45b5f09537f6d378a9bc469c947d7fd5481637b98d366483bf3426b1fe0ade10296705c0e27b4a3cdc051e7aad0a74f5de0da6916f75550db7647dc7f66f555628a22d5628ab6ab99b5cbe5724448f66c91758acbe96f0f45688b8cd3f864f59d3abe4e64417036028a9858711508797220183ada61a0e4c5eafe9eca1b2e1d52b7f77a0cd", 0xcc}, {&(0x7f0000004880)="e31add9b8b951028eb433aa50b6684cc70d7bf8a77150682843b4fe2f83e68710c4e2f4a66f6", 0x26}, {&(0x7f00000048c0)="6c9331caadc9e9aa3830094b27ebd370b22f3e74e6bf86dd0abad6d49fc69317293021ef339e12b5ffc8d5a80938d38b557a51c7b61485451f5e5a802371636dd618b1d4f19cb3fb25dfd2108cc71c98c18317f8c3577cfa79a7beaa6e9f4247fb081b4364a8ba64a592b2f9d5f94520ab628a3e6d8b977b617263c4da348641238331548efe6d4219739b9319292ec8974373178b9cc21f7809792305b8f0fa7e56848695dba9e45a944921d55d0917efc239684581c8a5fa20db", 0xbb}, {&(0x7f0000004980)="3f263fc4717a58c888f5a9885845c7e9b851fe805ba5dc81ba78d150f0318aeab8dd8ff8921c964c33987795467832db4b2b475cf3e34e79117558247e87224a51366e4dc74d98d4589ab1a73a960465c2d38ec90e1d88422f71b1a4a1445076cd7e95f56c58b029254c06fbe62e720aa7cbdb4668251b711fd6396e7e7d11c33e8bfbbbb5f14070ccf4dc665878105cff744a216d0db2d5603eedff123d8e39a208a5199705c46b232a029f7a39da6ce9d87c92", 0xb4}, {&(0x7f0000004a40)="d0a946e35d08d475a202eb3786afd96b6557170f99845b4a2cacc23cccbe6b81c557537d45112f2f91f51d6753361e8d270bb70fdf117189c5fda5ea148d7b590e84662af729c6a0aaa51f4ea94f70cdc941fcccab1ee6e4d0dda62bffa6edc594a48d14243562b9bdc8c5f78ff0d0fbea381ff598466086e0125b0ae5213d864fe79056cfb98a07", 0x88}, {&(0x7f0000004b00)="83f31a8ad442cf9a2d256404d77b1efc1a5591df50f8fc012039b88b1d9c88c4573b70292bd5a0df5b9e46532625a24df636c2c18cd70c3f29a2867b3f9af6eb068151ceaae8e2f695c3e59484934879dadeb3f45ab17c1a2427cd4e17eb186c087b", 0x62}, {&(0x7f0000004b80)="9c7f986ef64b392862aa5538e48d7dc54b492ee5d8731a006e8313099e81ce739b85a90eb906120d482e5865894d65edf1ab76756a1aa7ccae9a82daeda0af0735c07d324f559ef64b29b6a17e4bf9760922855fcd897f11cb0df9ad0657f22314732af9dcf0fec0e6cb5181d9e7bdfb6544a26f2f6ff91b6b1201295c5435eb33d7be01b0b74f8be88560096ba67b6dbd09b1286fbb4c1976db91b18f6bb61930334224a0f18ee710b09524bd5b600c9ce7caba092b24b916a15dc18bd0eaa7d9eea68a787e7f74d5ed8644b2e04caae64e712f4bcfd0", 0xd7}, {&(0x7f0000004c80)='2F', 0x2}], 0x8}, 0xba25}, {{&(0x7f0000004d40)=@ethernet={0x6, @local}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000004dc0)="144b07ded6c9b7c6a22b4cc8b24c2ec25ebdd1b4dabfa635169974", 0x1b}], 0x1, &(0x7f0000004e40)=[{0x50, 0x10c, 0x8, "4aa43c3ea7ea974f29cb07e625a8395f5a71c49d409271bf178d3718d64bd32a131b7a8ed5bae687ddcde22b04cc23e4a448fb53846873ae7d458ce4d89954"}, {0x58, 0x10f, 0xc226, "dbe0c2cc5a568802b165a1c3d203d731b25223537c543cf48aba26c72d4ecee8c8d5fa4387540412dfe6e18106ecb3408a34a37875189039e04512161cc5a53f0ac5c59e965e394e"}, {0xa8, 0x11e, 0x1f, "b476d9f010f496bdcd5d6778967f4c6702cac0da383c3d9be5153583dc37e305440975ab56b14f3b0d1767c6d9a8f550c6538efa2152fced4a31628438e217568b617f192282fdd3e40c58817c44c5b46c687ae9da6e3c9f16e2a53fc44afee568cf836362c15243d7760d65c815b32ac1f2b04746811b933fe0ac406e8523890783fc22bbac1fc4ad08c70fd53f52d50aaeaa1cfa171d38"}, {0xd8, 0x29, 0x1f, "7eb44782ee8cb35db64a5aafc819fd98f407d2700eae280c174f7b487569108f14beaed01b388c2596a044cecaf1be579b5769c149083b6f97d00bbbc0b9a35ab0d5320b38a76bfe3a003ec5fdd4e61ab9f1111f10cacbfd312dd938c88f3a294c277805deb2d825322a8f6ef108e3e6d30b7b0698e72ab19d64c9560b68b382106620c19da550bcb0f09940942eb3c5c2c4cd8ce0ed9d831edf09dc377566441de232039212088cc391d4cae210958da4d239245a946fdd422956336b3fe4e6f95eb05bc3e3c9c3"}], 0x228}}, {{&(0x7f0000005080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @local}, 0x3, 0x4, 0x1, 0x2}}, 0x80, &(0x7f0000005200)=[{&(0x7f0000005100)="d6c36d41f905c2d9fd363df2e0642eab28c23831ef9c5e34f2fff1e5047e1ab00cd0681feda958e1ed078df647a7eb0a81fa2e5307b36c5a2a56a8bfa082a0238ca6ee5137c21c387f693dff303e886f86da08e0f00ea09972e922afee7ea6ecb5a99b12a7ddf4fa338f5191ec8fedea4a08b5e38b78557d0bc22dfc6ea0f9d2a85466cff38797a750ab0f7a9268f1e727ae51e5daf054680f592567930ad4dbe951862ca748e47d9f3a70c4ced7576f6202d08636b6eddf6d7f58ea859d9869f6f2b8fce773c275bd363600bf1f359c4b41d9184c", 0xd5}], 0x1}, 0x6}, {{&(0x7f0000005240)=@x25={0x9, @remote={[], 0x0}}, 0x80, &(0x7f0000005380)=[{&(0x7f00000052c0)="a20e68d94a8b8e2c2ebc9bbe928a3ebe7e2fa0816fbf2435f086fd645ae3e3d1b1589c3df7", 0x25}, {&(0x7f0000005300)="47ea0d74eda51281be50c0bf6606c156422581efff384597b7b1125fb4f1a12c4b0035434bb014605c2f7c6bf58b891802530acf2f02f563dcf2bf30350553dc9a99bd5bb7067eb50ab22039610e067de586", 0x52}], 0x2, &(0x7f00000053c0)=[{0xf8, 0x0, 0x4, "baa4f65116fa63d1a82af6593d709c9fe0a6ab3dbd058394da7a2bbd2348fd808598c60abb1cb190d567c39252680a4f692b689afc1fce1a5020da2e1966e4404021851bf3ebb31d835ed5211c462f759910f54f5c4e14dbf6b860455bd076623ebd90199f01de1c69994c3d188026e9b9102640f739f19195c93d396a62de903e4c24c291d16a6f1f1004abeb9f4fb1d0ab0e60bf2dd09a17014f52fa8291044cc9082aaa58f8c9c026fa078b087cdcd00ab0f746d158b668056b69e830d41aa515f784ea06795e01ab0a40364a5fe5fe0bcb1d478f1f85f660e98712db1011598d1993c9e15a"}, {0xe0, 0x119, 0x80000000, "ad707081c9f9008478e4b0577754ee6aac90aece96447c02f66f5b4e5471eb39bea65de66283bf5183d74644fd93e68792b5bfb733d69c8de686e879f0bc210739e996610b02c79883fc11bba6097fa8b4d721d628af0a5ec074a10388932fbec871d19c87c6c46053cf55ab97c06128fee09a6403f8676f0ede511dfe72d1dfb763c2f368ad10f030f48dc490a17b21010e67a68bd66c861da548c4874624482100abe358971668f4824b25101380a7037ec3c2fe57d1ceee2ec079db7c89ea6171219d10f5b134e870c5c13f7d9c"}, {0x18, 0x10c, 0x7, "2f3919c5a95f7a"}, {0xb8, 0x103, 0x4, "ba731a81d5ed122cc767dbda195d4374908908829a35464a1317f823c43e50e760d7a27629d8f1b8babbe45d26dc7bbfd439a4165d38aa31902e7fad06dcdb34b308ce0f3ff69e3739f3eaa99776e41c80ff433ccf87ace8db9d84eeba29397880a5b61d7e4498bca1f7454d6889b8d24ba33573c9ac87642ec03534648e4745c70fd72dea42372510df6b356e2ff1bab99040f24b77670d66bce51df9de72932c3227"}, {0x98, 0x10f, 0x0, "5d9813f9cce4bcfe2e36c0dbf647b5370b2c05c768a96414ec5f00dbf5ec8911c87b9baa2475f75fcdd89ef41032134afe36db19391a030073ffb97a8efd7101f0ebaaf88dc32f38863419403a3f419a9bf856e7ac9e5dabba6c2cc27c894fa5136a33a699208d8695ac74315e93c78a0c9a87e7fe4f74be70f1ed85644befebe01f52"}, {0xf8, 0xff, 0x1f, "28bd697830024da2b67a35f80c0888e675ea522ef53d0169548183092e8ed7cda393da534d2914c57ca47edf6ef13174defee57ebcf013462c11780f47680e30b6fbfaacc7b81734f4dc8ecc78e1903db4235d2b9fd57bf5cc6dc5cdb82d81749200d53d8531fef9c2257319f4956c581a14ac180bbf8a458080d48b754bd698d0953f03a293a181bcddd556e5cb39b7bb573a94bf3486301a35b07425c53c49bcdebd5f3bfdd3225592c4d0d005641e106467fca9acf9f17ec5f4dbadca6bbff2ffc5808c261a8fd196de110b85c658e5895e223e7a2fcd9f098e1204422b700b9bcb237db34e"}, {0x18, 0x110, 0x1e5, "e71610"}, {0x1010, 0xff, 0x1, "4dbbb5ad209cefe824eff28836ad16971120428312d8aa9e678ab837d86390ac43598f6b271c076ac9d0305b9d6672026756ab167588947328dd75c8431ebfd9924c80750e57ada8ce01106f9febc227e3695a1258e572e9a763738a95a95415444583339d213e0db5e9b6165d439d490173d53ca5c5321ad99647142e422e0eedfed0322b5ca37b2c3cc6cd3c152d1e213b060809b029f7cf42f21139e52d1001c6938524d6f75a960f856a1fa3177ff6d9fcd108d6a30a39de3bafbeaf4298905038b3067fb544e264fe387819c29eee424f98d97a590ad68e00cc9fed02cd7c8ff1b664eaa62393e28b698feefa2fb482d31667cda12845fc6c28e78814781397c0bedf00502bd560349515fb749c2b4eaca0581829b2175d7527a276e756d8abbb3ad9fa8549fb134525639be019fbe96cf99eceb528f84f66ddd0cec505c9f162459d5d86e3e8e64d66b5c9820bc87d2d9fc8073a4f58cf8d4d822fcda950a0d3d3435b3214a022986c969d323a8a2e98b129db22a761366cc045eb1b6aed954e288aced9f8977e1527831f74a2ecece44fef1b70e9a73db4d515a4245ed41d36b3cfc1c85eecacd0be8a1a756bc52524be25fa52ec2704d552234d248b12f7ae3a5639d59ccc5e5255a4531c9ab2a5fc50bec50afac462388aaec4f05a6f8381533a6c1cdbc6b46356b26b26b989d4c985769971d63dc992008f542a43eb933f335264a0c47ed7c13df9ecec338877ffbd688bf942a99b551042df66348e2b142d2d7e33b984ae3b8732283d403c610ade79532a52e905a2582aa6c6502596b49077511c52c84899f9e116cd13c751f44a5cae2fe7a47e42ce4d5483d0c67d2b4d3cb7f05f3e4b58c4fa99c6dec99223e6aceef99a9f585a71d0274975941a99c0cd3146eb7892910927b8ee82c198acc3b11e4201d50c47584542f806ef6d61f2a69cc33eebb8ac54c1d7cc07c72f308e9942ab70c160366668de30bab14859c1df630707d6de1a3296c09626ffe73353ff8854af3314738097d262099983d727ac624136368b30749fdce21195768c8a036463eb1db8c69d3be07b287f1c59ed5c6df307e6c233b1a3a6d4201ce764470af56edaa2ba877fed3b857c84c12b053d1dd0dca6a7d3cd29047e5476dec4eda787890a47847bdb7434f5bacf2d186ec81f77be34756e324624d57bd3f9ac1b5d197a624f35718081f68ee0aa8810d34aacd90547d81358cac2f0af1f731e8366656a08bcb472fb3be2ef9f8985cdfde03138f4aee47ebe0cb040455e0114388e83593e3bde6f61d8ecbeb87324de492038012ae82373fc22c84dc0841c0d29fae1ec1b0e78062f838f811ca79b0374e9cb564b925acccc039a19bbe849f9829d020b693e429e601eb12b84bc4d10bd22d881eb2e493bf69f0b754ff57dd3c6431d4be974eb614618c33ab72fcc2a5c4ccbc35098ee7750b8b14b404da3da7ee8af591a0cbb1557ffc831e617cb21bb81df923b39f50f2bd309d638228111e9cb4717953fde3282921a5eedd8f831fe59c3624fbeabdb2e469bed7e8e99b38e0739f6b487c775fd877067c10e122cff80fedef93a11726a6c6d2a1758aa45785f44ee83a09de8553830f67fdb33a04b01991feeb6f83ca42378232c01946346510a8421fa513ca864d30166db13918c89aad62186d4d85177a500850a686e3af7501fa5a82bf2c050a598143eaf6a49e0ea402b66673d01c8496d4baecb81af62e366f5a4edcb9cf34d0fadd68209c7b3e3ee84fbcf4cc5180d34ed1d6810c1dc64da56f875a18039981164bc56707963065c37a2213f231ee4ca02e65f5bc39ef73b85b0ce54df2fe96bfd89a765b9e1efb730f827eeac1895ef30ce4b1e2044d68fc64fac75a7fe35126fbcfaa8be4b0d7e4e207052d15e742bf46464833463bdaf80088548170fc2c46d9ae78710fbfb41dc77bb7918a35b9184a8735a36f4eed881b3c19060a6f2eaaed884b082952f21952b746a1259b6856d5d9f2148d38aa3667232d3b1d91933f25a19022b66c8c8b996688383cc3a4fd45f882fefa6040d2656f85559480586aa0d1a3bb9e7d155677dbb83bc824154b8875d32d0af4af3fddfd96278e4b8e8f7d07bc861e09ad815da22abd84c34926daeebba984a0d212a636b3124b2d6c5a712fbb131fadd8fc37a6b71c34987599581c97f6a5a4f226aafa850c2b29f00729dead3458ff442cedf7c9b577a48a45446832902bced58f57297870c5e441aab7ede0941f9c5c1bd0f8ba215b3738408ec8fc1ebdb97f6f23982b76b95982b5bc18ec0cf00260d486e80d501c85b03111175666fc055164d978d1278e0d542a94fca2edc1686291276c3ed64697c2a0c2fe96d7bcaadc461735df6fc2cb8a45d668e9e7b0c36da62114d611a4cc797c18c0da70a655c7c4f800b660af334fc5ee68c87afee84fd4737c963c2c7731ddf5553929bfed654f6046611bbec79c02feb28a9346ace38aaf51c7e86f107e5e98b33c1196b65bcd26617cb10ac4d9b6e8140774443212fa8ff3bbda8cab25cd00f8136a982198338ee6c2bc269e19b9845eb1360559b7b89d1eca9190c1feaaf3d1e993628f5eae7bcab198fa589f57bd6504adde6aa7154c5bf5d9f1a923137148fa0e5a5d41cb933b10bdcaec5d8415e5d0824f237ce981478a5d550609b12bb1c515fc73cabbd17c36005ea34588cb9762f485f78850f7586392b0ed00610f46eea73b2a64d79beec6aec997cece606d8a8b98848fbe5d2c62f557158ac08c2eac20139bcb6e3e85a6570dd103432a9131ea205a739f40bfa230a6685b8a4d141c27c9ec705b108c82a09b4b221f56305d528ca206b7f6a6e796a7172e61dcf0d707cbf0e34abdcc9cd579f24fa3f028d5f27e2341e523bea9a984bfb22faf7b02f1e48504786a0549505ae515d6aea4b3b1e7ad78001f47229ae03be9923f578bcc2aa48985a6234658ed2f417ba2a067f7ad1000ac50a678465c437f7a46691e995ea07d4d4c0f6e31076df394433c6c19ac335989625a5755463075a5a0bdec8627415a17e41653a577451d338fd8e62e0530a0a8b3ab21ada4d8f889f0fe379eb35b76df8a6fc92976f297b84eefeafe43873645c0461011e5f1e84d975c7c483517f3b34678932c4ee9db36d9683bac32846042563bd5c2dcbe12246a70f83def71bf5d1811d7304dfa82e086e001dd903c7d97b74f62c9486dfbe51dfd1809fd68f81dfdc616ba52315d04cab6d887db29a7146f93de41a1e36e5864daa97c4845f849e5da1f48ecc475909867f601ea246977f4f04165d78cb30b2bd7de639f5cfce8467052d1627c4ed854b9eac2690e3f28d77e0ba5695b7dea2edec20ebdf8dd371dcd57830b35fa679e5ded52cb619afd3107d9faec3d2b049c56a6f43b3466d87035167de36ff9fa0461e3e1dfeef9e736bea7f47765f00115696c58ad53ef1c6365342c064430a5ef05ac05f95a60c33b7039cad29a0608f138ee455b8542d970d0f3dafe33860e3367eecb7ba20174fad0c5e822589b06e8ae7e281ffd4041be8c3c34762236edcbdd657e2567d2a6a57bb4882d4e5b823765973cf7f50409767dfe2c61172c5c52a878a09e8d17454a50bb7dcfecf1e92366e6ec139697d59a15eadc12b53698f996b4c9d6cbe538f9981ac5b1385ec2b4a49fbfee5a8f7a0477a0dcb0f9ac194b793a6b159614e38f3e1709f880ee1bc93bc1a6c35c58fcf564438597a8ff6e1304d140220fddf0e5b766ec42cd65a9d2915fc1e7cfd9f5027a5834eff203c9a940088ea1b344861f92cff6b9cd023941802e1e966964a01a7d078513b8e192b17d611968be004fb2ebab907f75be771f0d9efab676a7bcc2a9b14128d63e49355d429a78a51ea533c8264a1b73d926bc1fee161cc5c9e58b5e863d3d3f8c2adfdecc7368b095f3fce039d10d6eac37ebf36c18d9ac475d166ea52b7ab506aa721263dab43e3ac44f969fd42e5964b3b8def0adc892306dbddd7d0a57ab13db415f03297083d8ee017fd8c78a34e99109f1d4a44b86190d4ad0c868b03428d5b2b6722fec5be246c96740e93aaceeca06538327c40db402a9a5f8693b4585a8d2a1b39cd06a60c880c3b5f57906016448bc8119961a49c3db050053b0b85dfe11c89339f65147def543e03fb1930d3fa187b397eb9e9b9b0672642272f8a566e32c42972cc5923c2e261260e091a30071838c2f0235e52e0d0a7eb6d679dd4cd4fc605a6c5163e8b49c949d7e53dadaafec518dceef7d8eda4a4609ba057ded88a001cdf516bd00943342fda32d4091843c2779d747cd0969311c30153e149b3d87f965733a6f82cd503977c580be07e36057bf600717bb9543719e07a457981ba7aa6c5fca173b4e83c5af52f2a20c79bf872316b0d5976a4da44ee9c112a56e7f7ffa1c1e3cce78ff68e5b71bc6504b49f37a24f06568c4b793b1f0670931628f0421b4eb42fe636513c8563d3eb91fc98dd723683ffade7bafc8babf9efb0b0d8667e57b43436bf5cab18c0f8b1292a178718475db4c46a62091296dbc48b8dbe2c93df0721ac91d8c5ca351147e92b4d305e375c297a061bbba09e00fc61542c3ae3ee036dad573e6b1743c13bfee24be582a365676631cc1749f822d741aa86af33113659d11aa40ffc6bc3ebf6db6be982759b6d78dabc866b694c0021ef5459027e7978ff514c18bb5d3b52398dc82bfdc2ae7322c8e91624e03d9f35525fad0548ebc4b73cb9d8d11e0db13b7f9bdb73229af9289c4c0f2eeef1d71eb4632efe3bcb4d277941ea1bd85f8fe98da984996636b433d2e2ad3aacdb63872af24b7b86fb4b50f548bc21b551ab200532cccb3e55900dbe06f6b636a18700822e30e6b0c46416ab73339fd9440a8ecdfa1c1ee0e789e14345e8af5a4e53dc914d164dd76cc94b3978f6b4e0837b29c4c03a6c6f1f32bc0c176b7a23909e7105651a370444e536b566724b01b444882a66c69c878a411dfe5c7a779d22a2578815ea4a972054bba434c83179cb1defbde405681ccae6c1f75ccb3f87c1321eba05ddb6dc995d50d900cb8f8699531859b2457d61d15949a63cba80593208a1ff936ef014003abceb12c0fc618de79dfb6b3c9bfd20d8695c9c557828fce63b3b9c7b2cdef2a43d5ccc274203f80a1be02c01a37a0b61e0393d433efc221367692301b83f5e638936695f06458c59998ca6e94bed01b5a0870f2937672fd3669aacf8c86cb209794918fc26e0576823f9f55f9bf4093a08f0f062d0b1049bf186cc9cde02accf19d7d2a1596bc053077cc9ef65542ef814c47598fc247499a41906db89219f06690d499ccf4d0e229b0ae3d850ba03f2ccf0b2f11d44f064f46090e41e51bcc0007aaa753a6f4e4bcd6f0f2e32a74be5bf1dae465f0c3d57aaaee978e4703e777799bd270050ceab5e6ceb6315120513646b94a1699082fba84594953380cf7fb0881254fd419430eaede41512557b666b89035bb81e39cf9124aa9e4dd257f1f20d6c99c03c13f2c2a7241ef0c84c6a7ffae337908e0319f9703a2e801cf30bb22c52f8a07a4e5ba02f9421c366b2812b734d8e3f43e4c2acf839ac3136b2b9f25a5fe04744186a5301761f1a6366dba5c55947eb17b8751d8727f39b674131b449db0b3b3040ed289b0a650314b6e0a2fc850c4d34ce477efac74475619f7eee5d81964e4dd0959fd6e6d21adeb2acc46f04ffd370d50fa5c93ac988151f1a9d402452cb624e7f31ef7dafc506da9d04466259cf89c22bdd"}], 0x1460}, 0x3}], 0x8, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000180)={0x20000000002, 0xb7f, &(0x7f0000000040)="91cb062fc10cf19a541c0b67d6137697d3d5bbf9fd99095905362b06b6f8e8b97b77b262850e2f246b529d82797465e1a6674767e299252d2f561fbe31865686d873b6b6ab2da310763a5b26743228e516d3b442cd4dc1996140d9b157334f32ec2ebf75b2bd03b018eefdbca6440e7cbaa63edaee6023a95e4c87ce7f3e5a59e4e11ba3c64e41501af2f8f2667ebbb8088fe4fc295ef6bfba64e548da8e9cc4c1ef720c90898b9e7d16cc79f3c8a00b86e9903ceb", &(0x7f0000000100)="bacc1d7908b728b21a22c5aabea88b6d6f00bbf531e69296b36dcb55dc67885feaf694698f2af17951a204f6e6646bbf9909a8b20ac96f9510e88e007082457068489c48501efda24b46d81c961a558f80326d1334c131375696a2", 0xb5, 0x5b}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) r2 = getuid() mount$9p_tcp(&(0x7f00000001c0)='127.0.0.1\x00', &(0x7f0000000200)='.\x00', &(0x7f0000000240)='9p\x00', 0x1800020, &(0x7f00000003c0)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@access_client='access=client'}, {@cache_none='cache=none'}, {@posixacl='posixacl'}, {@uname={'uname', 0x3d, 'eth1eth1O'}}, {@fscache='fscache'}, {@dfltuid={'dfltuid', 0x3d, r1}}, {@aname={'aname', 0x3d, 'mime_typeeth1em1'}}, {@dfltuid={'dfltuid', 0x3d, r2}}]}}) [ 1000.593444][T28857] binder: BINDER_SET_CONTEXT_MGR already set [ 1000.633070][T28857] binder: 28855:28857 ioctl 40046207 200003c0 returned -16 03:20:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) [ 1000.669862][T30765] binder: release 28855:28861 transaction 883 out, still active [ 1000.687034][T30765] binder: unexpected work type, 4, not freed [ 1000.704422][T30765] binder: undelivered TRANSACTION_COMPLETE [ 1000.835780][T28878] binder: 28876:28878 ioctl c018620b 0 returned -14 [ 1000.915873][T28883] binder: release 28876:28883 transaction 886 out, still active [ 1001.057097][T28888] binder_alloc: binder_alloc_mmap_handler: 28835 20001000-20004000 already mapped failed -16 [ 1001.068168][T28841] binder: 28835:28841 ioctl c018620b 0 returned -14 [ 1001.068208][T28888] binder: BINDER_SET_CONTEXT_MGR already set [ 1001.081219][T28888] binder: 28835:28888 ioctl 40046207 0 returned -16 [ 1001.081660][T28889] binder_alloc: 28835: binder_alloc_buf, no vma [ 1001.095319][T28889] binder: 28835:28889 transaction failed 29189/-3, size 24-8 line 3147 [ 1001.104356][T30765] binder: send failed reply for transaction 877 to 28835:28841 [ 1001.104413][T28841] binder: 28835:28841 unknown command 0 [ 1001.113761][T30765] binder: send failed reply for transaction 880, target dead [ 1001.119190][T28841] binder: 28835:28841 ioctl c0306201 200003c0 returned -22 [ 1001.126066][T30765] binder: send failed reply for transaction 883, target dead [ 1001.146129][T30765] binder: send failed reply for transaction 886, target dead 03:20:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done={0x630d}], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:22 executing program 0: mq_unlink(&(0x7f0000000000)='/dev/kvm\x00') r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000001200)={0x7fffffff, 0x8, 0xb58d}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x101000, 0x0) r2 = socket$isdn_base(0x22, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000001180)=0x100000001, &(0x7f00000011c0)=0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000010c0)={r1, r2, 0x9, 0x1000, &(0x7f00000000c0)="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", 0x46e3, 0x401, 0x1, 0x52d, 0x1, 0xd9f6a1d0c6748bed, 0x9, 'syz0\x00'}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000001240)={0x8000000, 0x0, 0x40}) prctl$PR_GET_DUMPABLE(0x3) 03:20:22 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000040)=0xf001) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) 03:20:22 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1020010}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x800, 0x70bd2a, 0x9, {}, [""]}, 0x1c}}, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) [ 1001.153996][T30765] binder: undelivered TRANSACTION_ERROR: 29189 03:20:22 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000080)='/dev/kvm\x00') r0 = syz_open_dev$admmidi(&(0x7f00000004c0)='/dev/admmidi#\x00', 0x1ad38d2c, 0x902) recvfrom$netrom(r0, &(0x7f0000000500)=""/31, 0x1f, 0x20, &(0x7f0000000540)={{0x3, @bcast}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null]}, 0x48) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xfffffffffffffff6, 0x80) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f00000003c0)=""/148, &(0x7f0000000480)=0x94) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000200)={0x8, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="cbd72f80c63cec82528e94197b6bcd23d122540adca794663902d7b3b032419be45c533270e9389809bd589df40eacf570e16cdb9a2555a58d55b43e0bfe14aa778e873590a860b328f81a0835bcfe8d7be99e45f022980440b188e6c90afcd404d5b71f7398386ff49855fff267d1ac92d5b4d7d752df956abc8d483c011a9ab34d76a8456a26d08b85035f4cd9224fbf453196878a0eae3b9ff6a4f29b40a0d48b6553aed6cf141535f6dc9d9797ba6c6a3453db9a31c05c1ac1b7732dcc0b7ede611b270e5b1b6fec05fbc01b5a20af02a034f4d1e3260000000000000000", @ANYRES16=r2, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x801}, 0x4000004) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f00000001c0)={0x20000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x408200, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000380)=0x1, 0x4) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000040)=0x2) 03:20:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 1001.340744][T28906] binder: 28901:28906 ioctl c018620b 0 returned -14 [ 1001.363564][T28917] binder_alloc: 28901: binder_alloc_buf, no vma [ 1001.383631][T28917] binder: 28901:28917 transaction failed 29189/-3, size 24-8 line 3147 03:20:22 executing program 0: mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:22 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x80, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x800) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:nvram_device_t:s0\x00', 0x24, 0x1) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x20000, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x8) [ 1001.436122][T28906] binder: 28901:28906 unknown command 0 [ 1001.470610][T28906] binder: 28901:28906 ioctl c0306201 200003c0 returned -22 03:20:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:22 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000040)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x1000, 0x7, 0x77, 0x9, 'syz1\x00', 0x5}, 0x4, 0x4, 0x257, r1, 0x2, 0x1, 'syz1\x00', &(0x7f0000000080)=['6.\x00', 'em1posix_acl_access)^system[*\x00'], 0x21, [], [0x2, 0xffffffff, 0x0, 0x6ac35c67]}) [ 1001.629294][T28937] binder: 28876:28937 ioctl c018620b 0 returned -14 [ 1001.683953][T28938] binder: 28876:28938 transaction failed 29189/-22, size 24-8 line 2994 03:20:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done={0x40046302}], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:22 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x131040, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1e4, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0xe4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb84}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @mcast2, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @loopback, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0x58, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1a4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x84d5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}]}, @TIPC_NLA_BEARER={0x44, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3010}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9a}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x40}, 0x40004) r2 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x8) 03:20:22 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000080)='/dev/kvm\x00') 03:20:22 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$vnet(r1, &(0x7f00000000c0)={0x1, {&(0x7f0000000000)=""/149, 0x95, &(0x7f00000001c0)=""/254, 0x3, 0x7}}, 0x68) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x2b) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000140)={0xc63, 0x4}) 03:20:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:22 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x40880, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') [ 1001.980502][T28956] binder: 28948:28956 ioctl c018620b 0 returned -14 [ 1001.999868][T28964] binder: 28961:28964 ioctl c018620b 0 returned -14 [ 1002.003640][T28975] binder_alloc: 28948: binder_alloc_buf, no vma 03:20:23 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000240)={{0x7f, 0x1b5e, 0xc5f9, 0x0, 0x73fa, 0x1a}, 0x1}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) r4 = getpid() getresuid(&(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)) getgroups(0x1, &(0x7f0000000500)=[0xee01]) r7 = getpgrp(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000640)=0xe8) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = eventfd2(0x5, 0x80000) r11 = getpid() lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) sendmsg$unix(r0, &(0x7f00000009c0)={&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000340)="04f8d1bc6eb56ef6e384e837ad4ba56e71a4522a33d07b729b60192d52012d49f3834fe4b481a409f790e7bd07648d66a80b6a71c7", 0x35}, {&(0x7f0000000380)="5a5c9d646b358e3b01", 0x9}, {&(0x7f00000003c0)="177670a425cac750e1e7ae8a69fbb8595296e37a", 0x14}], 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="00000015d93563c1a67e53000100000001000000", @ANYRES32=r10, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0], 0x140, 0x5}, 0x48814) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) readlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/111, 0x6f) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x8}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r14, 0x7fff}, 0x8) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000280)) [ 1002.057463][T28977] binder_alloc: 28948: binder_alloc_buf, no vma [ 1002.064090][T28975] binder: 28948:28975 transaction failed 29189/-3, size 24-8 line 3147 03:20:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done={0x40046304}], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1002.146111][T28977] binder: 28961:28977 transaction failed 29189/-3, size 24-8 line 3147 03:20:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:23 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000100)='system-nodeveth0(\x00') r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) write$P9_ROPEN(r0, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x84, 0x0, 0x3}, 0x800}}, 0x18) 03:20:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 1002.298060][T28995] binder: 28992:28995 ioctl c018620b 0 returned -14 03:20:23 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) io_setup(0x4, &(0x7f0000000100)=0x0) io_submit(r2, 0x2, &(0x7f0000000400)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0xf520, r0, &(0x7f00000001c0)="3164e62bc4636feb24702d49eff62f000995a012509e490d74f1b73dc2c455e03862552066642bbec9a103bca51fb9f7c9b60912a53f3f2dc4c1ccffa74cdef0ca4fad479f69823cd2c954c3a23b6fe0b46eda13a7c3470ee97a301be22c39e6273cb01fcabb7e8380ca3dc20d00df9871018c3a0858e268ed14219e48cd93c9bc7ffa230bc530543ce7f6a2d6330c8fb047404c43ca77a1ce5075250387bb69056cd0db64c306a7e1688b88277594a99292", 0xb2, 0x3, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xf, 0x2, r1, &(0x7f0000000340)="9bf6b2a7fa19bd947a161388074873ee78d6ce98ec48fb11ce037095025f9758f26062cbd92cf64deeb664f2ccbf3eb9e35282b77caf15a185394b2ea3b25360c7c7f6ce039402400dc27fe5", 0x4c, 0x0, 0x0, 0x1, r1}]) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={r3, 0x3, 0x46, "c1c7204e5edd47ac819b89128cbfaddaa4b6287358b0869207f2316c050abbb4206c3883cb7705e4590613ae0fa33f3cce05b3118b1a4bf85d96028bc024743b0c6e40dc6864"}, 0x4e) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:23 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockname$inet6(r0, &(0x7f0000000040), &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 1002.450109][T29010] binder: 28992:29010 unknown command 0 [ 1002.454572][T29009] binder: 29006:29009 ioctl c018620b 0 returned -14 [ 1002.474045][T29010] binder: 28992:29010 ioctl c0306201 200003c0 returned -22 03:20:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x2}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:23 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffe, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') [ 1002.523335][T29014] binder: BINDER_SET_CONTEXT_MGR already set [ 1002.540038][T29014] binder: 29006:29014 ioctl 4018620d 200003c0 returned -16 03:20:23 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000140)) openat$userio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/userio\x00', 0x0, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000001c0)={0x0, {0x1, 0x100000001, 0x9, 0x100}}) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'osx.', '/dev/userio\x00'}, &(0x7f00000000c0)='\x1d![mime_type&wlan0%}!cgroup\x00', 0x1c, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='selfmd5sum\x00', r0}, 0x10) 03:20:23 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000340)={0xf, 0x8, 0xfa00, {r1, 0x17}}, 0x10) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7ff, 0x2) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000040)) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x1, r3, 0x0, 0x0, @ib={0x1b, 0x7, 0x9, {"d60863a403b0f8627f7b3e4488dbdf78"}, 0x8, 0x200, 0x6}}}, 0xa0) 03:20:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x3}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:23 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000080)='nodevppp1[:+posix_acl_access\x00') [ 1003.091840][T29010] binder_alloc: binder_alloc_mmap_handler: 28992 20001000-20004000 already mapped failed -16 [ 1003.103580][T29010] binder: 28992:29010 ioctl c018620b 0 returned -14 [ 1003.108940][T29055] binder: BINDER_SET_CONTEXT_MGR already set [ 1003.116606][T29055] binder: 28992:29055 ioctl 40046207 0 returned -16 [ 1003.121707][T29056] binder_alloc: 28992: binder_alloc_buf, no vma [ 1003.129912][T29056] binder: 28992:29056 transaction failed 29189/-3, size 24-8 line 3147 03:20:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done={0x40046307}], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1003.139531][T30765] binder: release 28992:29010 transaction 897 out, still active [ 1003.141262][T29010] binder: 28992:29010 unknown command 0 [ 1003.149077][T30765] binder: send failed reply for transaction 897, target dead [ 1003.153009][T29010] binder: 28992:29010 ioctl c0306201 200003c0 returned -22 [ 1003.168451][T30765] binder: send failed reply for transaction 901 to 29006:29014 [ 1003.211186][T29059] binder: 29058:29059 ioctl c018620b 0 returned -14 [ 1003.237990][T29014] binder_alloc: binder_alloc_mmap_handler: 29006 20001000-20004000 already mapped failed -16 [ 1003.248684][T29014] binder: 29006:29014 ioctl c018620b 0 returned -14 03:20:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x4}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:24 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000080)=0x200, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0)=0x80000001, 0x4) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:24 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) sendmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="50568a3a2926bf599ba7a817b7be17b78bbbc326943127cf24bd7c5de9cb022440cdf65b8e6e356a51676945d4f93c27d04e7ca4c98365de8a6ff8476593e11d0a86a9273ca53090a097aafed90740a1aebd634d66bb1bcc134d25657df715b4e095a8c7e412c392389d06882ece614fc45e73b16360c0acf7f8ec34d0c8be9ba007d2d2f63c02f7af93ce6a38b893c5a5ce525d781e0abb35e1adf0aea9042be5acd4b0129d91df9e09379f9e", 0xad}, {&(0x7f0000000680)="c910943cd6b416446de484235bc31e70a716c0cb4a10e95ee01e27b9f3c020a7ec2c763cafca879bd5b6295095dc8a6a72b7067253e142c7602a04cbcde6f42068c1e0c29c1a629e19b403339bda08737e08f5a1c236ffc2e7f98e0cc6a4b7a32a695fd64847e770b51307d505bbda744b2a6ef58b7b5dec3394a8a0ce1615f21b6fcdfff02e8086089a75de378c36ffec262fb5061ea4cb42b62dc2e9684f863dc37d73de46b8d6d0dfc56fc0a506e8ee8dae2d9c1403ba35968af72fd2bbb8ef50765d36bf256a557facef025fe9437bfe449aed137f8b68767c6cfe0d8bcb9b80a043d383770a4f91fcbb7f5956db9339970fdc734216806535ead7a44cdb5ef23b85f753e9d4a916ab06ef14ea7e55847999a9a68f7a07748c668ce64c45e63bbf525e56abb4f2ba08064bfd36cecb525174d3f4bf9a3245b43ea6dfdbb0efbf52fd24fbdb5c84f4a41bdf55ee3c945639b7913506ab9a2a8206a331dd680bd7fb56048e0f2bb835e84471b97076e1e34db258ffc3968657984020335f8cc7acf135ec5a7ef2ef73a16b20b472679200a382836fcb1d194c6c60642d39d79068a9a5ce1727727ce84dc9570e15a0ddc8fda69a9d9f547d79f67c2dd85c92a3b1b4425fc4e42777b1f473c332f6fb85e5ab04cb6c2977d2bfc581e83f86ba92f8a20e1e53f20afa60bde100e02b955244a7dce8041317a2fa90d5c2c0fb0599f686fecaf73f5563a6cbb3e1ed582c7106ba1f97bbe52172af9ed9d45063afdcc836dcfa69538773f3a95c2e4a81ec4db80db68f604d5b48c02441bfdec3db9c1dafca92deb0f57ce03563e7ab0ac15cc46f659ab5da7a66bb9343e05a24b74d28930f6ba779748f1f4eddc9c1a2847ecba24667eeecf04adfefdc0591605da35720fc7de09b994cafa72e1dab9ed143cd1e44162e21de1cf43f6f5214d4db2873c3409ce50ee4d11c7f073b6da1b7e085096cdcced90f6c0af5146d0fb13f0a3d9e46ed810d5567844efc37074ca8bc11a73fbdbcb117bc2052c38ad824116a52e59c334cf23211489dfc0d1f3e72e1c1ada92dc21e35c02822a74950676958cfb88523a0dae3f76769517bc9a8e99247232312ceb175ecee9dfa859da5487ce764f0dfbd263ba01e9fa139be94dfad206324f079f5bbfdf060a86ab9161d6cedfce139066b9ded447ca39b15ba5615332c8c3dd4f4305bb2cb0c08338769b3974967b8838a839011c28358cad8793cc6c23cb6fb2280e91c85dac4150788c03e1e009c13a2dfaa52e53ada3b5f2caff4cbf4f13c7bcede01ed4e0df95b8e9196cb433ff28aa5d3c10f1ec440516931622b5475a390a90f5422233918d5ac8fdbdc0efaecfa9144544e66cdde86922357eff746b11793acffc56e2f96931354ad4694993caea08a5d8b7377fc40b7120dd5680cfe6a0c7e7da8022a46f7cedb8a677cc055359a1d0ef27ab55ff0453156765223c2f5585cede39729d85b4c9b478982e7f7f62926e061612d7c982b2d27ec305d0834f8fa669f88e0c07826d8502f8177e283f01cbbd16088964e686214cae5e64c1e0d977d1a3e64961a534c9b31f7837d2a58d72665acfa615ff8706db7e0229ea4fc332fea96d3bc7ab54272a3bca60a8396749279b32546025541cef4ad61e96eea9fcf93a5199e17fc4a5ebe5ed2a132f7ae1464d5f918bbb85200fc65f9196cf0616705ef79e9f89e91c57197fbee1720c85d32ece4dc9c5478312143fce7dc4470343154f82e3b29ea44536cd7e14b6443532de31ace68d7e173f15dc2bb1acb95c9ccde884bd8692ad54d714e1ae23c28fd85e36fcbfed854e5f6434b9a64a1a51322608a679ffa82d09d64d331175cddabe91b9f7680175d4387473f990eb24979a3ec3a518d037e13c41f7c4f3b46409862aca71e335ae886f95c44951744183f621bb0f0ffa7381a9aed86c030157501cf95080c80ad9a70be44c635f216467521eb4aa0a9dce0d45e969e48da451bd3d02455689b27d6a69694359bc58086d53ae36d3b636e423db02db3cd875b2e1b732ebad3f42c3076eafc32c7d28da97a206d0881816e4f9c68b5e9839dfd0124ea5dba52623465540128921e6f003c4e38f702ec645d929632be569ec68797566e0b8f585aea1db63844a953af2a6631a13bdc765cf96eacb631504d61ee8da4e8911ed9b509cb5529c315dfc3f2904b20bffc45788db430f3f12f452ba9f6f479f03e10fac25172c7e315ebc5c45ca21a19b2338ad5c5a4d72083ee39990fd5ec1ae97a089f10537bd01ee75cb9c3e99a8df39fed0ee44f02b9b2793035520bba187aa13531feae6cbdb07b198d025899f96d63581cf424f2a63bbc5e19f6a8d64e67e2cbd603cc04bb9fd241d5abba5cb0e4cd8f737705280d77b98be23c5735c379bca4c6820c22967ad1db1fd9495ad7c5d52741c8626e6e795d1fa9b30f271bce6879f1dc077d8b538e7fd12cecbabe193407a5a60910a83215b4e393b5025d3d0441a62b874494a7c58966562afb87aaa754a449dc140be6dc4a5e3eca069b54972eaffa6b12af4bbd3ec2569294627a167846cf3dec25b12cff8c4fc338059b9999f1bfd574efd80b8a9cde2748711f7a39e407a5df9fc5614f08178a8534e81a0a6b48b7019adc9eb9cf63dcb37466c1e432755ec5c9ea012385b749cd0a59f17741f4db924e54161bd548756b447f199bb8019c123fefc8d7f638ec73386fed7bb65f7b6c313f4a6fa8929a9410a0f4e549eac8eb810bdb19826d0e6704ce172877f971626ca38ffda4219e72e6b37964dce01dfaa857abe75020a8de63e44582c2b187a735a36c73661ed5fa71bb774559c63a9e1bd42ed39aa5fc110f26b55cdd4c3d9d4643f8963bb8cd996f99a17284e3dbb4f8622f20b882ca59b65b9ed4851b34d947d2b869f4d85f370f1dd6067e4b6320fb33e9ba40e641f04eb4dd4add9bd1657f44202d3cdb88ba3af200f62b88f293ca8e9f9321f24c33d8ca7964579b3fea89f2758bb53ab9c562aa44147918fee852e73d8d46734b6dd24e1bcbaf889e22daa8aef3b4d0d809c94fd17f2b72e7cdc1947fc011c9c266aa5479dced2ac97f282bb48c33985206256bf9c3405a369cef1f79e37f7d7fb47d8ba894f69c65980a686794dc6c089c5ba3bc260dc7fc2b14e6d4c450b0dbb6ed87e9ab628b4cdbaa237039e9a9b9a14bc63c6177e6a42de2f202866a0ef5246153864e4926caf63eee15037f5501adf5ddb529d3e3744a14ffcfdad292ee91132b3d67f59106712fca3e4efa01dda11e8b82e09ce78aa253a4f2621d03ff7a057896c8e385c8ee748ab3bae62da1ff0a83bb82f1e7ab799894f804c0f1dde6f83e34a622b3cc873b8f1705ea4ceed3dd7f1e1eae34b04bd0653cd3c98041551afad8f40fe42bae340f2600e3d908aee7e8c6629aed74c4d306a83b437708dda463e8c33e01e7d7a6cd1e1b9e39113485248d5ee4920968458a7abda4bd1e87ee4076650bf75cd0788ed949465b30f31b3e70db0955622f830b8cec4c263912f54d1bfe1ae85a4a7f2b02a90dc61b1f360723a1acfe9d8cca73fb6671d61cf2113942f2c1f352d66d2d61aa1904a206c45639d03811124c01190798708ebd057c0d062d224545e1eea3fd74fc7105d4448d901a47128bafc9dbb18e6fa2df4085640e4492248ebf46bf185880f2fd71357dbef08e1e24e3c3a25e4d60e33eb125bfdf99cf2e84f1bd912b34bd8d8b4d8099b1b88afe68c4e96bb0cf88b4a5a52f7c54a439e20df71e89ce31ac28b85172f001563f720527e11dc966e724c95762c433a3fd6b53f308f433e416cb3243d0a45a144b3195b2664561400eeb6ceafeff88e4fa237c925aba1530f85d8381313355ef7e0ae0aeb8b61b20bd92c80241360a1f64a8773cd831fe40bd242f0361c7cc467102b61cdffeec1373cf2dc574b0e410cb757ec6b77fff2effc4dc425d0afc824df78f42f6e710e02798b820916dea306d9ea91cb469aee404792b18a9383313f41f7059c8c2684e24d827f35c2e38f2a594ee36d339149b3729442b07c2c6852b375271b14846826675165fc4bccb0716591462d2d8a5dea36190338fdbe8b37c437999f18d6cfdc7ac1f9e79be01a6499070978e28b9aad06555c430b15df08bc384609c10ebeb34aca2beca09b8e4dc076179b194d8b0938824d4db1e47258ba9e5eb8801f9f3d6f4b22a81044a7cc717b8d1427d4b4b8dfdbf4a691d1d3619aa6f4df7978edeb139b39d7c0a2764d4a9b914bddeb6fff9c540b0eb0899a40dd86c4b43806d41b8c602d4674a8a0b4858da5ce9fe1a8a4d8504b2e9010fc8a2d4dec450323da3ec1e4bca83d370087aaac708d0d030563c588cd35f0148f486cfcd2c274156fa0b3e8b2065c4364efb4e6aef85ca6c761540f85efb7fcfe4f14320b9a9cea08571541b566549b587797d0dbf9e13f25f87097cdbb5fe8c041828a5157cd971166c60660c4195080bf8c124673def01686ecd81632b09d848b9d54039723fb6294db0a5db283ff5ef151a83ca20b4696cde321dd73b88fa470201eb241c0fe23894d23a4993bab716530f9ba27db435b681614132c433bcd57a2fdca23cf24dd3ff32a2eec7bdc1571826a18dd6c6c83a066a8b258e7d6166d7d9d19b3187449d24c31da3751fac971060cc75407665840dea09d278c15ed63cdd0a40a14a3e2976b96f02b272e609ec1f67397e666335016f9f7dfdd9c3ee135a5980beecf0ede9055bce0a6921ad9dfe0ba65e2681131e3a42ede8310aa751b26a49ee71dedf4542056c0fdf8f9a5a700ad738a9fd9f4a4d97786061cc027e08c004a7aff41af740290d48a02ff9a2c1455a7f2abd758f98790f4575a8fc2b681bec2aa63e264196c0dd9163fc7ddca80b147286daee5292dbad9deec52026678c34136637d0e2f591e293078f10a01664befdc2ed86992406c9247c6e345acda98c2fe9b2fc63a000baf0c5d90665eac76acaf69d1e3854f7d39f24ae4d1b9d873e9ec2b1fde7a929552f47613d6e3953822f0937d8264898f8c1bc443740f54c5576396a3c78c0158bd7c33d26edf5af4cbeec95cb273504d81fcfa9ffb45b6c5fd00c44156fb40d1c87243d9798cc6e165e75eceab32ab546d6a40d2e8609494e26cc6839da210fa937733d52ff2b0e544708fc2b644af5ef6e1ea7326f39345b09754deabe96181b4cd16a46ad461191d4d70630738414880f9195b5c86fee6c9bd524c8b41bb8ded47bc3a44b9658a1b7961c53663af5bb5d6148edc1fd61b5e2120c4c436ee840f752753e9e34272b4806c6bed95ed047e1200ba839452ce0976ed95ae60031475f2d8867f67e35e77c315220c9e4042bc4c90e93dba6233aaa811febcede2f1f129513c3679e68a8f3072e8f2f048165dd298e643f5a5d6f911241cbab60922cb279d39847db97c90aacf0ec9dbaf3d9be9498b856c997eb3f0bc095fec923cb96e127c22656e8432599474b7ffada9c99e88b15716967a09ea31210aed0cd2a66823b1d8e537f89c58c507624e3f4886a964979300a6caf9f863272e5d34da76155289352d772b2c16cab4f5a5e1315f40fbf7da106c6d07ec4c5ef35ce521ef2313e32b3d4154c921ce94303f608a110de231556b5df4612957562966ca6049bedfba35ecbd4995fe0b25799dbe749a2c355f4465f38cedb3c20befe036c18e81019ad6a7f9fac0a55e469f2601076bc0729b4d0116b5f8dba5793b78ac2968fc047eb3be7ba96c18570727eaa8ccd0ed7b63a2b", 0x1000}, {&(0x7f00000000c0)="0f2ad71184c1e6156c6d3a2f7aa3185b317f98dbf0b12ab7a821ad2d66f068c7b2bca8538d9e74e49e989afea21d3462e2dd2af8e9f59dc2ef452e425fad948605d6962ef4a84f0ae4fb26fa4ec5eb97aad67b395946c88fe7abb97b13daa8f6c330c8c836396fcb4ca7bc366fdf562a9c355259a7e9ac6d770b55", 0x7b}], 0x3, &(0x7f0000001680)=[{0xb8, 0x1ff, 0x1, "584a0f1d25456aaf7819eb1529c3ff5fc43cfd233c19fb56c364129f3f144d312240640a274e0fc0d9ac8c5b152342206bdd9226de0facca70edb2f6331a0d0a023b58f00ca6e16c9342128c7caa7dc5e21d58eb3a812f1e9984ab3ee4f280ac744a28b322f6a90ebecdac461ff7d8ad08e89c9c9da9ced1b3e066eb83208416556f521f1b81d5e9b1705509c73578167474a783afca0bd97fdb22f88ae43188a3ac9bd7e4f804"}, {0x1010, 0x0, 0x7, "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"}, {0x110, 0x0, 0x1, "376948a571bfddb344ff89e78c6d77d30f82b33538c6f26c0b7983c3d08282e2bd7bc0688086c8d985ffd15a1d8b0242c90798cb3686cd131b958d730d83daedb3a7c7f499fed9280d008906f0f53d8eef1f4e396eb0a34e1df7db1d91de0e1156618813ab2e68b537e3ed84c888abd32f39a8d004a146e86010e5dfb44c0eb0efd460d560784a179d83591a3ada8bbaecbc8acc6af46d82c4068dce8258992ca23475e4750dcf1c2143d8068228ebcb65ce52cec79ca64f8ce949f7eb4a2fb2cc7039e370de880d88d1a4a0b53e1ec2f0f3e189a2966afe025c05f886220bb84b1782be93b3507229de4dd7b1b15805007ae08f02cc9c8ee04aa1ad8d1c02"}, {0x58, 0x101, 0x3b, "e5fca491203fbf6fd866d6769467f8c1f56206a92f616ba3969d90dd1c617c7da633a9913ebffe5c61424eff21d0a1976ee94c0a039995de5f3e376d3f554d84f5dd1880b4ff61c0"}, {0xc8, 0x11d, 0x1ee, "c2d8653bf11dd86da71a062c51d14602abf975b0dafc946273de70480fee234b2a8efa473e855e38eaad5fe121febdf7bac099134160ed35d630e5b4958229e06266a56da451fed6b6b726786f3edb66d666e18a21daae0d95f6aad7b59c6fa705c3237b6baeca39c7e8f71c4d8a81c1b540259d07a6e3fa55ca2423fb264a091183e0187114cabf6ab925b3403d1c07e360fb79dbf96cb7be7a23c087b9e098280e3e1b539a4d77064a920ad259d7578d0c2ffb3c8c"}], 0x12f8}, 0x6}], 0x1, 0x80) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:24 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200000, 0x0) accept4$nfc_llcp(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80000) umount2(&(0x7f0000000100)='./file0\x00', 0x2) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') [ 1003.249735][T29061] binder: 29006:29061 transaction failed 29189/-22, size 24-8 line 2994 [ 1003.265174][T30765] binder: undelivered TRANSACTION_ERROR: 29189 [ 1003.270120][T29062] binder: 29058:29062 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 1003.282559][T29062] binder: 29058:29062 unknown command 0 [ 1003.300323][T29062] binder: 29058:29062 ioctl c0306201 200003c0 returned -22 03:20:24 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x548e10ef1fbe9ff3, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x4, 0x9, 0xfffffffffffffffc, 0x9, 0x9}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r1}, &(0x7f0000000240)=0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x8, 0x0, 0x0, 0x3fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2181, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0xb4001, 0x0) 03:20:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x7}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 1003.428037][T29079] binder: 29075:29079 ioctl c018620b 0 returned -14 03:20:24 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000040)={0x7}) syz_genetlink_get_family_id$ipvs(0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_POLL(r0, &(0x7f0000000140)={0x18, 0x0, 0x1, {0x4}}, 0x18) lseek(r1, 0x47, 0x1) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000000c0)=""/7, &(0x7f0000000100)=0x7) r2 = semget(0x0, 0x2, 0x40) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000280)={0x0, r0, 0x1}) semctl$IPC_INFO(r2, 0x3, 0x3, &(0x7f0000000180)=""/202) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x8}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:24 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7ff, 0x22000) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000040)={0x8, 0x3, 0x0, 0x0, 0x8, 0xca, 0x8}) 03:20:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x9}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 1004.008110][T29119] binder_alloc: binder_alloc_mmap_handler: 29058 20001000-20004000 already mapped failed -16 [ 1004.018933][T29062] binder: 29058:29062 ioctl c018620b 0 returned -14 [ 1004.024486][T29119] binder: BINDER_SET_CONTEXT_MGR already set [ 1004.031717][T29119] binder: 29058:29119 ioctl 40046207 0 returned -16 [ 1004.031811][T29120] binder_alloc: 29058: binder_alloc_buf, no vma [ 1004.045072][T29062] binder: 29058:29062 DecRefs 0 refcount change on invalid ref 0 ret -22 03:20:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done={0x40086303}], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1004.045299][T30765] binder: release 29058:29062 transaction 908 out, still active [ 1004.053801][T29062] binder: 29058:29062 unknown command 0 [ 1004.067506][T29062] binder: 29058:29062 ioctl c0306201 200003c0 returned -22 [ 1004.069141][T30765] binder: send failed reply for transaction 908, target dead [ 1004.090082][T30765] binder: send failed reply for transaction 911 to 29075:29086 [ 1004.122989][T29123] binder: 29122:29123 ioctl c018620b 0 returned -14 [ 1004.177536][T29124] binder: 29122:29124 BC_FREE_BUFFER u0000000000000000 no match [ 1004.185392][T29124] binder: 29122:29124 unknown command 0 [ 1004.194700][T29124] binder: 29122:29124 ioctl c0306201 200003c0 returned -22 03:20:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:25 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) prctl$PR_GET_SECCOMP(0x15) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0xfffffffffffffff7, 0x1000}, {0x2d, 0xd269393}, 0x81, 0x5, 0x44ee}) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:25 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000000)=[@acquire={0x40046305, 0x3}, @enter_looper, @exit_looper], 0x59, 0x0, &(0x7f0000000040)="c7b73a1c17d093d39110930295432a14d36238a9767fdc8430391c80eb69a966728fb5d91043db5a01e790b0d138750d9d01e48ae3e72bded6aed3b4047e6c61f636a3d5196245388dd31230ec52c25a31cd0b997ace78206c"}) 03:20:25 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000000)='/kvm\x00\x00\x00\x00\x00') 03:20:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0xa}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 1004.219962][T29086] binder_alloc: binder_alloc_mmap_handler: 29075 20001000-20004000 already mapped failed -16 [ 1004.230604][T29086] binder: 29075:29086 ioctl c018620b 0 returned -14 [ 1004.232996][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 1004.244340][ T22] binder: release 29075:29126 transaction 919 out, still active [ 1004.321254][T29134] binder: 29128:29134 ioctl c018620b 0 returned -14 03:20:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0xc}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:25 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000040)='\xd0\x00') 03:20:25 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000040)={0x3796, 0xbe2, 0x1ff, 0x1}) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x10}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:25 executing program 0: openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x200042, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000080)={0x283, 0x2}) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:25 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x181000) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000080)=0x9) [ 1004.920330][T29181] binder_alloc: binder_alloc_mmap_handler: 29122 20001000-20004000 already mapped failed -16 [ 1004.931247][T29124] binder: 29122:29124 ioctl c018620b 0 returned -14 [ 1004.939207][T29124] binder: BINDER_SET_CONTEXT_MGR already set [ 1004.945454][T29124] binder: 29122:29124 ioctl 40046207 0 returned -16 [ 1004.945520][T29181] binder_alloc: 29122: binder_alloc_buf, no vma [ 1004.959028][T29181] binder_transaction: 1 callbacks suppressed [ 1004.959046][T29181] binder: 29122:29181 transaction failed 29189/-3, size 24-8 line 3147 [ 1004.973814][T29124] binder: 29122:29124 BC_FREE_BUFFER u0000000000000000 no match [ 1004.973868][ T22] binder: release 29122:29124 transaction 916 out, still active [ 1004.984600][T29124] binder: 29122:29124 unknown command 0 [ 1004.990336][ T22] binder: send failed reply for transaction 916, target dead [ 1005.001089][T29124] binder: 29122:29124 ioctl c0306201 200003c0 returned -22 [ 1005.002763][ T22] binder: send failed reply for transaction 919, target dead 03:20:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done={0x4008630a}], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1005.017478][ T22] binder: send failed reply for transaction 922 to 29128:29143 [ 1005.053757][T29184] binder: 29183:29184 ioctl c018620b 0 returned -14 03:20:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x218}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:26 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x200200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:26 executing program 1: r0 = timerfd_create(0xb, 0x80800) r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xbf, 0x202000) r2 = fcntl$dupfd(r0, 0x0, r1) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400, 0x0) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x8) 03:20:26 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') [ 1005.108234][T29185] binder: BC_ATTEMPT_ACQUIRE not supported [ 1005.114170][T29185] binder: 29183:29185 ioctl c0306201 200003c0 returned -22 [ 1005.114464][T29143] binder_alloc: binder_alloc_mmap_handler: 29128 20001000-20004000 already mapped failed -16 [ 1005.133262][T29143] binder: 29128:29143 ioctl c018620b 0 returned -14 [ 1005.136149][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 1005.146599][ T22] binder: release 29128:29187 transaction 930 out, still active 03:20:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x300}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x901}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:26 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) r1 = msgget$private(0x0, 0x1) msgctl$IPC_RMID(r1, 0x0) [ 1005.356751][T29207] binder: 29195:29207 ioctl c018620b 0 returned -14 03:20:26 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000500)=0x9, 0x4) r2 = syz_open_dev$radio(&(0x7f0000000540)='/dev/radio#\x00', 0x3, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0x0, r2, 0x0, 0x24, &(0x7f0000000480)='\\vboxnet1wlan1posix_acl_access!ppp1\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000400)={0x7, 0x70, 0x8, 0x1, 0x8000, 0x101, 0x0, 0x8, 0x0, 0x3, 0x100, 0x5, 0x0, 0x4, 0x1, 0x7fff, 0x100000000, 0x8, 0x9, 0xe45, 0x5, 0x3ff, 0x2, 0x2, 0x6, 0x3, 0x9, 0x4, 0x8, 0x4, 0x0, 0x5, 0xe07f, 0x1, 0xed, 0x4, 0x5, 0x5, 0x0, 0x3f, 0x0, @perf_config_ext={0xcb5e, 0x3}, 0x4000, 0x1fd98c82, 0x0, 0x0, 0xfffffffffffffff9, 0x1, 0x4}, r3, 0x6, r2, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x3, 0x20, 0x7, 0x2, 0xb, 0x4, 0x8, 0x2, 0x1, 0x5, 0x10001}) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000040)={0x4, 0x2}) accept$unix(r2, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e) readlinkat(r2, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=""/61, 0xa1) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f00000000c0)={0x6, 0x1}) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000240)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x4) [ 1005.404809][ T22] binder: release 29195:29213 transaction 933 out, still active [ 1005.422387][ T22] binder: unexpected work type, 4, not freed 03:20:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) [ 1005.472598][ T22] binder: undelivered TRANSACTION_COMPLETE 03:20:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x100000}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 1005.663516][T29336] binder: 29333:29336 ioctl c018620b 0 returned -14 [ 1005.851245][T29346] binder_alloc: binder_alloc_mmap_handler: 29183 20001000-20004000 already mapped failed -16 [ 1005.862000][T29185] binder: 29183:29185 ioctl c018620b 0 returned -14 [ 1005.863068][T29346] binder: BINDER_SET_CONTEXT_MGR already set [ 1005.875324][T29346] binder: 29183:29346 ioctl 40046207 0 returned -16 [ 1005.882033][T29347] binder_alloc: 29183: binder_alloc_buf, no vma [ 1005.882076][T29347] binder: 29183:29347 transaction failed 29189/-3, size 24-8 line 3147 03:20:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done={0x40086310}], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:26 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_buf(r1, 0x1, 0x2, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x9) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:26 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xd5e, 0x8400) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000040)=""/6) 03:20:26 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x20000101}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 1005.882295][T29185] binder: BC_ATTEMPT_ACQUIRE not supported [ 1005.889077][T30765] binder: release 29183:29185 transaction 927 out, still active [ 1005.903389][T29185] binder: 29183:29185 ioctl c0306201 200003c0 returned -22 [ 1005.911458][T30765] binder: send failed reply for transaction 927, target dead [ 1005.925708][T30765] binder: send failed reply for transaction 930, target dead [ 1005.933799][T30765] binder: send failed reply for transaction 933, target dead [ 1005.941342][T30765] binder: send failed reply for transaction 936 to 29333:29342 03:20:27 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') r1 = dup2(r0, r0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000)=0x30, 0x4) [ 1006.064360][T29361] binder: 29356:29361 ioctl c018620b 0 returned -14 [ 1006.134797][T29369] binder: 29356:29369 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1006.165023][T29369] binder: 29356:29369 unknown command 0 03:20:27 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xc, &(0x7f0000000040)='/dev/userio\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=r1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 1006.181064][T29369] binder: 29356:29369 ioctl c0306201 200003c0 returned -22 03:20:27 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0xf, @raw_data="199121ea78d44720f995a3091a12f935c56162a340b63b6eb5165f334255f92b4ddc50d94a07104877cc74aba0d60a2a7cb3e99dc76c192d97838195b8cccbe3fb925cf4ca4780446239a87ebd8c964fb7c6e284fea1d328ff22588896ab0a0178579ba2a710bf3f87fb99674ad88b08f8a6d03aacaa6eda4c96feb015b0ac12ccfbcc7ad29896c01b28a3400763ef5224ca46d7194087d61cf6c06447b551effa2a3b69a847895ef3ca99973b7510d42e0cf2238bd81449758e12c2abe9a9d169964250ffd95b13"}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:27 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2001, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @null, @netrom={'nr', 0x0}, 0x5, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x10000, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000000c0)={0x8000612}) 03:20:27 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) write$P9_RRENAME(r0, &(0x7f0000000000)={0x7, 0x15, 0x1}, 0x7) r1 = geteuid() getresgid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) chown(&(0x7f0000000340)='./file0\x00', r1, r2) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = semget(0x2, 0x0, 0x44) sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, 0x1a, 0x4, 0x70bd28, 0x25dfdbfb, {0x3}, [@typed={0x8, 0x78, @str='\x00'}, @generic="489253945a3d7c84952663a10f1ed057bbd44e0e511233eeb5e4be81019a5ee0bea5c19bc831c9cb16fce8bd25bb99d5f8fde1f75a4df79eaa08bf9ec991a940ea3fbb482c93ad599355ac56be3468398d412f9ee403629b3a9a30149fa6663e3925d84c38eeaf1574ee0beac97e7ded726429b9258f18bc4935606472d4ad9f61dc9f94a8a52647c9e724469f3227671f270b1f236a14128f872d66092c017867e4e963b8ed2461635130f00605749ca9ef2e3b4f3e38"]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) semctl$GETVAL(r3, 0x3, 0xc, &(0x7f0000000080)=""/228) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x220, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffff9c, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x404000, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 1006.439501][T29392] binder_alloc: binder_alloc_mmap_handler: 29333 20001000-20004000 already mapped failed -16 [ 1006.482022][T29342] binder: 29333:29342 ioctl c018620b 0 returned -14 [ 1006.487292][T30765] binder: undelivered TRANSACTION_ERROR: 29189 03:20:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:27 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) [ 1006.535023][T30765] binder: release 29333:29398 transaction 944 out, still active [ 1006.638289][T29406] binder: 29404:29406 ioctl c018620b 0 returned -14 [ 1006.826177][T29369] binder_alloc: binder_alloc_mmap_handler: 29356 20001000-20004000 already mapped failed -16 [ 1006.855431][T29369] binder: 29356:29369 ioctl c018620b 0 returned -14 [ 1006.871919][T29516] binder: BINDER_SET_CONTEXT_MGR already set [ 1006.880372][T29516] binder: 29356:29516 ioctl 40046207 0 returned -16 [ 1006.880411][T29517] binder_alloc: 29356: binder_alloc_buf, no vma [ 1006.893875][T29517] binder: 29356:29517 transaction failed 29189/-3, size 24-8 line 3147 [ 1006.902906][T29369] binder: 29356:29369 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1006.903069][ T22] binder: release 29356:29369 transaction 941 out, still active [ 1006.911246][T29369] binder: 29356:29369 unknown command 0 03:20:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done={0x400c630e}], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:27 executing program 1: r0 = accept$unix(0xffffffffffffff9c, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, r0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00') accept4$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14, 0x80800) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000780)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000880)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000980)=0xe8) getpeername$packet(r1, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a00)=0x14) getsockname$packet(r1, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a80)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000b80)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000dc0)={0x0, @initdev, @initdev}, &(0x7f0000000e00)=0xc) accept$packet(r1, &(0x7f0000001540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001580)=0x14) getpeername$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0}, &(0x7f0000001600)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001700)={0x0, @initdev}, &(0x7f0000001740)=0xc) syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001900)={'bridge_slave_1\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000001ac0)={@initdev, @broadcast, 0x0}, &(0x7f0000001b00)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000001b40)={@multicast1, @dev, 0x0}, &(0x7f0000001b80)=0xc) accept4$packet(r1, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001c00)=0x14, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001c40)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000002300)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000022c0)={&(0x7f0000001c80)={0x620, r2, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x224, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r5}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1b}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x17c, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xef7d}}, {0x8, 0x6, r11}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xc6d}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0x1c8, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r15}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x32, 0x800, 0xffffffffffff5a9d, 0x8001}, {0x80, 0x6, 0x5, 0x7ff}, {0x81, 0x8, 0x100, 0xbd}, {0x1, 0x479f, 0x7ff, 0x2}, {0x5, 0x2, 0x800000000, 0x200}, {0x4, 0x401, 0x5, 0x200}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x401}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffff9}}}]}}, {{0x8, 0x1, r17}, {0x78, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}]}}]}, 0x620}}, 0x0) r19 = syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x29c0010}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xf0, r19, 0x600, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="eeb9f964aab14106aeeec6b6a50e0950"}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x29}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x40880) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) ioprio_set$uid(0x3, r20, 0xbc) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000004c0)={r21, 0x80000, r1}) 03:20:27 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x5, 0x80, 0x9, 0x3f, 0x0, 0x6, 0x1040, 0x1, 0x403, 0x96, 0x0, 0x7, 0x8001, 0x3d7, 0x40, 0xfffffffffffffffb, 0x4, 0x3, 0x8, 0x80000000, 0x7, 0x6, 0xfffffffffffffff7, 0x1, 0x7, 0x717b1d31, 0xfffffffffffffffa, 0x8, 0x3, 0xfffffffffffffc01, 0x8, 0x1, 0x100000001, 0xe0000000000, 0xb4, 0x9, 0x0, 0xaf0, 0x2, @perf_config_ext={0x8, 0x2}, 0x20, 0x4, 0xc1b, 0x7, 0x3, 0x7f, 0x5}, r1, 0x2, r0, 0x2) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:27 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0xc) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x7ffff000}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 1006.911273][T29369] binder: 29356:29369 ioctl c0306201 200003c0 returned -22 [ 1006.926916][ T22] binder: send failed reply for transaction 941, target dead [ 1006.948553][ T22] binder: send failed reply for transaction 944, target dead [ 1006.982092][ T22] binder: send failed reply for transaction 947 to 29404:29409 03:20:28 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000400)="3cbf733fa800c64cba7e5992d09fefea4071aa03687379e5647888fdaa0c7eedc6dd10cd7f0752c943b3f9fdc53d036ea95892bb93e0da188fdacaf37950a88677804131f1f078584e8ff3dac6937f76a713b5471f36bbceda5196d558949468fa4d9278dedbbda9dbf2bb1b75ea9b47fa97921532b4ec9ae47a677b50e1a3a2dae3fcec8314588ca0f3f5d7b9d342e12a6970165682524c9141769309893a3c36920f0951d8a3a5ce17f6a46bb3ac114738944f6fe876ae19deffd8162aac0522e9dc35642b228511e8b4eea9e9302450fe4442d9fd8b1e623e2edd67a8fb3d7753147951be7097bf47509ae9b48cbf893ebbfa91f3c07eeae4f53ee4437a983e6a176210929a6a14c9608899d7e75e4c6a62428c65ebbba63a50099f519d87c71c5cdd4625c7ddeb035189bc0f7f7548985f5447f2016aaa1ecfca3fedf8441b165bdee36be15ccb74a686d21226a5c6bc14e96fdff1dd20be751af569b3f78a07710eaf0b656ef67459629d0aecbc62689a5775aff423c687dead17d44b7d0d4280d21940194ab1ee56f0b7bc2b8c608a3f3498107feced1ec5be0fae35f35cc90aea458e0eed1c85160b859f5b89ac56e9531bf0b21d084eeb3930f46fbca8c304fe627ec4f76fc4f434d14b2a436b10bbdadd43b94a7f1c28b499f4537f6cc314bf32363da9caaf719ed71c087155c140a568a69e8d6228495bfe729dd0893f1668fa2e377071d1d89413d51ceee5610c979becd21a88c0214bdf6214a4ad0d4e6f9b8db1d19ae33b27f781603525fe8a9eed662f66f342ae959c4a1bbe3d56255c42626234f7c61cc42bd0d15b40b5681d9dc36b65f003e34fa2d813636439fcbce9362cac5b7a5145b9e554f468340ada8228f0cae67e71036f1bf7b2997336195ec77937d7bf84a4ea1b42f5d6a0fe14b3f458a9247be2cf415f42a20ca1bb30241069cd7be1f88b518e25dc0612102920005de93eb25a6ea01a0755d63fcec82ed9998d10c46a6123cc3b6a543bd937b24e19a972d63f451574ed042768fc3fef36d0593d75f4e188dcd57de9ddda6a428582cfeb40427b2711593e0364ca917d0b4b6da559cdb50fab84e5091d8f855170dc504e70aaeebfc0db3ed7c19770c3be71e4033cafcb34108764a2f150276d27ab1410c9c0a2cff2bed8893978db5c5efdeeae43dc974a290aa5fcf950b64f03e04d18ed050007a6680fc6571779b0382e802f518c7c268a375fcdc67c8821d4f1d2e6ab84f097576c1b10c51150ff4a05dccd38082e13ee90404af8c77d0c5f322356a78ac492e35f5e0c317ee17f9551231ecb01b4e26705095f218a2b1016ed8a8cf0fbedf50585afe37820bf34866e535d9814f7798cd669be7197447722fd5f15ef7182356e4949acd40ef277cc98ca97c9c7f70140004e8e669c95506e23be7703330390bdcf3246f3c71ff950729e54014cc81a829a0595ecb8e6812f2954bb9092fda97e672da90d1cf10315684c1443a57b39e904474f929c75b47c09f0002bf148bf888ff328b7b1825daad075c3816797bfd8631399c9dfe082fbec6017f89fdb09e8fa93e512614be58773521ff18219d624944e71d2efb3658352b641519c6bdf3b2fe46d1b361715d3a68cb521d27c71f88c911a9a63ffb72fb1f91e7bcda5792facce9670550adf6f932aea726bb595633ea013744f1ca4ebfb4126021aa48df5ca69435bdd74613cc24905dd36b4d349f9eee4ee52a3e8255055d2cf9b8313713f70dcf48af50bf05ad51f99945c9d77641fe9aae8c1e7cf76bd467998085744e20def4a96c1a5b93c9f9f708e8592b59ad644571ce8205639b151af70ece221d8714564b5e7c01bbd3a1826f1b5c9e5e9bb688244ce3f1cbedb225488baef27ed2baf4cd28bab84d64665f50c7925950578d10221f307e079bbb506fc8ea918176778645b5ceccd6891bae4aeae868ecd03b17498b2bcc2d7c2c3c9df41d9b1636b0f0942b272d66755f2f01cd17c669fd2d5bd42a33ec1e7b75576c4a26e2fd016cb9376c05eb51d5f3dfb1318ce83d4a9c7e726a40dc0bcac18f073735bfd7304f72beeff54d36b2a92b37f412fc4559830bfe4ff49530fa8f58acece0b3f650ab3f63f52edee011e8ddafeaf72a4b18a69a47296553d14b07caa5e263ffdd67051688b675738f39588482e7b705c4e412e7a75a7d79344c88f9a5e848a18657e4e6517506e8fa9974966a7e978b98a96e2dca82c09be7bd22a89a82724132e958f7675bc9bd8e756a4e94b8afaef757c914be122f9cf424e4999f99d36f4c74c6c98221a447a7fcebc01ce1610431eac54304bdc8c152124224ce1582deebb7711cd659cc8240eec066844192bddf9b2feac7ef72f7bc76780e438dc590c5ac889873fa04e0e36aa38bc0d837ad2436adfaa73f8bb4a153558dcd61d00c817babc29330b2b8113dc9e9a094998f04be5d7e6df5382a689ac7b2e1e5e7c5ea9c3b466d6fad2f0dfc4c9c8063fc697d180a517f6f6819ee8209a5b7f78de1f7248fabeaf5206e967ff23e860f38a7e9ee9e5a0843052527a1a97a3ecbc703ac6919d0ceed7e399dd4aa6c64e31ce84074a6ca1080076bfe47c67e5eaba5ab729678b6dd2b31d64939a6cbee6469e8833184078385c8b11952dd03cf2a3cfddfd65c6280d87dc366ee2bfd81e8b53d1ca0ca4888142717e2bd07d2cedb137e8b5631009170bf74a503a4a1402ab3d16aa23f9569ca5b886ff30408f2234411909a8ffd0382a7b05c22d5d8d5d5d715e852bcaaa7b4780c8caecb0344ab69b913abbcf3b0760c623dccf19068b5dabceccc82f54dbefcd0343d6a57edce2fbfb5b5bee1999512ae9fc7c9c97ff9bc51c307f80f70a15bbb9a7343b8d6a756f97ae9c131cd754ab9ffe251bad734dfbb3c83a302062bd12c29680ef965cbcf1fd829514d3a0d803be7c0ccd16e51b80c6d3f650810b372af341d2d474945971338ebb40abf3f6ef78de725666955c5e0c42920cfd0427f132150f45cbe4254474f98580cce08f947fa71e75ffb762ff1d1f2cdf3ccfe41b20fefe7c1d5ca8a3b84f1972bcd9f0d11b1675362416666ac27f9740b93621c9731c7ac3f33b27bf6cab3a9a6e12377da0dda41a8c191d24b7959af4e1f332f9be540bc7562a945239abf1c4ecc5bfc1ff9687ee7f4b5bfab93e8eec1b179476e847fe1cfb5eb84c6645de9595f0a313dbef4a3fea9707c0f4ad59086c10c8cdf1517c60d57459a71fe5b906c0975824f264dff14811e548b3028d478715929ec1d45702f2ca7416126d8563632c8e3e259e341bf8e0f4ac3ce2597cf426227f8d6af83bec75627a2989875d277cdd270ab80b9adbb45bf142b434d236a27495d79878ced5df737bd1553c50bb4f0a11593139f8a5be6ea3e25edf2505fc32e10e993ec162bb289dc5afbc38cd14b37df86aa5c4ca4f2b2caa02bcba7bbc4fafb6977e5b20df711e94290a04126d53865d0d8938aa3ad9b0f285ecb2d3ca9e4913cdade10c2fe9fa211c5cc30168cf6867a013e4e5e17d651d454f79462f363eedcf14b4dc318244af1d4f9703260fdec62292121ea79ccff68a3f34323aa92a130c30d9611ed920c99dad2a40968cce8f1fae09bd33e5b72d4baf6481071720eede15143cffac77826ed1c84ee7dbb57a91ee5d8d507542e3db9dd93f53fa9282fc44b2f7dbdbef0798d0731545510c7b09078f3b873a7faaa9097f683c3797ce3ff399055124f29fdfc750a98b4d1493fdb4254223da27440b865db37962cda7d920cf5461af6c267873b2c6de00f15e1b6655a67d3cef70bcff3e43053fa6bfca3f1a5924c05fbb654368ad71acc78d28ede5f07d3e7e6026360808395e869c6c53541dcf7e4ea97706b892625f1df13143ad996e2f07194dfb9992e583f066661c31418e8536b536b80c5336005254630639ca439b45c4475d08ce25f082fb40e6854d4566087b3025ad476ab84907b726bdf27f4290b664918e1d728f4b239be6053452861f631e109c2a41c916b775cd945f98fa66b6115bece0e35dc3fd79ade9bc469cdc88c17132cae266d581cc3b2e4aff9cd09d61a03d84de13435ef86add04942f596464afca16c06029fbae303caaeb99d7f52d274f653b290ee9eaffa6f0b639ed94c96eea8942b7886cdbf419af490eec4f80f467d9e95d8d5c565652ca09f86678f81a26ba212d495ecb651aceb5160313f0387a0a2206846006f7c3c464f80fd39c77f257134bb8b7d565f8138c7361ad889d0bb4c5446eb72ff3a568c10bf4b6d686c9ad46637c5b0b2be7806cbb303971f033c9a2e6b7e9d3be27183c61306ecf4c6f7521ac4e90847890bf27f5598e67e3f878e6b4cb17b59833eddc7a64ad132793f7ecdaf7eb3680cce6b2b7a364b39856cb617fb7e6cb2aaac5e2dca98305a95f13f0c124e58f8bcc9158169266c7f6a36c740d7ae2b2a59d4d2320656d4b8be1d311aca3620c022810e94c5ca513c830d22ee14f0810c26c3b57631c46c7f6763741f1a49fd7488df666f91cc932a3ad3d83d43a84b08eecf48b3816851ff30aad2af5d99763e692da0488a20f82778263f2b9fc8852646b6bf3a8b5e3db40e10557369a81142c39e69f8b3d1a5afa2a6bb9e0f291d8a4b95ac3f89ad9203b63e9b5b6a2891e849a23a4b17cb1b615cacfedec23479a25850c41cb77967cda9ea4756a74e0d7b8afa456bac157a5d755a9d4a848bae4d995603e769fd1941f765bd704a5fd5a6231a21ce494b2a9acba797bdd415e0868c15a6ce86cda1dbfeb8dccb3d41bed04f5ed6127a0f1e00e77840473bc64cc14d912f76191c38c753d0d25be15320970981d8fb4d7cafed9a953635cd03f4911377a9708af7bb6b0f2719b4598c5d6a5220436bd192da1b4d7599405ef1d4cc104d4934281de3a646e90a4595606c0dfd8ec905bd677265c78e9c06d53d20140ea260a5eec06be4c8d43c31bb5aab88e0f5705ca9de30a2aa61d2f661f8581bb1cef208d20068944836c23414cce86f2540369af471ace87144d474212f9e0714fa31b0a2974cbddcfecfc364beeadb5f43a2245df67cef6e5c0abfacb7ad79a7c139d658e5ece972f68f48c5f1d20dded21d4a023286e9fd43b9f45bbd4f000cbf3ad119a6a38725a00dcf7384d89efe82e159c22deca50888e73839ca7da141c314e9196703d50839831520441dc5cd4000851eff8a784ee23c1f0d5cbcb3c5d7597f362eaf192d0962e5b4706bf15f8e9313a6d63130d7b54f1532c64ef806b04e1e0411fd600c7c81ab8eb7ea919525dea26a949d4ddd0e29e1f3c08ac5e2cfc0cf6c921030730899663d060d42951d4726604ffcfef1ebc241224c56d25ca67ba211164da8061e70fd305f7ce0fb283e83d5652a9378107405dc6fc5c73e7df3c7f35670ed9353f4220da76df724b532bbe1aacec4d40c2a5f8bf9d531821e7e2d828baa7b0fc3cf7467be0a610811b9eda80e859f902e848e71e38c2d938b0196e7a4363d28889f242cfda598a236fa42ac25180024247ed003ed2720efc2afa8c339fb969f5fef9e863735f89b973eb10e93b4792f95841790de91b72bd1376a72284181ddfc52867ed302efdde7a592ba60b97ab0b4b736fb9506e817064d29e148a22ff9a4807c56e1968e46dcc2c82d1222d4d85cc3cd71db793822b4abe7be935bf11ebf5a0b3514579457bbcb1e3c0c8fbad5a93e566a21a720ca3e9dc22e2bab0c261ba01bdd8fa6b8f2a0025d44fb218b1d9f6ecfef152b8d2e345c66a1b90b617", 0x1000, 0xfffffffffffffffe) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000001400)={{0x7, 0x5, 0x9, 0x101, 'syz0\x00', 0x3}, 0x1, [0x8, 0x7f94, 0x200, 0xffffffff, 0x1, 0x5, 0x8, 0x5, 0xffffffffffff0000, 0x7, 0x58f1091a, 0x9, 0x3, 0x10000, 0xff, 0x4, 0x1, 0x1, 0x10000, 0xc2, 0x7ff, 0x3, 0x74, 0x3, 0x5, 0x10000, 0x68c, 0x191f, 0x5, 0x5, 0x7f, 0x8, 0x5, 0x18, 0xfffffffffffffffa, 0x6, 0x7ff, 0x7fffffff, 0x9, 0x3, 0x9, 0x6, 0x7, 0x13, 0x0, 0x0, 0x0, 0x1, 0x8, 0xa6, 0xd81, 0x8001, 0x926e, 0x3f, 0x0, 0xfffffffffffffffd, 0x80, 0x6, 0x3, 0x20, 0x2fe0, 0x9, 0x2, 0x1, 0x5, 0xffffffffffff5080, 0x9, 0x6bb4, 0x1000, 0x8, 0x1, 0x8, 0x7ff, 0x4, 0x7f, 0xffffffffffffff7f, 0x400, 0x949, 0x4, 0x7fffffff, 0x0, 0x1c77a273, 0x0, 0xefd3, 0x72, 0x6, 0x6, 0xffffffff, 0x81, 0x4, 0x1f, 0xdc84, 0x6, 0x7, 0x3, 0x3f, 0x5, 0x5, 0x40, 0x1, 0x5a17, 0x9, 0x100, 0x5, 0xf9, 0x6, 0xbbf5, 0xffffffff, 0x7, 0x825, 0x3, 0x100, 0x0, 0x7, 0x5cb8, 0xffffffffffff7a8f, 0x5, 0x4, 0x6, 0x101, 0x1, 0xa93f, 0x80000001, 0x3e, 0xfffffffffffffffb, 0x6, 0x4, 0x100000000]}) keyctl$revoke(0x3, r0) mq_unlink(&(0x7f0000000100)='/dev/kvm\x00') sendmsg$nl_xfrm(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000001900)=@getae={0x250, 0x1f, 0x408, 0x70bd2b, 0x25dfdbfd, {{@in=@multicast1, 0x4d4, 0x2, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0xfffffffffffffffd, 0x3503}, [@algo_crypt={0x12c, 0x2, {{'lrw-serpent-avx\x00'}, 0x708, "27fbeb4677232b5ec8d5c97f16c5b39438f36c7be06494b6776234d3d657f3be2adec182ecfa588c66d29cbdff7c08eafd4d9d7019e3ddfa5d767be4f837601253822d3d4fe3f0ab883c84c6aa658756358b3b2189f20eea52f7719f19c6904880bf205cbd26474c7e8e133510a00a9da53d8abe807b699dc01468fdc0aed81f99aa62e66de9cd18aca03bef9078dfe0b8e1786335f4a71972afe6c7518b18a3e7bcb0955717ef63b6b5a1aa702add05b0a80fdd2ff2a12162eff5ad615d73deb203ef52da59ffe51b2a0fa2a32b4dec155d90a335dce0e43cf9b53c3806502961"}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e21, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, @extra_flags={0x8, 0x18, 0x9}, @output_mark={0x8, 0x1d, 0x400}, @encap={0x1c, 0x4, {0x0, 0x4e22, 0x4e23, @in=@rand_addr=0x8f}}, @tfcpad={0x8, 0x16, 0x4000}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e22, 0x4e22, @in=@dev={0xac, 0x14, 0x14, 0x1c}}}, @proto={0x8, 0x19, 0x32}, @algo_comp={0x70, 0x3, {{'lzs\x00'}, 0x138, "0490ba110a23fc4c7b5b80322efff448d64ead5e5e729478ee9a8a1aed619eb13d8e900efc4338"}}]}, 0x250}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) [ 1007.139500][T29533] binder: 29529:29533 ioctl c018620b 0 returned -14 [ 1007.242708][T29539] binder: 29529:29539 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1007.259658][T29540] encrypted_key: insufficient parameters specified [ 1007.286577][T29540] encrypted_key: insufficient parameters specified 03:20:28 executing program 1: r0 = accept4$ax25(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x80000) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000100)) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x8) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000080)={0x7c, 0x5005}) 03:20:28 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10081, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x8100, 0xc3) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x648, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3de}, 0x0, 0x0, r0, 0x0) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000080)={0x6, 0x401}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uhid\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000040)) r3 = add_key(&(0x7f0000000100)='.request_key_auth\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="c9caae1571192568bd7c33e67652fe", 0xf, 0xfffffffffffffff9) r4 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000480)=[{&(0x7f0000000340)="d7ea6ec7f90fce7c31b77566036832f12787e47a70d648b79f4797a0e82fecacd6daa693600467a9a9a46d9c834791c603b54e4c99a7a1ccf7cae0a1c8fae68509e03375be0ddf83e916a9da7ad1b51088c150bdd61aa504f38eb83d262c7d266b8223802635567a3d94db5649fb84178d92244aec91dee64ef1fbe577250e76df63c001147f60e4ba07818f0af53d9457956f285cfb47eb69b3fd3f8871eef8", 0xa0}, {&(0x7f0000000400)}, {&(0x7f0000000440)="bfe5f7349ba2e7c5e6a3154a12ab8a69708bb0df3851427253959cde578d91875fc0a4148dac588f9cfd8f5c9c2255c2b9e5abe691c451de73b7", 0x3a}], 0x3, r4) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x3, 0x402000) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xf6) [ 1007.410870][T29409] binder_alloc: binder_alloc_mmap_handler: 29404 20001000-20004000 already mapped failed -16 03:20:28 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) r4 = inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x0) inotify_rm_watch(r1, r4) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0xd008000) fsetxattr$security_smack_transmute(r3, &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) [ 1007.458072][T29409] binder: 29404:29409 ioctl c018620b 0 returned -14 [ 1007.482527][ T22] binder: release 29404:29557 transaction 955 out, still active [ 1007.499037][ T22] binder: undelivered TRANSACTION_ERROR: 29189 03:20:28 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000080)={0x8, 0x7287, 0x4, 0x2, 0x9, 0x100000001, 0x1, 0xffffffff00000001, 0x1f, 0x1000, 0x3f, 0xfff}) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040), 0x4) 03:20:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:28 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5, 0x80800) r1 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x4, 0x80800) tee(r0, r1, 0x5, 0x3) membarrier(0x20, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x4) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x2019, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000040)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) [ 1007.686954][T29575] binder: 29571:29575 ioctl c018620b 0 returned -14 [ 1007.747341][T29579] binder: 29571 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 1007.747356][T29579] binder: 29571:29579 ioctl c018620c 200003c0 returned -22 [ 1007.896918][T29688] binder_alloc: binder_alloc_mmap_handler: 29529 20001000-20004000 already mapped failed -16 [ 1007.909999][T29687] binder: 29529:29687 ioctl c018620b 0 returned -14 [ 1007.923876][T29688] binder: BINDER_SET_CONTEXT_MGR already set [ 1007.934074][T29690] binder_alloc: 29529: binder_alloc_buf, no vma [ 1007.936135][T29688] binder: 29529:29688 ioctl 40046207 0 returned -16 [ 1007.946293][T29690] binder: 29529:29690 transaction failed 29189/-3, size 24-8 line 3147 [ 1007.955639][T29687] binder: 29529:29687 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1007.956569][T29797] binder: send failed reply for transaction 952 to 29529:29533 03:20:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done={0x400c630f}], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:29 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000000)='/dev/kvm\x00') 03:20:29 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ca2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0xfffffdef}], 0x1}, 0xaf}], 0x1, 0x4004001) 03:20:29 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000000)={{0x0, @name="7477b1d02e8498d7abc6cab201919e0d60e6fec35538ed19fc4d319f508c58de"}, "abd950b26c88d4f165ec9131f6b64736d4be25899d81fb2b3e1055894dec04c3", 0x2}) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000000000000000000000000000000000e5020000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x78) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0xfffffffffffffffd) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) fcntl$getflags(r1, 0x40a) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0xfcd9) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000001d00)={0x0, 0xe7, "9a53b69ef10c5ad4f010e4790d2160fb773e0cef370f7f386144b174adf3d8d1c6ba3f320bc01954edd65ad3df959a71118004984013074ba294c7eb58ac00b6e36c71fe67e2d4bbc2ba3d8935d24ddc55fea3b85d56c249e9bfb8e02b3002c98ec8196fc2a9ae3715330bd6fa46c1213c3c7233d9bcb6ac694dad19549b2671cd40edf020e2ee4a2c0f8fcc65c917fcac75eb4d5412dbf865cfd66b74e046532a2ef6d32d365938a904270de3c3f31f778a33e9d22a5e95744c6d1709cf1f677501d7c9ec12080d46f7ec1ccc0d43b46a1ad99f55c31ad9b7dbcf19d15852fed35409ea2f1116"}, &(0x7f0000001e00)=0xef) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000002080)={0x0, @in={{0x2, 0x4e23, @multicast2}}}, &(0x7f0000002140)=0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000002180)={0x0, 0x7}, &(0x7f00000021c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000002200)={0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x5, 0x7, 0x0, 0x3}, &(0x7f00000022c0)=0x98) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000004580)=ANY=[@ANYRES32=0x0, @ANYBLOB="49000000fbbe8ad607520469d4d1e678228ebd3bbb13b5ee8c64d0d5f49752c39f9e5860bc882d6a983d381ae14dc94bf9451aa776682fd86dfc9db12b454daa69c87413a4106d71e3764b80b7"], &(0x7f0000004600)=0x51) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000004640)={0x0, 0x6bb}, &(0x7f0000004680)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000046c0)={0x0, 0x2400000000000000}, &(0x7f0000004700)=0x8) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000001fc0)={0x8001, 0x3}, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000004740)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f0000004780)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000005f80)={0x0, 0x3}, &(0x7f0000005fc0)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000006040)=[{&(0x7f00000001c0)=@in6={0xa, 0x4e23, 0x9, @empty, 0x1ff}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000200)="e3664b34b7ab84a56e3642591b8a098af648b58132b1c1586c9007d5c3c0", 0x1e}, {&(0x7f0000000240)="f746bebfef3cdb078800f7e4c3dfb001e3e42cf85d75bf3284b82bdf3b7cc3d92474029524956231cb25b4284846135934f5e1cbce46f47c13bb856a3285abd058ce224bc51ce3d395172c376427880dde32a15f961dc7250a017bc7d0a65db1a1926d", 0x63}, {&(0x7f0000000340)="1bb195a29f48f105b9a767ea1270440a85613f189b6deff0de8563c94784e0c383f48f556d0565f79812df4232efa2b7c7acc0e1623ec04afe02ee75bbda9e7214aa6df83ea1ff688d3447f85e674e49fcef9f9d916ffe5d870dc2dd47f5b9faf815f4e59697f375e6613c736dfdbcf4e9380e4d", 0x74}, {&(0x7f0000000400)="f53d7f273d3b2682df1aa5c776371a0aa0a0ab9cefdb19a82eff17ce97b2f8fc389eb313fa4cac7c5e8903d5ec424659d6f9727949033f3d9e213a050fe22eab5f30fb0fc27cbcbf54fd673e5f22eb1c95c13460cf8a9091bb16081a3faafa8fc32319102edf", 0x66}, {&(0x7f0000000480)="8871d014c62932f9754bab1d689402aaa9bd8070c988084e99586f17245d", 0x1e}], 0x5, 0x0, 0x0, 0x80}, {&(0x7f0000000540)=@in={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000000680)="25c2d71d2fe6153bbbb30ed3b74be71052bd14e9c40c21bfca507743459cabb6e9b1ad60a707d5fa035f05c2dbf52957d7d47eb38f5d9d7d0cbac23b2cd19c125a8bf102df173e2aa06dd6181f78818776495739b05f19abd03e2ef47d5030030ee1e4c993c672ba1ad2496a68ce39eb7ad6c831cbe1ceb01df3825c579d402e65f7334648", 0x85}, {&(0x7f0000000580)="e9dce0dd09fa8a7851434d25d82d70618ee5ce8325ee72adfc413678880051577cd098f1a0029c1c2c7626cb166925961a77c902", 0x34}, {&(0x7f0000000740)="4e26a063113a78277f9487351536294c4b735a35041ab96bce9261917c858b1978a6d8870d1e5d6c9169dd57d0ddb132be78558c68b8507c3c9b1081d3b846e6fb60c19513530b144e49151d1f1f0b84ac3a4e0a1d30891b0b1c878154c7345ea295bdef9a949564f0e2151593261831c3e32116d4e8b4e6089c63f5228900ff2ad29fa4251040fe2feb8a243657de673fb1a27df6bc867e283d10b1e09e80b89922e338481836c3e3f3541ef17771e086701346db62a5a6b5ed0a740032148f1b4db896122fced0436bf791f571010a386c07f79cd47df7ed93502a29d9f899270ac041abade5f04ea8849fc97c3be257449435ac", 0xf5}, {&(0x7f0000000840)="c4c57a8d8ddad911e9106cdc1b08959162d241faa91d518c6b8641ab04b1e515175bae2f63154ef7e3fe6b566da2cdcc651b3eddf005896106baed315e", 0x3d}, {&(0x7f0000000880)="b695a91af6f118b641a0a700ec98b35f3fb958cfd6d11f85451e4bdd2ad5876be4d8daa6d9352826c35734ddce404a9a4aebd7b4a0dd39047369bef0e90fdf4081587617bf3ce499a28c6b29646e4023fe2cf95c0983cb34e184692fd515ea887d287448feeede648d0188bfaddcd2c23adb4be4692c86910b5736ccfd5439f58d336a97638d2327c9381e73ede338a0a914f2cc4ff55b6c67efcc6b266fcd4cdcfe2d33bec70e1365c45e0ad6b312a8975a696949a25a7f107061faf20ac690c18dd6781c19ac3ef139285ec872d1a457960fe4f65b14", 0xd7}, {&(0x7f0000000980)="d89da8fdd745ae56549e51475d7ff262ba88f3b5a61afef33b8b385e9fc649264c912e9b122f5b4be9c203de78375e47f165b95f58e953872d9abbf88e34e3b7c7731755be4a79b6835a7c9bc66eace6815d17a3fd07006b0defdc038174991e8c39f887ab182cab7c53392bf7b2ab4bf0cb0e467c70a95faf47f5716fa312f819d4e2b4ea7dbf0faecd145069c794a3197d82e12a38d19246936709728b9edb0ca6f036f8dddec15da0ab9d8b2826c847d06192b829d7a349febe7cbfe60b", 0xbf}, {&(0x7f0000000a40)="5ca2c9403c0d09145650f4853f0694f17c676dfc376722648b9c2f4dc5084254c65d323ae5a80c4a07ca5af4a2f3a9a91228ceaa8316acc8f08dfa33af047f04c06e198691620b0f160bea2f124456eacd77cd1ab1a6e84a0f535296ecf959575c70ac94ae4f1e656531f7c7d00968f73e148c61d8dfeab33e3ec1d07bf27c9ec3a39c1cafcd15ba75950a78444f94e27bade6211cbab12c78cd2831f5ed91860efdb81462ae9a71042bfb64730575fadbc65411346b896c59c38cfd6c997d4fd2a01d32055279a5380d28b043b9f9056d9513293617de859e34d5aee5e08044520a4c0e10ab3820c8903036e2d3b8dae63a", 0xf2}, {&(0x7f0000000b40)="b675fe7ee5a2fe92e5b830e040d33a824eba093aa31662737714b3609dc5c76c366913982284d60aa9356a0766efeb25acaf21526901bc4f4dc8ef31991f6c16308c76778e5b664bd9c0a6fd4b1e5bdeeeae105614b5c36bcd786de8f80ec39a842f5b047277511fdfb07d599ac4aa19dfdaa6121e66b75b4a03300a6e1844ef17b86807c0b1073832035a0205a44eeeaf5806cdeb7db209a45145119548f4b3beb20b16895995371cec3de052f3957771580373d64d1a94b075843bb518b7089d39d3d0a3f1448a", 0xc8}, {&(0x7f0000000c40)="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", 0x1000}], 0x9, &(0x7f0000001e40)=[@init={0x18, 0x84, 0x0, {0x4, 0x6, 0x3184b1b2, 0x2}}, @sndinfo={0x20, 0x84, 0x2, {0xfffffffffffffffc, 0x200, 0x2, 0xfff, r2}}], 0x38, 0x80}, {&(0x7f0000001e80)=@in6={0xa, 0x4e21, 0x9, @remote, 0x1c}, 0x1c, &(0x7f0000002040)=[{&(0x7f0000001ec0)="c434223e64cf83dfd86fa0a65f442e824e64bb21a669d441ca96e97ff61516ee7ecb5595c8584aba48dc9f5d0076019b459d0dad408022f7fb2e3f669e1c905d961779c3ca54e289af37c9a8f205403922662042523e46888856c8c7db4956776363d82169d8afa42f7967719041155cbdd1298e20a272427e7e509a39e659b0631a7e5c5d5a821d0bc94e2d60ea5b7d5413e7450f4b37df8523df38ad7c909c856268ca04da350fa191e88fea774f1851bf698c2fbd9227bdd2ca8c7c31a571a8dedc1d818f6eeb2399be7a20c9106c2f50047685c25c96e9cfb617f9190e6a9bc400a77f2455977b6e", 0xea}, {&(0x7f0000001fc0)}, {&(0x7f0000002000)="64ade03be9273ec66b3c6995c74f8d0d6ea4d32151e9cd6faae72b9c54b466f4ea0dcc19f00eee2da3ea121dbdeb29033cf0296ecd923aae7fd181d27f", 0x3d}], 0x3, &(0x7f0000002300)=[@init={0x18, 0x84, 0x0, {0x7, 0x7, 0x101, 0x7ff}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x0, 0x4, 0xfffffffffffffac9, 0x2, 0xfda, 0x101, 0x3, r3}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x185, 0x4, 0x80, 0x5, 0x4, 0x80, 0x8, r4}}, @sndrcv={0x30, 0x84, 0x1, {0x1ff, 0x9, 0x1, 0xef5, 0xb1e, 0xfffffffffffffff9, 0x7, 0x3, r5}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}], 0xc8, 0x20000000}, {&(0x7f0000002400)=@in={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000004540)=[{&(0x7f0000002440)="9139", 0x2}, {&(0x7f0000002480)="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", 0x1000}, {&(0x7f0000003480)="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", 0x1000}, {&(0x7f0000004480)="e341ed4c95d917c57a1c9e3d2ee2638f4844c529930f9e9dbcfb5d23f6839da9376b5b0ca3b5e2e24a83ece9fa80623d01685621202b1254d8d0e9c8642dd69668d2e70d0f6570427618a6c9444c24ddecd60e3dfbead657f30153e4348208651fbc83785165d2a2038e421a212de12a88b5ea110d6b1cb135d63ee2f5d9189e2618983bcc61c3f54706b94d637576f0a254e7cd287ebb46948360147f5f8ed31cca83b875317910ef66255a", 0xac}], 0x4, &(0x7f00000047c0)=[@sndinfo={0x20, 0x84, 0x2, {0x7, 0x2, 0xfffffffffffffffb, 0x1, r6}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x9}}, @authinfo={0x18, 0x84, 0x6, {0x3f}}, @authinfo={0x18, 0x84, 0x6, {0x7f}}, @sndinfo={0x20, 0x84, 0x2, {0x101, 0x8, 0x5, 0x4, r7}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x1, 0x2, 0x20d, 0x20, 0x0, 0x8001, 0x4, r8}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0xfffffffffffffff9, 0x8004, 0x3, 0x9, 0x8, 0xb7a, 0x4, r9}}], 0xe8, 0x4}, {&(0x7f00000048c0)=@in={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000004c40)=[{&(0x7f0000004900)="1fff7cd4900b24262c4cf5f98289d5192c604abd973c1cbeff7c053f93917de9aedb5d4d530956fec10e4c6bbe7dcc994e6eef529300ff9a8971fcf14d48586b795e1e88742ebb5da20be4d24aa6cece46257f653bb49572793c3305174adc62264c95a2fe223a8ed9101d863157f0cb06dc500a454612dc68446bbcb1bb36dc5b778d0c457014de623096bce8b29d3d6e1f5dce9972bc0c35d5b992baef395eaa4b11732c991963632a0a327477603b236431207c7511163e94586d4252fbb12b0828375672a6e9", 0xc8}, {&(0x7f0000004a00)="0053ce9f455ee16bcd6b050f3d4fab637f", 0x11}, {&(0x7f0000004a40)="fa1330036bfd2230ebea940c13ea3fddc0dec5a260c7c2dbe1ba727700da0ddbc231bf414cc8ff2f1d33af7820cc8c0502e5e983354ac184351592724f427d82d910e4fd87c715f38165030f4c443e75aaf84219ea9460c21259250c7335faae6b17167c009c8fbf897191c3015b221a3ee39cecdbc33041714c2e70b5a83e3d2192e5c4d7c6f83cc2dd12796c20f897a6a52091af4a758a6966470dba375c9d3d766fa5c41dea577f4e4bbbb73d68d32737c405c0f90de282d3896537dc4902a01f0438e820115d9737d32c9e0f277bb73b437aeecf8debf0a3d63d3a0c9399fb9ee1149f1b93633ae3bd16", 0xec}, {&(0x7f0000004b40)="652e7a0fbb89ad9618da22136b40ffe705544720d728a694f1610af86bd3566ebbd0b4653c71730bad8a0b54a4569d90fa6f09f132b2019b8a57925e6f7cd8ae4c0edb2b1bc91c5985a6dc4fcec5b7accb2aea3a032471e50da1567bbf565a1208fdf36bd3b49b01cab04f96f8741165f622b31c3c7a0180d32dd00c9ca3d8068919c595b6fd74732eeba27ddff078", 0x8f}, {&(0x7f0000004c00)="3e60707de7e8566ebe4228f23e7d586a81dca25b14e2b73c3ee3510cfe9de14582036de5b9a1734b78b2b2cb3804f5ebab65c239c51d85e0f1", 0x39}], 0x5, &(0x7f0000004cc0), 0x0, 0x20000000}, {&(0x7f0000004d00)=@in6={0xa, 0x4e22, 0x6, @local, 0x1}, 0x1c, &(0x7f0000005f40)=[{&(0x7f0000004d40)="84d7d36bd944e8ec89a204d1e67811091bc500c05c6e92fd5f9fd8eeeb5ae62e70cc7f4f7ac8ec766cc1a6071b01f9c1757a0bb9d054f39c257474a5ee719a62a02637c48b26c390cc661cc6d8680a8c6e10b5158718cefdcb1dd43b12ae2713b2c8ebeacbb1cfd36078170362713bc242ff20ed4f219457f22a0c55076e2980225c4db9fa0d67470c1b2df6d7d0d6cbedb5455caae3b4ee25d5e8557d043ddd628ea0470c76b0b4c9bad906e27ffca391619b1b9d", 0xb5}, {&(0x7f0000004e00)="8cd023c295ba3f6b1d6c0030926b6fc157684e7f646a7008641c404d2f964b7447d9889bed02457bb4cc718526e7c5e66f0c0227665ec984a6f772b44c992b1ad4b8e9723110aa3026b8b3fe6d04ee1ccbaa2e8976306cda7761e94cd8f93c80932fc2968031ee9b73820c0e7a94cb2f3ad50f7eb309453daebe183a07b8", 0x7e}, {&(0x7f0000004e80)="a386acc7150edb44480470f0ac9ef53d4578ad8d0e82f8f9d8fa64629b4d3e4808aa96b5a7f6f67d12e6f25093ac67f86affe9da2e428b4d9686021b0b413402da88d28c1008539d65138c2d4f089aab3a4ae47dae031be12d55b88c517b2318c18069684adc8456f80ae9b34773ae5e2fc71a077e9fc734f4ec10c4e425fdc3a4e5f4d0ffd8824a6db069e0555849a9760a26e606a04d0d73e7c086ed7d", 0x9e}, {&(0x7f0000004f40)="d32234ff6c3ab9b4b338c240fb4197fbf6c516ef8319a984d90d28ffee4eff35a2b825dbd2f76f497451a5c523165412185af018f8019ee4fadbf1ab8246864d87d1e58b132316b6453b59d6961ec61532307c3ad262e7eb34bfd9b398c01ae53bd1b87926ca1d9f0a5543084e050c24f9d326b6ca7960d3005f20ce57b73e02e4e2212bc407cfcd44d3a84b87d7e14cd9900fc6b111bb7ed34360e2900b07d159ea44c15cb357cce600cb0782aef5a9e2a3d486d17dcea81ee3e020eb2e0e20df38551710a44118f2e0df50e24889358859d272d74b940b0e910181443fcc336bd9c92f92519020dfb8c293b88676daa848660bc11b816a5bff8a75ac4b73b5cc11951086c3a95a2de2cdee358a93eb41aaf20bcb59f0fe105e1c762f21167f5173c954cce5a749cbe684d9b4b808d93c8537217e63580b6411fd2343b0e677d4ad152f84166d9f148c46606dd9afd4cceb3b55937740560374d1a54adef84eb12032c1b5872f59705ba79f9908cd1c0da23081fdcdc1905456ef6f2322bdf5962be3d0e6f03113d26e630feb22626c8c5b128d053c69b91a1ccce5cb1b07a3e35ac1fd622593c88c4ed72b11cbe117500cf489fe0a727007edb8fcc620527b56a9b9e26216c6d2190e8f7f16297387cd6d47d80f0a7d3c7c557b2d8e2a5033cb3d01c868545d7bfe5f25aee93da9cb1c46080cbbdfe71623fbc403c8bb61ffad35586e5f5f8094f7894e930f5885bd9949c0992b68f1ff13ba3449114d4c1455a9f5cf8f2152fae7c4a590248d51dd9a59f2691c01da94598fcaaad7775deecd0c8410a3c9d108744566566ced27f19ebbb4b57c928a555f9a7ac4d82b2483f701eba7904c2bf48fc6b4cde6e1daee14c80fb6db5e0b0867995a95ed993d70d5327d02796d1736e1f91b13867735d64f8643dcd184d52ceec31ae5567170e93d71e625b11cf2aef473f36303923039d35f9494604a11c887650170ec2cb11de908861b541caa7cc64bf50601d3444b4f7c5f835cc2e9c73239dde736542b5869ee980cdfdfd7c10f24a1030570772ac4db03b3d923d230be5e41b5baf10f02b5610765bf13abce17ee0346b2be6543a281bb2aec2d079e78d7aa3ac11e7864f6ef61d03d6d80e3dff30a16929a82d46d271bcc1a232d608be946eacff1c1bdb7638884baac22ba4d1c2383304e5205363318462c25342c08feba13a1dfa2f30334cb3a7926edb7382d88af4e6b17652ee90cb601804a3c52ac3de4effd612b62dd1ddc9b82a8d6eeeb730e4ef67279f60d54fb65d1787b47de1c5fc36def0a8465b6c8f23f23e9b9352487bf05463cd579c7799df173f622c5193d41fbe0e2590621491b8fa381232e049a78ba49bfbf198a83e816acfed2b5ba1929bfc8db77324c45748ed5bb359649c80999c1b8b37c7c9e484898f1dedb096d1e0c135a8485d965d86deb5e7f968a53819b095f0faaea066f3183b3bbcfeaca670439bbec5b641d40b20020ad0857c06335a546d13dc771dbbba9fd385b209941e3ce4e116fef8420779e2bbfb098302879bcde03c06f4464a2c345b5111feb3f914dff3a8fa177a5adba2bb55692c96c269c3c3cc3cdf7a26a2500726d769afc9b806c0f23b89bd8537b3200f73c627240dbfb84544739dd75170266b9964b86abe43f857a1df7c537daedc0ae34884cea5e8ec5381a325a7c95828433f9fcb2e4893d3dc02157c6c8e502bdd793ff1f1beaf4ab69bcfca827970a1b7ec4f233b52b1ef13c1b03f0ff4c8df7eec840905e951861bb0e1eca49bbc47e4f7c9f3a7a82ff299aa12dba3bf68c65d13e0dff4f45e7ba181a39afe93673c48006768032b9f26795c53f221aad49feb1d6ec9dab5089384cdfc1e02979325a8bef8e158f8e0e34694aa750b27db821da5f2509b80d922a1522c9a8f2a85c8a01665221377b723f0b252f571070da34b858d1a9a5d4f081f6b98ea5ad4b32035f9154e7e58b932b9d940b64234d05f47c8408347f70ed942befd2be06b3061c47e20c5333fe935f0cd902e6ff2f641e893cc79ad8b01b739dc1491cfa63e2eb7ac1d668efde61c2907393584733ceaf0de24868ca49b7274a7722d8110537affabb82fd80464cd2c845587f51fd85f68f8c12e9a62f212b463881d4697b946c144d8cad8068197d1783015eed3374f9a3d63ba580b65879f0143e1e2d3119527e0f8008df329feedb6236c8526b5aa2c91b7f31c9f1780cf219ae55ce1880ffb8caffac6587c7bb8492544fb6e5afc8a354f927d647428ab00792efe9a45b942b477d311d139118047afa37945127f31454e7ee2b978b1c29119560dbc32caa1e83c0d6e360c14ce514f940a5cdf93a5b20f58a8c2b5cd0f30e6fc60e2086611416c5eb02cd815d84af104a5c3173b7b4770a850f110153cf513da5a945e5763e757c58e7d8ebaa151566f6d62519397e442efc052c1a25908816fe7e48a63b26a7dfe3e83759dae0e550755344062fec5c2dc3d87ccaa1190223cd9653643e8cda13bdcee6b49c493dfdb8af563c42a19d9a760c0e2d52984ade7df370b8a8f3a0891f2ebdf4189a48da070430eef0e57e2f9bf2d4dd09abd70a5d605d86d866bc4f355ce8e3b428f50aaea25c106ec8f95b5e427ee882caa35c9e0b7a64ff44428f73aad671dc2cddc2cde6750a2dd33846cc7705cdaa333d2ae36d0715a8fa8bd51aa71dfe21e26933af0d25c1de800b206c266c980e2ba7f423bad828852ae93584189b5fc61b9a5f2143c74260c03a207ef995f8977f4d5803f3b9bb741e0699420182500c78fea84d1584799ecf101e212dd859e164a3bb1442092978cbd22c13889858b8b99bec394c833c23bf2fdc5e53d6cb85cab3a356295a604d12f8af61c16cdbd77b1ce922fdfa72ee7b5374eb6ee959525d935af81c9242b704770689556ed1bec52ca325b1c120c68a3b095369e5e43e90bd21ec0c3ce0e8ac687bb0e23fa7a64e03565c5be553156579a5f5647d1329eca9ca732936c825bb54a7dbc75cfb0005cb014ad17f7407d680e70f2a024f62f06bfcf0ff00c8893d534126ff17f3a80c69067d4ec7a9dfc379bc9e0b1f29f13a90bf02c78d247aa980b786f3ed281da07ff7ab0869a0cbda23110ccc5a2610cead8a48c69f5b6ea83d6c3d918badfc117984ec541aadd0c905f4c4d98d9e7a1d0d5e8410422e98218fe60182ef243ff55de360e13c448498c05cb93ee5694bc72862fa5ad2e55139851adf2cd5334f35dafd00879c1214c41d7ebf72c3bfaa29b8c19268e271b163f8ac5cc359946e67c48a311d35cbc0fb32740bb66f936146db2a216e57fd466d6a1ff28ac3c0c524e0337530126ccc45da2b542cade0c1a971d1edb0c024e0f0783673db191a5c67ea6279ca667969c256cbb4eaf5ae934ae349f4ba8a2768a75fa016cd1f1beaabcb720120eef1ae076cef34fadd219e8017c766dad59f109b12ae1986eed451e6443f615fd8fced7404dffa04dc6ff2c1fc1d02266d69e50d6997bbe23e3753ed917b71bed1cd2ea6ee0ae4435e35e03a3c5cf2f46ac2a75c9f209ce1d8ae81e451bd6ca9d221aea442fc0c6e1bfd50e6ea819e390ac26e6ece4575559dab84e6274aa5c19c33a58c59031474256cb39d8dddf0ba4311301a5e5f7f41c3cf38a8d206d716e18140c18119da341d3bf81122d8cc3b47ae96922845fca30e284cfd331576a5ab7abc7549c973c856488a78c8375cd0905f7ec4f43bedc007855bdd9294cee822aea0336564a55d346b77f0c2e27e0b0c1d7ee1c8e02022bbb473bfed09fab6da50b2a4b1b309fbb25daca7ccb77f3d00d79d16831cd273a2846fa2d773224c2eeb0489400713979a18c1fbb0b8699827fdb7411be0a656ffdc75bec246ef829a743f66f579c1be32a027beea817a71865a0a82e81409fc3607424a41baabb99d498621193d2bbc0bc9e912a35385face4cca2f5cc8effa96399ed0dd958908dad59c927fda11cf7bad7a31716f10451d0adbe3f897949f21217e2c2279320b6714db360f22390ce03eed4607561719447aa3d0a8839cc9595d3156f583ba097fcb4657efe184e10c5aef745f2e6f498afcb4429028f649fca57d6475c8bff9e2a5249b42b4aeb080b2ae149e25fcb159d31199e0c128fef1a3d33c7af300b3d7cc19b155d39690b51cfa4fe90f7852b321be1dc3a33ecdbb77828dda42e891aacd1c7742d8487f54632de173c423e2710edb7dc0b3e32cb1f77fac5d2a82cf1291bf0e0cd0ca9b0493275907b7017aaa031c9f060c46e0d91c4cf331eba26862346277711c0fe71dd5875a11a8948059aee598d032c31a905db02e5105b25df6bbc0ce0e56cccb6988fa9aeee0bbf771bfe306293abc5007ce9b0bade22ee2124cb1caeddddaf3d4025cbb89146d9dce0f707a56ac0411bb61223e037400e93af31ee5ccb5f1b7c7aa431bd794bdc4cced39159c6436218d914017bf05f00b7c30880e45a49d1bb6b0430a426683030b12c082fbc2f5717fb85a801b763cde339a9593b2baf64539eab5f614472f48616e5f41f65277a5b802192e6460b523cd709707e6376c941545ef4ac4371279f1299111b32f985005b041c07641ac4691124241e16511189828e7428fdc358fec907388ee2df2854f77531562026ddbcb5da7cd521007f83e86c418abb029a340004be6934390b16b8d775fcd34f5c36c5e3825a0e3c95d32525960e6ba9eda5aaefddcaeb4accca7de47bde1de62566bb026d97feaf9eff12f8c868d2754b43c1cce99def7d911fa174c9d7535ce0be754308ab8816810dba473c592886fce3504237aadbcaf87f0657b21b1619c979a687fb9efae34b2cf08c2b286d04a0d16581381a5d943bf3d35dc65847472eb17e749d0a534cfd5b06dfe62d7328f8158d66a3e174f8450a26b40ab79cf50ae13a8c54f227a3384ffa877795cd3a93f1f81b22730dc81693a93aa64138330f41e16c4d4c562df1902b4c5e0e573f3061aa2ab2202096402bb6b6561368f900d5c0541c85c84bda8a24ac63d24db5421fd897a6b7190ddc36fc0139f5a9341d4705c788dbedcc3e415986fea23f11666d247dbf8d9830f7b55b2feb78b6989b06c1abd09ac7950b060cf384e74e2580c5a884f2ce5c5cbd30b3d22bd712f90b7e99f9340b6eddef7e682715e450ab527bacced00bc7c9cf96d8bd2c4cb45e6668af6d331d07a871910eb0069026d580e577d6fa9f4acfe3b806b147094b4b25d59c722015f80cd18c199f0667af21140fb88619f7ca9458a37d2ac02d7d71cca7577bb37f308064cfbe686183f37941c9c4dbd61b3599cc11540bf367e4dde256fa88ff7cccef837197d9dedcb96873b07de98c096bbd45fd15d35e056225126a0af365eddf94e9eed70617aa865d8f27bbb46381ad32a75aabc782b9dd9fe2191949160a3dd24f3095f0ad7d66c0c33fd026d2cbd572dc9955759e52cd037a8791488bc5eea9ba7a43cf48d93c1f87641e0a2ab379eff9f28b3e49b51e2be23690156a23cedbe0959cf56cd6e9bd2d0b835852783469e49845de13f923acd2186f2f18ee486dace4bc7ecb97f6920401487d282e67c462ff857a8e14864c4c4be7d56ee93ed9bef6a0df1a197e969ee7a286100f83891c7300e36659b48fef8952b121a21e4b9202eaa983e8b46a552cf98f168f3a290f7b276083879dbce2e851c06ad0fe80b6ccad8f24606c95af57e832a35d1108d356cf5e322613d829e2250ae3df4659084cdd0c00c12e6a3aafd0bed4dad624af1092d", 0x1000}], 0x4, &(0x7f00000061c0)=ANY=[@ANYBLOB="300000000000fe30a61dc4a1711e4c0ea93bb45e000084000000010000006e07010005000000ff0000000900cb62d128a1538e0e6817eed7307749a16c7b6f5170b8c5832ccf96bddd27ac016f638471ac3048a3cac2e27abca0e3b2e00aa6d2e925abf5c5fa590d248cd7de4887fbb826b4bca18489b59e294fce5c5b5d14737e7d2784f02ae73af0c85679d297e32fb11821b842e156b4ae45d890455b12dd16b03959a1bec250106d69dd58b422dd6c89c6323a8890365b5fdc24a18fb4e2436909e2826dee62fc", @ANYRES32=r10], 0x30, 0x800}], 0x6, 0x800) [ 1007.990910][T29797] binder: send failed reply for transaction 955, target dead [ 1008.002731][T29797] binder: send failed reply for transaction 958 to 29571:29579 03:20:29 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, r0) semget$private(0x0, 0x1, 0x44) syz_genetlink_get_family_id$ipvs(0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x4, @sliced={0x3f, [0x7, 0x4, 0x23, 0x7, 0x50000, 0x6, 0x200, 0x8, 0x80, 0x3, 0xffffffff, 0x80000000, 0x5ce2, 0x7, 0x4, 0x5, 0xff, 0x7, 0x10001, 0x7fffffff, 0x0, 0x1ff, 0x5, 0xbdea, 0x5, 0xb8, 0x1ff, 0x40, 0x8, 0x1, 0x133, 0xfff, 0x3f, 0x3e, 0x100000000, 0xfff, 0x4, 0x6, 0x80000000, 0x3f, 0x59ca94d2, 0x0, 0x4d7, 0x2, 0x101, 0x3, 0xffffffffffff8001, 0x100000001], 0x9}}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x100000342c1, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x8) [ 1008.145198][T29703] binder: 29698:29703 ioctl c018620b 0 returned -14 03:20:29 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x40000) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xb0c3, 0x480040) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000040)={0xff, "7cc1f0744c87577cb1642f564c518afa8f30e18f381d80a1593063f19f5ad300", 0x1, 0x1}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000400)="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", &(0x7f00000001c0)=""/173}, 0x18) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') [ 1008.229252][T29714] binder: 29698:29714 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 03:20:29 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x8) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x3) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x7fffffff) 03:20:29 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x100000000, 0x1) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000240)='ip6_vti0\x00') r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = getpgrp(0xffffffffffffffff) fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x0, r3}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) ptrace$poke(0x5, r3, &(0x7f0000000080), 0x8001) ptrace$getregset(0x4204, r3, 0x7, &(0x7f00000001c0)={&(0x7f00000000c0)=""/149, 0x95}) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000280)) close(r2) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000), 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:29 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7fff, 0x10000) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) [ 1008.479473][T29733] binder_alloc: binder_alloc_mmap_handler: 29571 20001000-20004000 already mapped failed -16 [ 1008.505181][T29579] binder: 29571:29579 ioctl c018620b 0 returned -14 [ 1008.536074][T29733] binder: 29571 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 1008.536090][T29733] binder: 29571:29733 ioctl c018620c 200003c0 returned -22 [ 1008.538975][T29797] binder: undelivered TRANSACTION_ERROR: 29189 03:20:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:29 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x2001, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') ioctl$sock_proto_private(r0, 0x89e9, &(0x7f0000000040)="957842b2f24177ea7b029413a26274e85c1ce65bb78e76ef37b1ff41fa429bae7a3f10f183d37c8f7999074ff4efc2b7a3034274a20275d9cfcb89a440b8f1e59163bd0d0d6c00ca3553d6554b04e518d6b97ebb53f698b5a71bfe") [ 1008.597071][T29797] binder: release 29571:29740 transaction 966 out, still active [ 1008.714038][T29751] binder: 29749:29751 ioctl c018620b 0 returned -14 [ 1008.913267][T29834] binder_alloc: binder_alloc_mmap_handler: 29698 20001000-20004000 already mapped failed -16 [ 1008.924831][T29833] binder: 29698:29833 ioctl c018620b 0 returned -14 [ 1008.925496][T29834] binder: BINDER_SET_CONTEXT_MGR already set [ 1008.938559][T29834] binder: 29698:29834 ioctl 40046207 0 returned -16 [ 1008.949350][T29864] binder_alloc: 29698: binder_alloc_buf, no vma 03:20:30 executing program 0: r0 = getpgid(0x0) clock_gettime(0x7, &(0x7f0000000040)) r1 = socket(0x11, 0x5, 0x490) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='\xff\x00\x00\x00\xe3\x02^\b\x8d') 03:20:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done={0x40106308}], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:30 executing program 1: fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) 03:20:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0xffffff1f}], 0x1}, 0xaf}], 0x1, 0x4004001) [ 1008.955746][T29864] binder: 29698:29864 transaction failed 29189/-3, size 24-8 line 3147 [ 1008.971631][ T22] binder: send failed reply for transaction 963 to 29698:29714 [ 1008.987508][ T22] binder: send failed reply for transaction 966, target dead [ 1009.011619][ T22] binder: send failed reply for transaction 969 to 29749:29755 03:20:30 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:30 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x20000, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400000, 0x0) msgget$private(0x0, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x117}}, 0x20) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)=""/250, &(0x7f0000000300)=0xfa) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x1, {0xa, 0xde12, 0x67, @rand_addr="87f8f7f46d1945d347e70c729e8d0612", 0x4}, r2}}, 0x38) mq_unlink(&(0x7f0000000380)='/dev/kvm\x00') [ 1009.063881][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 1009.138658][T29878] binder: 29875:29878 ioctl c018620b 0 returned -14 03:20:30 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) write$P9_RMKNOD(r0, &(0x7f0000000040)={0x14, 0x13, 0x1, {0x0, 0x1, 0x5}}, 0x14) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 1009.244677][T29885] binder: 29875:29885 BC_INCREFS_DONE node 975 has no pending increfs request 03:20:30 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:30 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:30 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) [ 1009.495269][T29755] binder_alloc: binder_alloc_mmap_handler: 29749 20001000-20004000 already mapped failed -16 [ 1009.532709][T29755] binder: 29749:29755 ioctl c018620b 0 returned -14 [ 1009.569675][T29797] binder: undelivered TRANSACTION_ERROR: 29189 [ 1009.577910][T29797] binder: release 29749:29916 transaction 977 out, still active 03:20:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:30 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)) 03:20:30 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockname(r0, &(0x7f0000000000)=@rc, &(0x7f0000000080)=0x80) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) fcntl$setlease(r0, 0x400, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000000c0)={0x3a, 0x6, 0x0, {0x5, 0x0, 0x11, 0x0, '&*bdeveth0cpuset['}}, 0x3a) [ 1009.741764][T29929] binder: 29928:29929 ioctl c018620b 0 returned -14 [ 1009.898808][T29994] binder: 29875:29994 ioctl c018620b 0 returned -14 [ 1009.916745][T29995] binder_alloc: 29875: binder_alloc_buf, no vma [ 1009.923137][T29995] binder: 29875:29995 transaction failed 29189/-3, size 24-8 line 3147 [ 1009.933197][T29994] binder: BINDER_SET_CONTEXT_MGR already set [ 1009.939369][T29994] binder: 29875:29994 ioctl 40046207 0 returned -16 03:20:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done={0x40106312}], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r3, &(0x7f0000000700), 0x100000000000000d) r4 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000040)={0x0, 0x6, 0x8000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r4, 0xab01, 0x8) 03:20:31 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000000)='/dev/kvm\x00') 03:20:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x2}, 0xaf}], 0x1, 0x4004001) [ 1009.946949][T29797] binder: send failed reply for transaction 974 to 29875:29878 [ 1009.954632][T29797] binder: send failed reply for transaction 977, target dead [ 1009.980543][T29797] binder: send failed reply for transaction 980 to 29928:29933 03:20:31 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000140)) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000001c0)="c7071fe3523cce8ab9c9247bd503b1408790129ceb6f912007b891913b60becb5a93b98ee31f18a4328f8c907a1dabc26c3a24b11d5b774bb4a8ebaae207b1c3473d43e5e5a27c261d77fcc5d025e62516defc4e3e63aa56531a0a2bdaeec02398ed666d495bf64186589e139591b8904a93b80fe1a78290e8a10eb089bd4d194eee4055d1dcdddc24bc1dc2ff04f8707ecd24324f30e94d5081bc9cdace082757fd235fdad0b565998fb0039d103b0e932d07c92b532accda2cc1e6cbf36b44494d408193067af97291cf77e038d2a0fc0b84498047f877449f091010b81dbdc22a8cb096a9dc8ebaa9876834", 0xed, 0x0) keyctl$assume_authority(0x10, r2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x3}, 0xaf}], 0x1, 0x4004001) 03:20:31 executing program 0: r0 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x800) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000080)=""/142, &(0x7f00000001c0)=0x8e) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') lsetxattr$security_ima(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f0000000280)=@sha1={0x1, "9939b2c4c20892901602707a65eadba9a8114718"}, 0x15, 0x1) [ 1010.095588][T30051] binder: 30049:30051 ioctl c018620b 0 returned -14 [ 1010.181348][T30061] binder: 30049:30061 unknown command 1074815762 [ 1010.201781][T30061] binder: 30049:30061 ioctl c0306201 200003c0 returned -22 03:20:31 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', r1}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000280)={'team_slave_1\x00'}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x80000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000240)) 03:20:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x4}, 0xaf}], 0x1, 0x4004001) [ 1010.509504][T30079] binder_alloc_mmap_handler: 1 callbacks suppressed [ 1010.509555][T30079] binder_alloc: binder_alloc_mmap_handler: 29928 20001000-20004000 already mapped failed -16 [ 1010.566261][T29933] binder: 29928:29933 ioctl c018620b 0 returned -14 [ 1010.625162][ T22] binder: release 29928:30079 transaction 988 out, still active 03:20:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306202, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:31 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) accept$nfc_llcp(r0, 0x0, &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r3, 0x100000000}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000240)) close(r2) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x7}, 0xaf}], 0x1, 0x4004001) [ 1010.669970][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 1010.802843][T30098] binder: 30097:30098 ioctl c018620b 0 returned -14 [ 1010.876049][T30061] binder_alloc: binder_alloc_mmap_handler: 30049 20001000-20004000 already mapped failed -16 [ 1010.900850][T30061] binder: 30049:30061 ioctl c018620b 0 returned -14 [ 1010.918007][T30100] binder: BINDER_SET_CONTEXT_MGR already set [ 1010.934118][T30103] binder_alloc: 30049: binder_alloc_buf, no vma [ 1010.940749][T30100] binder: 30049:30100 ioctl 40046207 0 returned -16 [ 1010.956168][T30103] binder: 30097:30103 transaction failed 29189/-3, size 24-8 line 3147 [ 1010.972695][T30102] binder_alloc: 30049: binder_alloc_buf, no vma [ 1011.012646][T30107] binder: 30097:30107 ioctl c0306202 200003c0 returned -22 [ 1011.012748][T30061] binder: 30049:30061 unknown command 1074815762 [ 1011.053333][T30102] binder: 30049:30102 transaction failed 29189/-3, size 24-8 line 3147 [ 1011.062268][T29797] binder: release 30049:30061 transaction 985 out, still active [ 1011.069393][T30061] binder: 30049:30061 ioctl c0306201 200003c0 returned -22 [ 1011.090309][T29797] binder: send failed reply for transaction 985, target dead 03:20:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done={0x40406300}], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1011.109430][T29797] binder: send failed reply for transaction 988, target dead 03:20:32 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$gfs2(&(0x7f0000000140)='gfs2\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="9016bfaa", 0x4, 0x2}, {&(0x7f0000000200)="4dea3bdef59c2e96a694a51102a48260d41ccb81ff1c0484055e10f994323784b4cae287c76c5fcd98fc8b9b495d30d47bd078eb33412c6e6d06fc103f939558e2db3f5d0eed25f2c938934aecca0b92e0d18dcf51524433dabc462f2e27c0b9b89c3c2012d8b40b509337fe2727a9105b9ee0f43af6a9483104c0d851423e95354979051c59c2ed0843efb3161b7f971f1ace85889a4bd229b6899491982affe1f97dd7bd597375d00f9324a4f108041514df0fb13d3c26b4602f70ce22372c29ad95113afe92d3150126e7b2bb0237fcf2bfa5436d76c76f317d82d2c2f4497e84b117", 0xe4, 0x89}], 0x0, &(0x7f0000000400)={[{@hostdata={'hostdata', 0x3d, 'em0bdevnodev[}eth1-eth0em0eth1'}}, {@lockproto_dlm='lockproto=dlm'}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@subj_type={'subj_type', 0x3d, '/dev/v4l-subdev#\x00'}}, {@fowner_lt={'fowner<', r1}}, {@permit_directio='permit_directio'}, {@permit_directio='permit_directio'}]}) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x79a, 0x2000) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000080)={0x7, 0x0, [], {0x0, @bt={0x7, 0x8, 0x1, 0x3, 0x1, 0x81, 0x100000000, 0x8, 0x1, 0x10001, 0xfffffffffffffffa, 0x2c3b, 0xf5, 0x8, 0x14, 0x3}}}) 03:20:32 executing program 0: r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x1, 0x20001) perf_event_open(&(0x7f0000000140)={0x2, 0xffffffffffffff58, 0xfffffffffffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) mq_unlink(&(0x7f0000000480)='@\xb0\v\xfe#!m\xfe\x19\xc4\xb2\x0e\x92\xdf\xfc\x8bZ\xb9H\xc9\x99\x9c\x9e1\xad\xc1\aA\x93\x98L\xb8r\x19\x1as\xe3#\x14\xb7\xce\xb8;\xa6/\x1a\xc6\xbb\x8c\xe8\\\xe3\\Y\x86Q\xa5 \x19\xcb\xf9\xea\xad\xe0\xa8c\xfc\xf0\xeb\xfa7\x0e\xc5\xb5\xbf\x89H\xa8?') r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x404001, 0x0) write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="737461636b2040b00bfe23216dfe19c4b20e92df984cb872191a73e323c6e3ceb83ba62f1a0b2127455ce35c598651a52019cbf9eaade0a863fcf0ebfa370ec5b5bf8948a83f"], 0x55) 03:20:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x8}, 0xaf}], 0x1, 0x4004001) 03:20:32 executing program 3: r0 = accept$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80, 0x0) r2 = fcntl$dupfd(r0, 0xfffffffffffffffe, r1) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$void(r1, 0xc0045878) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r3) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) [ 1011.244542][T30122] binder: 30121:30122 ioctl c018620b 0 returned -14 03:20:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x9}, 0xaf}], 0x1, 0x4004001) [ 1011.311241][T30131] binder: 30121:30131 got new transaction with bad transaction stack, transaction 994 has target 30121:0 [ 1011.348918][T30123] gfs2: invalid mount option: func=FILE_MMAP 03:20:32 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000040)='?da\x95\xf8\x11g\b\xba\xa0\xaeuv/kvm\x00') r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x3034c0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4) 03:20:32 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x1000, 0x4) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x7f, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x721, 0x2000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x202) [ 1011.387047][T30123] gfs2: can't parse mount arguments [ 1011.406447][T30131] binder: 30121:30131 transaction failed 29201/-71, size 0-0 line 3044 03:20:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0xa}, 0xaf}], 0x1, 0x4004001) [ 1011.616564][T30103] binder_alloc: binder_alloc_mmap_handler: 30097 20001000-20004000 already mapped failed -16 [ 1011.640450][T30103] binder: 30097:30103 ioctl c018620b 0 returned -14 [ 1011.664043][ T22] binder: release 30097:30158 transaction 998 out, still active 03:20:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306209, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:32 executing program 0: r0 = dup(0xffffffffffffff9c) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='security.SMACK64EXEC\x00', &(0x7f00000000c0)='/dev/kvm\x00', 0x9, 0x5) mq_unlink(&(0x7f0000000100)='{eth0proL\xe3ecurityQvboxn\x01\x00\x00\x80') sendto$x25(r1, &(0x7f0000000080)="220bce5aab", 0x5, 0x40, 0x0, 0x0) 03:20:32 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x8, [0x6, 0x0, 0x1ff, 0x3, 0x1, 0x7fff, 0x48d0, 0xfffffffffffffffa]}, 0x14) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x120) [ 1011.783078][T30169] binder: 30164:30169 ioctl c018620b 0 returned -14 [ 1011.868691][T30178] binder: 30164:30178 ioctl c0306209 200003c0 returned -22 [ 1012.039195][T30182] binder_alloc: binder_alloc_mmap_handler: 30121 20001000-20004000 already mapped failed -16 [ 1012.053166][T30131] binder: 30121:30131 ioctl c018620b 0 returned -14 [ 1012.056636][T30182] binder: BINDER_SET_CONTEXT_MGR already set [ 1012.066212][T30182] binder: 30121:30182 ioctl 40046207 0 returned -16 [ 1012.066246][T30183] binder_alloc: 30121: binder_alloc_buf, no vma [ 1012.080016][T30183] binder: 30121:30183 transaction failed 29189/-3, size 24-8 line 3147 03:20:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done={0x40406301}], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0xc}, 0xaf}], 0x1, 0x4004001) 03:20:33 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3, 0x8000) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f00000000c0)=0x1) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000100)) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev, @initdev}, &(0x7f0000000240)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={@mcast1, 0x30, r2}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x7) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:33 executing program 1: r0 = accept$packet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x14) r1 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0xffff, 0x8400) r2 = fcntl$dupfd(r0, 0x406, r1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000180)={r3, 0x40, 0x1, [0x1ff]}, 0xa) r4 = fcntl$getown(r2, 0x9) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x4, 0x7f, 0xffff, 0x101, 0x0, 0x1, 0x80, 0x2, 0x3, 0x5, 0x9, 0x0, 0x80000000, 0x401, 0x1543, 0x1, 0x50, 0x3, 0x100, 0x4, 0xcb, 0x7fffffff, 0x7f, 0x20, 0x7f, 0x5, 0x3, 0x4, 0x100000001, 0xff, 0x1000, 0x2, 0x400, 0x7fff, 0x2, 0xffffffff, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x20, 0x7, 0x100, 0x0, 0x40, 0x1a29, 0x800}, r4, 0x8, r2, 0x8) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x8) 03:20:33 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x3, 0x9, 0x8}, 0xc) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) poll(&(0x7f0000000080)=[{r1, 0x5000}], 0x1, 0x8) keyctl$assume_authority(0x10, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x189226a1) [ 1012.088720][T30131] binder_alloc: 30121: binder_alloc_buf, no vma [ 1012.089028][T29797] binder: release 30121:30131 transaction 994 out, still active [ 1012.095119][T30131] binder: 30121:30131 transaction failed 29189/-3, size 0-0 line 3147 [ 1012.109696][T29797] binder: send failed reply for transaction 994, target dead [ 1012.121085][T29797] binder: send failed reply for transaction 998, target dead [ 1012.129494][T29797] binder: send failed reply for transaction 1001 to 30164:30178 03:20:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x10}, 0xaf}], 0x1, 0x4004001) [ 1012.245866][T30197] binder: 30195:30197 ioctl c018620b 0 returned -14 03:20:33 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:20:33 executing program 1: r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c, 0x80000) r2 = fcntl$dupfd(r1, 0x406, r0) syz_genetlink_get_family_id$ipvs(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r4, 0x6, 0x10, &(0x7f0000c86000), &(0x7f0000000000)=0x284ea92c5e2cf055) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) fchmod(r5, 0x20) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x8) [ 1012.313936][T30204] binder: 30195:30204 got reply transaction with bad transaction stack, transaction 1007 has target 30195:0 [ 1012.437861][T30204] binder: 30195:30204 transaction failed 29201/-71, size 0-0 line 2914 03:20:33 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9d, 0x2000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000040)={0x9, 0xe6}) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="ed9f0c6c62cd4f7de69a0b76268e84ee37aab03e5bd8a8ebc9c675f90005ba9a0887a732e11d154e08c81965c24e13474d146301", 0x34) [ 1012.541726][T30178] binder_alloc: binder_alloc_mmap_handler: 30164 20001000-20004000 already mapped failed -16 [ 1012.566921][T30178] binder: 30164:30178 ioctl c018620b 0 returned -14 [ 1012.584464][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 1012.606099][ T22] binder: release 30164:30325 transaction 1011 out, still active 03:20:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306225, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:33 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$void(r2, 0x5451) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:33 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000000080), 0x1000) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) r2 = gettid() fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x1, r2}) [ 1012.773258][T30340] binder: 30339:30340 ioctl c018620b 0 returned -14 [ 1012.839228][T30347] binder: 30339:30347 ioctl c0306225 200003c0 returned -22 [ 1013.003229][T30352] binder_alloc: binder_alloc_mmap_handler: 30195 20001000-20004000 already mapped failed -16 [ 1013.013919][T30204] binder: 30195:30204 ioctl c018620b 0 returned -14 [ 1013.015700][T30352] binder: BINDER_SET_CONTEXT_MGR already set [ 1013.030478][T30352] binder: 30195:30352 ioctl 40046207 0 returned -16 [ 1013.030534][T30353] binder_alloc: 30195: binder_alloc_buf, no vma [ 1013.044243][T30353] binder: 30195:30353 transaction failed 29189/-3, size 24-8 line 3147 03:20:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done={0x40486311}], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x218}, 0xaf}], 0x1, 0x4004001) 03:20:34 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r1}) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:34 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) ioprio_set$pid(0x3, r1, 0x5) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:34 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={0x4}, 0x0, 0x8) [ 1013.052972][ T22] binder: release 30195:30204 transaction 1007 out, still active [ 1013.053038][T30204] binder: 30195:30204 got reply transaction with no transaction stack [ 1013.068305][ T22] binder: send failed reply for transaction 1007, target dead [ 1013.069337][T30204] binder: 30195:30204 transaction failed 29201/-71, size 0-0 line 2899 [ 1013.083432][ T22] binder: send failed reply for transaction 1011, target dead [ 1013.093304][ T22] binder: send failed reply for transaction 1014 to 30339:30347 03:20:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x300}, 0xaf}], 0x1, 0x4004001) 03:20:34 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x893f, &(0x7f0000000000)={'gre0\x00', @ifru_names='irlan0\x00'}) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400fd, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 1013.217360][T30367] binder: 30366:30367 ioctl c018620b 0 returned -14 [ 1013.271417][T30367] binder: 30366:30367 transaction failed 29189/-22, size 24-8 line 2994 03:20:34 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000000c0)) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) [ 1013.317549][T30372] binder: 30366:30372 transaction failed 29189/-22, size 0-0 line 2994 03:20:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x901}, 0xaf}], 0x1, 0x4004001) [ 1013.374305][T30372] binder: 30366:30372 ioctl c018620b 0 returned -14 [ 1013.535527][T30402] binder_alloc: binder_alloc_mmap_handler: 30339 20001000-20004000 already mapped failed -16 [ 1013.570649][T30347] binder: 30339:30347 ioctl c018620b 0 returned -14 03:20:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc030623d, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:34 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x2800, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000100)) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000040)={0x7, 0x100, "c5fc12a70ed3ff6d674ec6fe9b525582d46e37c527b2e9510d18305842475519", 0x8, 0x5, 0x9, 0x1, 0x14}) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done={0x40486312}], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x100000}, 0xaf}], 0x1, 0x4004001) 03:20:34 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000004280)={'eql\x00', &(0x7f0000000180)=@ethtool_per_queue_op={0x4b, 0x4f80, [0x3f800000000, 0x5, 0xaf, 0xb5a, 0xffffffff, 0x100000000, 0x0, 0x9, 0x4, 0x7ff, 0x4000000000000000, 0x69, 0x1000, 0x4, 0x0, 0xe1a, 0xffffffffffffffe1, 0x34, 0x8, 0x5, 0x203, 0x8001, 0x7ff, 0x4, 0x8, 0x80000000, 0x100, 0x3, 0x6, 0xb39, 0x2, 0x100, 0x7, 0x6, 0x1, 0x1f, 0x81, 0x34bd, 0x1, 0x0, 0x101, 0x4f, 0x2000, 0xf17, 0x3f, 0x2, 0x4, 0x2, 0x4, 0x8000, 0x5, 0x6, 0x81, 0x2, 0x5a67, 0x1, 0x2, 0x0, 0x45, 0x0, 0x100000001, 0x45, 0xffffffffffffe632, 0x8684, 0x7400000000000000, 0x2, 0xff, 0x6, 0x400, 0x5, 0x2, 0x3, 0x8, 0x40, 0x401, 0x5, 0x800, 0x5, 0x95df, 0x14f, 0x1, 0x20, 0x8, 0x5, 0x7fffffff, 0x5, 0x100000001, 0x400, 0x125, 0x3, 0xe8, 0xffffffff7fffffff, 0xfffffffffffffff7, 0x5, 0xfffffffffffffff7, 0x6, 0x4, 0x2, 0x4, 0x81, 0x1ff, 0x5, 0x2, 0x3, 0x768, 0x28e7, 0x1, 0xfffffffffffffffc, 0x1000, 0xd5, 0x100000000, 0x100000001, 0x1000, 0x2, 0xd2, 0xffff, 0xe9c, 0xff, 0x6, 0x5, 0x206e53c8, 0x1, 0x200, 0xfffffffffffffff9, 0x4, 0x0, 0x1f, 0x0, 0x0, 0x100000001, 0x7f, 0x3f, 0x8, 0x100000001, 0x4, 0x10000, 0x9, 0x80000000, 0xffffffff7fffffff, 0x4, 0x1, 0x86, 0x2, 0x1, 0x20, 0x100000000, 0x8, 0x0, 0x8, 0x53e2c6cb, 0x81, 0x8, 0x5, 0x6, 0x9, 0x9, 0x8001, 0x0, 0x9, 0x82, 0x100, 0x7, 0x5, 0x4, 0x7, 0x8001, 0x0, 0x1000, 0x6, 0x815b, 0x5, 0x80000001, 0x3f, 0xf3, 0x9, 0x6, 0x10001, 0x1, 0x7, 0x3, 0x8001, 0x7, 0x7f, 0x5, 0x5, 0x39d, 0x3, 0x8, 0x0, 0x4, 0xc, 0x5, 0x0, 0x820, 0x2, 0x6, 0x8, 0x4, 0x7, 0x1000, 0x1, 0xffff, 0x0, 0x2, 0x80000000000, 0x98d, 0x2, 0xa5, 0x100, 0x9c8d, 0x5, 0x4, 0x1, 0x9, 0x1db, 0x80000000, 0x9, 0x4, 0x7, 0x7, 0x4, 0x81, 0x20, 0x29, 0x6, 0xffffffffffffffff, 0x7, 0x0, 0x1, 0x101, 0x3, 0x7, 0x800, 0x9, 0x6, 0x9, 0x83dd, 0x0, 0x80, 0x401, 0x1, 0xffffffff, 0x7fffffff, 0x7, 0xcdd6, 0x8000, 0x6, 0x5, 0xfab, 0xfffffffffffffffe, 0x7, 0x7, 0x80, 0x8, 0x10001, 0x6, 0x0, 0x6, 0x4, 0x2, 0x8, 0x6, 0x1ff, 0x0, 0x3, 0x3, 0x8, 0x6, 0x100, 0x8, 0x5, 0x2, 0x5476, 0x9, 0x4, 0x8, 0x77b6, 0x8, 0xffffffffffffff3a, 0xa1, 0x8, 0x8, 0xffffffffffffe20b, 0xeea, 0x3, 0xfffffffffffffffc, 0x8000, 0x1, 0x3, 0x8, 0x1, 0x2, 0x5, 0x3, 0x6, 0x7fffffff, 0x3ff, 0xfffffffffffffff8, 0x4, 0x0, 0x1b84, 0x3, 0x5, 0x7, 0x9, 0x80, 0x9, 0x0, 0x3f, 0x0, 0xe9f, 0x2, 0xbb2d, 0x0, 0x5d3, 0xceb, 0x1000, 0x6, 0x101, 0xa21, 0x3, 0x5, 0x80, 0x1, 0x10001, 0x9, 0x6, 0x1, 0x5, 0x7537abf6, 0x754, 0x0, 0x10000, 0x0, 0x6, 0x1, 0x5, 0x9, 0x7e9, 0x70, 0x74ce, 0x2, 0xfff, 0x6, 0x3f, 0xe46c, 0x401, 0x3, 0x81, 0xe6c2, 0x100, 0x4fc, 0x9, 0x64, 0x7, 0x2, 0x4, 0x5, 0xff, 0x3, 0x1c000000000, 0x6, 0x0, 0x65, 0x2, 0x800, 0x2, 0xc96, 0x3ff, 0x3, 0x1, 0x8adb, 0x8, 0xffff, 0x8000, 0x7, 0x5aa, 0x100000001, 0x0, 0x0, 0xffff, 0x0, 0x4, 0x3b7a, 0x5, 0x3, 0x5, 0x9, 0x80000000, 0x7fffffff, 0x2, 0x2, 0x2, 0x8000, 0x80000001, 0x2, 0x800, 0x2, 0x3, 0x5, 0x1, 0x1f, 0x6, 0x6, 0x400, 0xfffffffffffffff9, 0x44d5, 0x80000001, 0x80000001, 0x6a1, 0x3, 0x800, 0x100000000, 0xfffffffffffffff9, 0xfff, 0xe000000000000000, 0x7fff, 0x4, 0x8, 0x400, 0x10001, 0xd8, 0x4, 0x3cc0000000000000, 0xffffffff, 0x3, 0xfff, 0x4, 0x2, 0x0, 0x81, 0x8, 0xffffffffffffff28, 0x3ff, 0xffffffffffffffff, 0x559b, 0x8, 0x9, 0x4, 0x9, 0x401, 0x100000000000, 0x6, 0xfffffffffffffffe, 0x9, 0x7fffffff, 0x2, 0x0, 0xfffffffffffffff7, 0xfff, 0x1, 0x1, 0x60, 0x6, 0x3f, 0x7, 0x1, 0x8001, 0x6, 0xfffffffffffffffd, 0x4, 0xa2c, 0x8, 0xc3be, 0x3, 0x4da1, 0x2, 0x9, 0x7, 0x6, 0x200, 0x7, 0x0, 0xffffffff, 0x101, 0xf1eb, 0x4, 0x0, 0x3ffc000000000000, 0x3ff, 0x7ff, 0x5, 0x10000, 0x616, 0x505a, 0x8, 0x4013, 0xfff, 0x8, 0x6, 0x80000000, 0x800, 0x1, 0x3, 0x0, 0x80000000, 0x4, 0x100, 0x7f, 0x40, 0x2, 0x40, 0x80000001, 0x5, 0xffffffff, 0x8, 0x9, 0x613, 0x5, 0xffff, 0x11, 0x100, 0x1, 0x1e4, 0x2, 0x0, 0xd90a, 0x2, 0xbad, 0x7, 0x8b, 0xfffffffffffffff9, 0x2, 0x10001, 0x8, 0xa70, 0x6, 0xecd6, 0x8, 0x5, 0x101, 0x701, 0x9, 0x7, 0x8, 0x7fffffff, 0x0, 0xc498, 0x20, 0xffffffffffffff80, 0xe4, 0x2, 0x7, 0x4, 0x81, 0xfffffffffffffff7, 0x5, 0x100000001, 0x5, 0x2, 0x6, 0x4, 0x1, 0x2, 0x5, 0x4, 0x800, 0x3, 0x2, 0xbd4, 0xfffffffffffff801, 0xaa, 0x3, 0x1c40, 0x80000001, 0x1000, 0xff3, 0x100, 0x8001, 0x4, 0xfff, 0x6b22, 0xfffffffffffffffe, 0x9de, 0x9, 0x1, 0x5, 0x4, 0x2, 0x8, 0x10001, 0x4, 0x6, 0x9, 0xa109, 0x362, 0x1, 0x3, 0x2, 0x9, 0x6, 0x7fff, 0x6, 0x3, 0xfc4, 0x5, 0x9, 0x8406, 0x9, 0x4, 0x8, 0x7, 0x7ff, 0x400, 0x1175, 0x7, 0x6, 0xa4c, 0x9, 0x4, 0x200, 0xffffffffffffad14, 0x2d, 0x6, 0x4, 0x20, 0xfffffffffffffffd, 0x8, 0x100000001, 0x9, 0x8, 0x400000000000, 0x8, 0x7, 0x6587, 0x7, 0x4, 0xfff, 0x5, 0x2000000000000000, 0x7, 0xfee, 0xed, 0x9, 0xd8, 0x51, 0x5d, 0x6, 0x6000000000000000, 0x3, 0x100000001, 0x6, 0x4, 0x1ff, 0x7, 0x3, 0x1ff, 0x3, 0x5eea60f6, 0x10000, 0x3, 0x100, 0x0, 0x80, 0x100000001, 0x0, 0xfffffffffffffffb, 0x5, 0xffff, 0x5, 0x80000001, 0x3, 0x5, 0x18bc, 0x1e77, 0x8, 0x5, 0x5, 0x3, 0x100000001, 0x6, 0xd2a5, 0x1, 0x1f, 0x3, 0x7a7, 0x6, 0x3, 0xfffffffffffffff7, 0x0, 0x20, 0xfffffffffffffeab, 0x6, 0xe1, 0x7c, 0x2, 0x6, 0x5, 0x1, 0x9, 0x8, 0x7fff, 0x9, 0x517ff2c9, 0x5, 0xfffffffffffffe00, 0x2, 0x8, 0x10000, 0x1000, 0x6, 0x2, 0xfffffffffffffff7, 0x2da, 0x6, 0x7ff, 0x23, 0x7ff, 0x81, 0xd4d, 0xff4, 0x6636, 0xab2, 0x0, 0x2, 0x6, 0x7fffffff, 0x800, 0x5, 0xb8, 0x9, 0x8, 0x10000, 0x8, 0x7fff, 0x9, 0x6, 0xfffffffffffff801, 0x101, 0x6, 0x0, 0x800, 0xb2e, 0x1, 0xcc7b, 0x200, 0x8173, 0x1, 0x0, 0x8, 0x8, 0xbf, 0x4, 0x6, 0x3f, 0x7bbd, 0x8001, 0xe1b, 0x10001, 0x3, 0x7, 0x7, 0x0, 0x9, 0x7, 0x6, 0x6, 0xfffffffffffffffe, 0x400, 0x7, 0x0, 0x2, 0x6, 0x4557, 0x100, 0x100, 0x6b9f, 0x7, 0xfffffffffffffffd, 0x9, 0x0, 0xc3, 0x1, 0x10001, 0x6, 0x3, 0xffffffffffffff80, 0xfffffffffffffffc, 0x800, 0x7f, 0x6, 0x1f, 0x5, 0x7, 0x5, 0x6, 0x6, 0xf630, 0x8001, 0xfffffffffffffe01, 0x2, 0x8001, 0x9, 0x6, 0x4, 0x10001, 0x4, 0x9, 0x1, 0x7f06, 0x200, 0x1, 0x8, 0x5, 0x1f, 0x5, 0x7fff, 0x0, 0x20, 0x9a8, 0x1000, 0x10001, 0x8, 0x7f, 0x2, 0x3587, 0xef, 0x0, 0x1, 0x10000, 0x222f7116, 0x6033, 0x4, 0x5985684f, 0xa1, 0x10001, 0x4, 0x3b, 0xf4fa, 0xfff, 0x2, 0xffff, 0x100000000, 0x6, 0x5, 0x200, 0xffffffff00000001, 0x7, 0xffffffff00000000, 0x7fff, 0xfffffffffffff641, 0x0, 0x2, 0x1, 0x1, 0x0, 0x3, 0x9, 0x1, 0xff, 0x10001, 0xfffffffffffff5f5, 0x4, 0x1, 0x0, 0xfffffffeffffffff, 0x1ff, 0x6, 0x7, 0x5, 0x6, 0x80000001, 0x7fff, 0xf25, 0x9, 0xffffffff, 0x9, 0x0, 0x5c7, 0x100, 0x2, 0x8, 0x9, 0xd2, 0x8, 0x10001, 0x41, 0x3, 0x98e1, 0x1, 0xb104, 0x1, 0x2, 0x800, 0x2, 0x88c, 0x554, 0x7, 0x401, 0x7b73, 0x8, 0x0, 0x200, 0x101, 0x8000, 0x1, 0x7, 0x5, 0x6, 0xc84d, 0x7fff, 0x7, 0x2, 0x400, 0x2f7, 0x1, 0x80, 0x6, 0x5, 0xfffffffffffffffe, 0xff, 0x3ff, 0x0, 0x88, 0x5, 0x4, 0x5, 0x3, 0x20, 0x3ff, 0xe, 0x100000000, 0xffff, 0xfffffffffffffc00, 0x7, 0x4, 0x5, 0x9, 0x7, 0x100000000, 0x8, 0x3ff, 0x7, 0x100000001, 0x5, 0x4, 0x1ff, 0x5a1b, 0x9, 0xc59d, 0x9, 0x906, 0x8000, 0x4, 0x1, 0x6, 0xfff, 0x76e, 0x100000000, 0x378, 0xff, 0x100000000, 0x40, 0x6, 0x2, 0x6, 0x1f, 0x20, 0x3, 0xf41b, 0xdf, 0x3, 0x1, 0x0, 0x5, 0x3, 0x33, 0x4, 0x9f, 0x6, 0x3ff, 0x6, 0x0, 0x7cc, 0xd042, 0x100000001, 0x80000000, 0x2, 0x1, 0x81, 0x100000001, 0x2, 0x6, 0x3, 0x1f, 0x6, 0x8, 0x7, 0x3f, 0x8000, 0x480, 0xffffffff, 0x0, 0x4, 0x3, 0x8, 0x7, 0x307b, 0x3, 0x400, 0xc7f, 0xffff, 0x8, 0x9, 0x2, 0x0, 0x7, 0x10000, 0x3, 0xff, 0x8, 0x3, 0x6, 0x1, 0xec7b, 0xcc, 0xfffffffffffffe00, 0xb12c, 0x3f, 0x7, 0x3, 0x6, 0xfc0000000000, 0x4, 0x5eba, 0xffff, 0x9, 0xff, 0x624, 0x5f8, 0x0, 0x7, 0x0, 0x10000, 0x8001, 0x88, 0xfffffffffffffff9, 0x10000, 0x3, 0x1, 0x1f, 0xffff, 0x100000001, 0x8, 0x5, 0x6, 0x2, 0x100000000, 0x1, 0x0, 0x3, 0x200, 0x7ff, 0x0, 0xffffffff, 0x1, 0x9, 0x2, 0x3b, 0x7ff, 0xfffffffffffffffc, 0x2, 0x1, 0x2b228d33, 0x5, 0xf70c, 0x317, 0x2, 0x512, 0x7, 0x1b, 0x5, 0x3, 0xffffffff, 0x0, 0xfe2, 0xba41, 0xffffffff, 0x40, 0x1a2c00, 0x8, 0x80000001, 0x1ff, 0xffffffff, 0x100000, 0x5, 0x7, 0xe0, 0x8, 0x8e86, 0x7, 0x756398e2, 0x2, 0x200, 0x43, 0x400, 0x35c000000, 0x7ff, 0x0, 0x1c00, 0x7fffffff, 0x3ce, 0x101, 0xffffffffffffffa0, 0xfffffffffffffffd, 0x4, 0x1f, 0x7, 0x71d7, 0x9, 0x112, 0x6, 0x6, 0x5, 0x9, 0x7, 0x0, 0x1000, 0x1, 0x5, 0x401, 0x92, 0x8, 0x5, 0x0, 0x3, 0xd26, 0x80000001, 0x0, 0x0, 0x7, 0x9, 0x8, 0x55b2, 0x80000001, 0x2, 0x1, 0x8, 0x6, 0x7, 0xffffffff, 0xd61, 0x0, 0x3, 0x5c, 0x101, 0x3, 0x2, 0x7fffffff, 0x6, 0xf8ab, 0x7, 0x3, 0xb69, 0xffffffffffff5a28, 0x8, 0x200, 0x8, 0x4, 0x80000001, 0x6, 0x10000, 0x6, 0x80000001, 0xff8000000000, 0x66, 0x1000, 0xfff, 0x1, 0x7, 0x7, 0xfffffffffffffff7, 0x7aa9, 0x1, 0x8, 0x1, 0xffffffffffffffe0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0xbf81, 0x3f, 0x7, 0x2, 0x6, 0x0, 0x400, 0x9, 0xa562, 0xfffffffffffffffc, 0x1, 0x2, 0x80, 0x6, 0x1, 0x1, 0x6, 0x3, 0x7f, 0x7, 0x2, 0x3, 0xffe3, 0x4, 0x3, 0x8, 0x10000, 0x9b9, 0x2, 0x3, 0x3, 0x4cd86d62, 0x0, 0x7, 0xc, 0x8, 0x3fffffff800, 0x7fffffff, 0x5, 0x200, 0x400000000000, 0x2, 0x10001, 0x5, 0x3, 0xfffffffffffffff9, 0x7fffffff, 0xfffffffffffffffe, 0x0, 0xe9, 0x3, 0xfffffffffffff001, 0x979, 0x5, 0x8, 0x6, 0x8, 0x7, 0xfffffffffffffbff, 0x7ff, 0x7, 0xeca, 0x7fffffff, 0x2, 0x3, 0x627, 0x7, 0x5, 0x2, 0x800, 0x1, 0x81, 0x7, 0x5, 0x3, 0x7, 0x8, 0x96, 0x9, 0x1, 0x9, 0x200, 0x3, 0x200, 0x5, 0x4, 0x101, 0xffff, 0x9, 0xb744, 0x101, 0x3, 0xff, 0x3ff, 0x2, 0x100000001, 0x10001, 0x6, 0xa9, 0xeff, 0x0, 0x2, 0x6, 0x1f, 0xabc, 0x3, 0x10, 0x4, 0x6, 0x81, 0x6664, 0x3, 0x3, 0x7ff, 0xff, 0x8, 0x3, 0x5, 0x2, 0x6, 0x2, 0xfe1, 0x1ff, 0xfffffffffffffffa, 0x80ab, 0xfffffffffffffffa, 0x0, 0xe4c, 0x28c24127, 0x0, 0x100, 0x0, 0x80000000, 0x630, 0x0, 0x3ff, 0x76c, 0x0, 0xfffffffffffffff9, 0x2, 0x1, 0x6, 0x48000000000000, 0x200, 0x2, 0x5, 0x1, 0x10c2, 0x100000000, 0x9, 0x2, 0x3, 0x100, 0x5, 0x2, 0x2, 0x9, 0x6, 0xad05, 0x8, 0x8001, 0xffffffffffffff84, 0x100000001, 0x4, 0x800, 0x5, 0xffff, 0x78, 0x2406, 0x9, 0x5, 0x1000, 0x6b2, 0x80000000, 0xd3, 0x0, 0x5b, 0x4, 0x6, 0x9, 0xd10, 0x800, 0x7fffffff, 0x9, 0x3, 0x66, 0x8, 0xd420, 0x5fa9, 0x1f, 0x6, 0x7, 0xfffffffffffffffc, 0x5, 0x8, 0x10001, 0xfffffffffffffff8, 0xa72, 0x8, 0x0, 0x9, 0x4, 0x9, 0x20, 0x1ff, 0xffff, 0x80000001, 0x9, 0x5, 0x33486191, 0x7, 0xad, 0x10000000, 0x7, 0x3, 0x9, 0xffff, 0x8, 0x6, 0x4a, 0x5, 0x519c, 0x100000001, 0xaa, 0xfff, 0x2, 0xff, 0x7, 0xa79, 0x4, 0x8000, 0x2, 0x2, 0x1, 0x5, 0x6, 0x8, 0x1f, 0x7, 0x1, 0x0, 0x7d, 0x8, 0x7, 0x7, 0x10001, 0x9, 0xffff, 0xfffffffffffffff9, 0x3, 0x2, 0x1, 0x6, 0x401, 0xffffffffffffff3c, 0xf5, 0x4, 0x8, 0xffffffffffffffff, 0x3, 0x3, 0x81, 0xe91, 0xe1, 0x99b, 0x8, 0x9, 0x3, 0x7, 0xa61, 0x7fffffff, 0x1400000000, 0x80000000, 0x3ff, 0x8, 0x1, 0x8000, 0x4, 0x0, 0x7, 0x20, 0x4, 0xab1f, 0x5, 0x7fffffff, 0x80, 0x100, 0x100000000, 0x9fcc, 0x80, 0x200, 0x6426, 0x1, 0x40, 0x5, 0xfff, 0x1, 0x9, 0x1, 0x41, 0xffffffff00000000, 0x9, 0x2, 0x3f, 0xff, 0xff, 0x1, 0x20, 0x1, 0x7, 0x3, 0x800, 0x9, 0x62dd, 0x7, 0x3, 0x0, 0x884, 0x9f, 0x5, 0x0, 0x7fffffff, 0x80, 0x0, 0x2, 0x3, 0x5e4c, 0x7, 0xfffffffffffffffc, 0x9, 0x2, 0x1, 0x1, 0x6cf, 0x2, 0x5b83, 0x0, 0xffff, 0x10001, 0x3, 0x8, 0x3, 0x28, 0xfffffffffffff000, 0xfffffffffffff000, 0x5, 0x10001, 0x0, 0x8, 0x7, 0x9, 0xffffffffffffffff, 0xfffffffffffffffc, 0x4, 0x0, 0x200, 0x2, 0xfffffffffffffffe, 0x1850b801, 0x7817, 0x5, 0x2, 0xffffffff80000001, 0x2, 0xb65f, 0x400, 0x0, 0x7c4c, 0x7ed, 0x5, 0x9, 0x1, 0x7, 0x7fffffff, 0x2, 0x1f, 0x1a, 0x1, 0x9, 0xb273, 0x3, 0x7fffffff, 0x4, 0x1, 0xe15, 0x2c, 0x22, 0x80000000, 0x2, 0x6, 0xe4bb, 0x1, 0x1, 0x101, 0x8, 0x5, 0x9, 0x1ff000, 0x5, 0x216, 0x80, 0xff, 0x2, 0x1, 0x1, 0x6d94b8d3, 0x1, 0x101, 0x10001, 0x80, 0x7, 0x6, 0x1, 0x200, 0x81, 0xffff, 0x2, 0x800, 0x1, 0x9, 0x7, 0x80000001, 0x3, 0x1f, 0x6, 0x8, 0x8e51, 0x7, 0x5508, 0x3, 0x7, 0x100000000, 0x7, 0x3d8b, 0x8, 0x400, 0x8, 0x670000, 0xffffffff00000001, 0x7de7, 0x6, 0x9, 0x8001, 0x7fff, 0x9, 0x9, 0x7, 0x3, 0x81, 0x8, 0x80000000, 0x401, 0x1000, 0x101, 0x2, 0x1, 0x5, 0x7f, 0x7, 0x462, 0x100, 0x3, 0x800, 0x74b, 0x1000, 0x78, 0xfff, 0x7, 0x9, 0x5, 0x4, 0x1, 0x8, 0x1, 0x4, 0x6, 0x6, 0x1, 0x9, 0x1, 0x5, 0x9, 0x7ff, 0x1, 0x3, 0x100000001, 0xfffffffffffffffa, 0x72, 0xfc, 0xfffe00, 0x6, 0x9, 0x4, 0x5, 0x2de0, 0x2, 0x6, 0x4, 0x80, 0x200, 0x100, 0x300000, 0x1, 0xfffffffffffffffb, 0x7, 0x3, 0x2, 0xffff, 0x5, 0xfffffffffffff801, 0x7, 0x40, 0x8, 0x80, 0x8, 0x81, 0x0, 0x224f, 0xb6e, 0x800, 0x800, 0x9, 0x7fffffff, 0x2, 0xd91c, 0xff, 0x543, 0xfb5, 0xf73f, 0x2, 0x8, 0x7, 0x0, 0x200, 0x5, 0x1, 0xaf4, 0x7e9, 0xbd6, 0x0, 0x8, 0x2, 0x3, 0x90, 0x0, 0x8000, 0x7, 0x7fff, 0x3ff, 0x7, 0x100000001, 0x0, 0x4, 0x9, 0x3, 0x9, 0x3ff, 0x4, 0x2, 0x7fffffff, 0x4, 0x1, 0x0, 0x9, 0x4, 0x3, 0x60, 0x7, 0x100000000000000, 0x7, 0x95f4, 0x4, 0xffffffff, 0x2, 0x1, 0xfffffffffffffffe, 0x4, 0x1, 0xffff, 0x9, 0x3ffc000000000, 0xfff, 0x2971a765, 0xffffffffffffff69, 0x4, 0x3, 0x800, 0x3ff, 0x450, 0x3, 0x9, 0xa744, 0x40, 0x6, 0xed6, 0xf466, 0x3f, 0xffffffffffffffff, 0x100000000, 0xffffffffffff0910, 0x2, 0xaaf6, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001, 0x1ff, 0x5, 0xf0, 0x100, 0xfffffffffffffffd, 0x7ff, 0x8001, 0x9, 0x703fa0fb, 0x763, 0x100000000, 0x449, 0xd48, 0x5, 0x8, 0x800, 0x2, 0x6c3f5d5f, 0x7, 0xfffffffffffffbff, 0xa46, 0x4, 0x10001, 0x10001, 0x400, 0x7, 0x3f, 0x8001, 0x7, 0xffffffff, 0xfffffffffffffff7, 0x2, 0xe88, 0x7, 0x1, 0x4, 0x4, 0x3, 0x9, 0xffffffff, 0xa61e, 0x7, 0x3253, 0x3, 0xac7, 0x6, 0x8, 0x80, 0x5, 0x5, 0x80, 0x2, 0x2, 0x9, 0x5c, 0xffffffffffffffff, 0x2, 0x1, 0xfffffffffffffffe, 0x1, 0x1, 0xffff, 0x10001, 0x4, 0x7, 0x5d7, 0x0, 0x48, 0xffff, 0x6, 0x10000, 0x4, 0x4, 0x2436ed11, 0x0, 0x9, 0xffffffff, 0x7, 0x1, 0xffffffffffffff00, 0x3, 0x3, 0x8de, 0x4c, 0x2, 0x7, 0x0, 0x816, 0x4, 0x27, 0x9, 0x9, 0x7, 0xfff, 0x8, 0x6, 0x4, 0x4, 0x1, 0x4, 0x4, 0x7, 0x5, 0xef, 0x0, 0x1, 0x8000, 0x8ca, 0x3, 0x80000000, 0x47, 0x7ff, 0xffffffffffffffff, 0x100, 0x9fe, 0x0, 0x6, 0x4, 0xf69, 0x0, 0x8001, 0x19, 0x0, 0x2, 0x40, 0x800, 0x2, 0x6, 0x7, 0xfffffffffffffff8, 0x80, 0x400, 0x83, 0x4, 0x9, 0x7, 0x4, 0x400, 0x6, 0x2, 0x100000000, 0x81, 0x8000, 0xff, 0x0, 0x80, 0x0, 0x1, 0xfffffffffffffe01, 0x7ff, 0x101, 0x5, 0x4, 0x8, 0x80000001, 0xffffffffffffffff, 0x0, 0x8, 0x5, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8, 0x1, 0xff, 0x1, 0x6c1a, 0x5, 0x1, 0x100000001, 0xfffffffffffeffff, 0x7ff, 0x0, 0x9b3, 0x7fffffff, 0x10000, 0xffffffffffff9649, 0x3, 0x7, 0x7, 0x4, 0x7f, 0x9, 0x100000001, 0x7, 0xffffffff, 0x9, 0x6, 0x8001, 0x401, 0x2, 0xfffffffffffffff9, 0x3b, 0x6, 0x4010, 0x2, 0x5, 0x1, 0x200000000000000, 0x5, 0x0, 0x7, 0x8, 0x9, 0x8, 0x8, 0x8, 0x2, 0x23a8, 0x9, 0xd3e, 0x100000001, 0x0, 0x5, 0x7a, 0x10000, 0x8, 0x6, 0x3f, 0x8, 0x7, 0x1, 0x5, 0x0, 0xd621, 0x100, 0x1, 0x9, 0x1, 0x9, 0x2, 0xaa, 0x0, 0x0, 0x144, 0x1ff, 0x3f, 0x17, 0x1, 0x1, 0xc32c, 0x8001, 0x0, 0x5, 0x10000, 0x6, 0x0, 0x2d7, 0x91cc, 0x3f, 0x7, 0x5, 0x81, 0x5, 0x9, 0x80000001, 0x5, 0xffffffff7fffffff, 0x5, 0x5, 0x8, 0x7, 0x5b, 0x3, 0x5, 0x100, 0x5e, 0xfff, 0x56ff, 0xfffffffffffffffb, 0xeb, 0x2, 0xfffffffffffffffa, 0x8, 0x6, 0x0, 0xc9, 0x3, 0x100000001, 0x1, 0x1, 0x1ff, 0x7, 0x10001, 0xbe, 0x5, 0xffff, 0x6, 0x8, 0x4, 0x0, 0x2, 0x0, 0x669e, 0x80000000, 0x8000, 0x1, 0x6, 0x3, 0xa79e, 0x2db, 0x48, 0x9, 0x7fff, 0x4e49f414, 0xffff, 0xb22, 0x9, 0x80, 0x1, 0x6, 0x49, 0xffff, 0x4, 0x3, 0x0, 0x9, 0x8, 0x2, 0x6, 0x7, 0x8, 0x3, 0x6, 0x2, 0x40, 0x8, 0x8, 0x80000000, 0x37d4bde2, 0x4, 0x7fff, 0x4b, 0x40000000000, 0x297, 0x80000001, 0x0, 0x81, 0x7, 0x101, 0x2, 0x8001, 0xffffffff, 0x3, 0x1, 0x7f, 0x6, 0x80000000, 0x100000001, 0x0, 0x40, 0xc5, 0x0, 0x2, 0x10000, 0x9, 0x2, 0x938, 0x7, 0x4, 0x4, 0x2, 0xffffffffffff954a, 0x9, 0x2, 0x82, 0x6, 0x0, 0x7, 0x500000000000000, 0x7ff, 0x10001, 0x4, 0x9, 0x6, 0x12, 0x1, 0x5, 0x8001, 0x1f, 0x7fff, 0x0, 0x9, 0x3f, 0x100000001, 0x7, 0x8, 0x1000, 0xfff, 0x9b0, 0x8, 0x6, 0x9, 0xfffffffffffffffe, 0x5, 0x8000, 0x4, 0x2, 0xc8d7, 0xddc, 0x5, 0x5, 0x6, 0x4, 0x8000000000000000, 0x4, 0x10001, 0x9, 0x7, 0xde2, 0x0, 0x0, 0x1, 0x10000, 0x401, 0x8, 0x916, 0x63c1a6ac, 0x2, 0x1, 0x80000000, 0x81, 0x0, 0xff, 0x4, 0x6, 0xfffffffffffff81a, 0x20, 0x5, 0x7ff, 0x0, 0x6, 0xfffffffffffffffb, 0x1, 0x1, 0x3, 0x3, 0x9, 0xb53, 0x81, 0x40, 0x61e, 0x9, 0xfffffffffffffffd, 0x9eb, 0x8000, 0x8, 0x4, 0x9, 0x9, 0x10001, 0xaf, 0x4, 0x8, 0x85a7, 0x0, 0x9285fd2, 0x0, 0x29eddb89, 0xfc6, 0x40, 0x9, 0xfff, 0x3, 0xadcb, 0x1, 0x6, 0x3, 0xb5, 0xea7, 0x7, 0x200, 0x1, 0x4a, 0x8, 0x800, 0x401, 0xff, 0x1, 0x2, 0x1, 0x0, 0x2, 0x7, 0x1ff, 0x7, 0x6, 0x101, 0x0, 0x8, 0x7, 0x0, 0x7ff, 0x800, 0x1ff, 0xff, 0x5, 0x1, 0xfffffffffffffbcf, 0x0, 0x1, 0x100, 0x4, 0x4, 0x2, 0xfffffffffffffffa, 0xdda, 0xc651, 0x4, 0x0, 0xffffffff, 0x9, 0x1, 0xffffffffffffffc0, 0x3, 0x8, 0x0, 0x1f, 0x8, 0x6, 0x1, 0x1ff, 0x40, 0x3ff, 0x80000000, 0x8df, 0x9, 0x6, 0x3ff, 0x6a0, 0x80000001, 0xab6e, 0x6, 0x0, 0x1, 0x800, 0x1e98, 0x3f, 0x9, 0x6, 0x5, 0x1000, 0x6, 0xc2a1, 0x10001, 0x706, 0x3, 0x3, 0x0, 0x6, 0x94d, 0x1, 0x9, 0x0, 0x81, 0xe599, 0x3, 0x4b9, 0x100000001, 0x0, 0x7, 0xa0f, 0x3f, 0x9, 0x1, 0x2, 0x3, 0x5, 0x40, 0x1d0ce692, 0x7ff, 0x100000000, 0x6, 0x3, 0x20, 0x0, 0x7f, 0xffff, 0x5, 0x6, 0x5, 0x5660, 0x9, 0x6, 0x7, 0x4, 0x7, 0x2f, 0x7fff, 0x3, 0x4, 0x1, 0x80000000, 0xa2e9, 0x18, 0x8, 0x55, 0x7, 0x81, 0x0, 0x10001, 0x9, 0x1, 0x51fe, 0x4, 0x1, 0x1a, 0xa6, 0x6, 0x80, 0x1000, 0xfffffffffffffff9, 0xffff, 0x0, 0x8001, 0x1, 0x32, 0x7f, 0x3, 0x9, 0x3, 0x1, 0x3e, 0x8, 0x6, 0x8, 0xff, 0x8, 0x100000000, 0x3, 0x3, 0xa0e8, 0x40, 0x82db, 0x0, 0x40, 0x1000, 0x8, 0x100000001, 0x38e59771, 0x0, 0x6, 0x1f, 0x100000000, 0x6, 0x4, 0x0, 0x81, 0x3, 0x100000001, 0x10000, 0x5bc, 0x7fffffff, 0x9, 0x1ff, 0x8000, 0x3, 0x3f, 0x7, 0x5, 0x4, 0x7, 0x1, 0x8, 0x32e1, 0x7fffffff, 0x1, 0x80000000, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffd, 0x1, 0x100000000, 0x80, 0x0, 0x6e7d, 0xfffffffffffffff9, 0x7, 0x51c, 0x3, 0x2, 0x7, 0x1, 0x3f, 0xffff, 0x1ea, 0x7, 0x3, 0x5, 0x401, 0xffffffffffff0001, 0x5, 0x81, 0x2, 0x0, 0x4, 0x80000000, 0x9, 0x7fffffff, 0xedb, 0xffffffffffffff81, 0x8, 0x0, 0x9, 0x80000001, 0xff0, 0x4, 0x4, 0x4, 0x3f, 0x3, 0x81, 0x0, 0xd8, 0x9, 0x1, 0x0, 0x8, 0x800, 0x401, 0x6, 0x20, 0x7ff, 0x10001, 0x1, 0x80, 0x5, 0x4, 0x8000, 0x1, 0x1f, 0x3, 0x6, 0x9, 0x6, 0x6, 0x2, 0x8, 0xffffffffffffffff, 0x6, 0x1, 0xfffffffffffffffc, 0x6, 0x4, 0x8000, 0x7fffffff, 0x990c, 0x0, 0xd0000000000, 0x8, 0xffff, 0x4, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x7fffffff, 0x0, 0x9, 0x100000000, 0x2, 0x6, 0x1, 0x0, 0x9000000000, 0x1000, 0x1, 0x3f, 0x4, 0x0, 0xf, 0x2, 0x10000, 0x20000000000000, 0xfff, 0xfffffffffffffff7, 0x401, 0x1, 0x2, 0x3, 0xc0d, 0x8, 0xc762, 0x4bf, 0x1, 0x24ff, 0x5, 0x3ff, 0x5e, 0x4, 0x0, 0x44622572, 0x2, 0x0, 0x9, 0x7, 0x1, 0xb05a, 0x9, 0x1f, 0x8, 0xd991, 0x0, 0x3, 0x100000000, 0x5a8, 0x9, 0xfff, 0x100000000, 0x5, 0x80, 0x2, 0x8, 0xf3, 0x0, 0x4, 0xff, 0x80, 0x3, 0xbdc2, 0xffffffff, 0x7, 0x80000001, 0x1, 0xfffffffffffffeff, 0x1, 0x6, 0x80000000, 0x6, 0x7fffffff, 0x1ff, 0x4a0, 0x81, 0x400, 0x1, 0x7, 0x3, 0x46, 0xaf, 0x4, 0x2572, 0x401, 0x7, 0x3ff, 0xfff, 0x800, 0x5, 0xfffffffffffffffc, 0xaf8, 0x0, 0x3, 0x8000, 0x8, 0x9d, 0x7, 0x61, 0x100000001, 0x80, 0x7, 0xc5, 0x9, 0x2, 0x1, 0xfdac, 0x3, 0x1, 0x7fff, 0x4, 0x4, 0x100000000, 0x3b, 0x200, 0x776, 0x3, 0xffffffffffffffc0, 0x7bd6, 0x4, 0xfff, 0xffffffffffffde85, 0x24ca, 0x1, 0x93, 0x7d55cbe0, 0x6, 0x7, 0x80, 0xfff, 0xcec, 0x8, 0xdbc, 0x2, 0xadfd, 0xff, 0xdc, 0x3, 0x6, 0x8, 0xfffffffffffffffb, 0x400, 0x8, 0xffff, 0x7, 0x4, 0x7fff, 0x0, 0x9, 0x3, 0x4, 0x80, 0x1, 0x9, 0x5, 0x45c, 0x800000000000, 0x9, 0x6, 0x0, 0x7, 0x8, 0x1, 0xffffffffb07ec1df, 0xe650, 0x100000001, 0xa57b, 0x4, 0x4, 0x100000000, 0x24, 0x4, 0xfffffffffffffffa, 0x3ff, 0x7ff, 0x7, 0x0, 0x9, 0x8, 0x8, 0x7f, 0x0, 0x4, 0xffff, 0x7, 0x3, 0x3, 0x7, 0x8, 0x0, 0x1, 0x61665c38, 0x0, 0x200, 0x6f, 0x0, 0x80000000, 0x1f, 0xbbe4, 0x101, 0xc000000000, 0x3f, 0x7, 0x2, 0x10000, 0x7, 0x0, 0x6, 0x1, 0x3, 0x7, 0x9c2, 0x100, 0x5c7, 0xffffffffffffff46, 0x9, 0x800, 0x1, 0x0, 0x400, 0x70d, 0x9, 0x7, 0x2, 0x1, 0x4fb, 0x2, 0x8, 0x2, 0x8000, 0x3ff, 0x3, 0xffff, 0x100, 0x6, 0x7, 0x10001, 0x40, 0xffffffff7fffffff, 0x1f, 0x7, 0x1fffe00000, 0x1000, 0x3, 0x0, 0x4, 0x80, 0x7362499d, 0x3ff, 0x7, 0xe0a9, 0x81, 0x7fff, 0x9, 0x5, 0x29db, 0x4, 0x2, 0x0, 0x6, 0x0, 0x4, 0x0, 0x1, 0x4, 0x8, 0x8, 0x80000001, 0xffffffffffffff01, 0x8001, 0x2, 0x8, 0x5, 0x3, 0x5, 0x9, 0x1f, 0x9, 0x81, 0x0, 0x0, 0x8, 0x5, 0xfffffffffffff86f, 0x7ff, 0x400, 0xfffffffffffffa47, 0x4, 0x8001, 0xc4e, 0x4, 0x5, 0x9, 0x100, 0x5, 0x5, 0x80000001, 0x4, 0x7, 0x10000, 0x10000, 0x40, 0x6, 0x9, 0x1, 0x9, 0x5, 0x7b8f, 0x9fc4, 0x2, 0x3, 0x1, 0xca9c, 0x100000001, 0x9, 0x800, 0x2, 0x6, 0x1f, 0x5, 0x7, 0x1, 0x2, 0x4, 0x3, 0x6323, 0x7ff, 0x6, 0x22, 0x3, 0xdcd9, 0xc38, 0x5, 0x5, 0x2, 0x9320, 0xb1, 0x7ff, 0x10000, 0x40, 0x7, 0x401, 0x1, 0x4, 0x7f, 0x20, 0x6, 0x2, 0x7fff, 0xffffffffffffffe0, 0x8, 0x7fffffff, 0x3, 0x5, 0x7ff, 0x8, 0x0, 0x3, 0x0, 0x3000000000, 0x101, 0x80000001, 0x4, 0xb84, 0x3, 0x7fff, 0x8000, 0x1, 0x0, 0x68c5, 0xffffffff, 0x3ff, 0x1cb6, 0x9, 0x8, 0x7, 0x5, 0xf1c6, 0x5b, 0x2, 0x1000, 0x7ff, 0x10001, 0xf092, 0x1, 0x1ff, 0x3f, 0xb988, 0x0, 0x6, 0x5, 0x4800000000000, 0x100, 0x6, 0x7f, 0x20, 0x82, 0x4, 0x5, 0x10001, 0xfffffffffffffe01, 0xb7, 0x9, 0x3, 0x5, 0x7, 0x81, 0x81, 0x6, 0x1, 0x1000, 0x3, 0xf7, 0x931, 0x4, 0x7, 0x800, 0xa1, 0x10000, 0xc, 0x5, 0x7, 0x400, 0xfff, 0x5, 0x100, 0x9, 0xba8, 0x7, 0x10001, 0x5, 0x25900000000000, 0x8, 0x0, 0x4, 0x7a5, 0x7, 0xffffffffffffffb3, 0x0, 0xfffffffffffffff8, 0x3, 0xb52, 0x5, 0xc73, 0x5, 0x5c, 0x9, 0x9, 0x5, 0x8001, 0x6, 0x3, 0x100000000, 0x800, 0xfffffffffffffff9, 0x8, 0xfffffffffffffffb, 0x5, 0xfffffffffffffffc, 0x8, 0x2, 0x100, 0x1000, 0x1, 0x7f, 0x8, 0x8, 0x10000, 0x401, 0x6, 0x5, 0x80, 0x1, 0x9, 0x0, 0x80, 0x80000001, 0x2b43, 0x85, 0x1, 0x800000000000000, 0x3d, 0x9, 0xf4, 0x5, 0x4, 0x6, 0xa2, 0x25, 0x7, 0x3, 0x8, 0x8ca6000000, 0x7fff, 0x3, 0x100000000, 0x20, 0x748d, 0xffffffffffff8000, 0x7, 0x5, 0x1, 0x1, 0x7fff, 0x7fffffff, 0x1, 0xfffffffffffffffc, 0x1, 0x6, 0xfffffffffffffffa, 0xfffffffffffffff8, 0x7, 0x4, 0x1ff, 0x1, 0x1, 0x10001, 0x6, 0x80000000, 0xe, 0x0, 0xffffffffffffff81, 0x7fff, 0xec, 0x1, 0x100000001, 0x1, 0x9, 0x0, 0x8, 0x7, 0x401, 0x0, 0x9, 0x8, 0x5, 0x40, 0x200, 0x7, 0xff, 0x9, 0x1, 0x10001, 0x8, 0x5, 0x20, 0x6, 0x9bc, 0x80000000, 0xffff, 0x3, 0x2, 0x200, 0x53, 0xafc, 0x81, 0x8001, 0x2, 0x7fff, 0x1, 0x4, 0x7fffffff, 0x9, 0xfffffffffffffff8, 0x3f, 0x4, 0x80000000, 0x6, 0xa000000, 0xa9, 0x7, 0x459b, 0x9, 0x0, 0x7, 0x5, 0x2, 0x3, 0x3, 0x8001, 0x5, 0x200, 0x57f, 0x5, 0x1, 0x5, 0x4, 0xc44, 0xfffffffffffffffe, 0x0, 0x4b, 0x800, 0x400, 0x4, 0x9, 0x4, 0x6, 0x4, 0x1ff, 0xfffffffffffff2f3, 0x0, 0x3, 0x8001, 0x1, 0xff, 0x9, 0x0, 0x7f, 0x401, 0x8, 0x100000000, 0x7ff, 0x5, 0x4, 0xf39, 0x7fff, 0x7ff, 0x1000, 0x2, 0xfffffffffffffffc, 0x9, 0x3, 0x5, 0x100000000, 0x64, 0x1000000000000000, 0x81, 0x0, 0x22, 0xd95, 0x6, 0x8, 0x8, 0x10000, 0x1, 0x4, 0x7, 0x6, 0x5, 0x1, 0xfffffffffffffffd, 0x8, 0x100000001, 0x695c, 0x3f, 0x4, 0x3, 0x8003, 0x4e, 0x0, 0x60aa, 0x6, 0x0, 0x2, 0x5, 0x3ff, 0x3f, 0x7f, 0x862, 0x2, 0x524, 0x7, 0x8, 0x8, 0x4, 0xf, 0xcca9, 0xc5, 0x401, 0x7, 0x80000000, 0x7, 0x3, 0x4, 0x40, 0x2, 0x1, 0xfffffffffffffffe, 0xb2ba, 0x3, 0xf51, 0x2, 0x4, 0x6, 0x9, 0x8001, 0x76b, 0x5ad200000, 0x7f, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0x1, 0x7, 0x800, 0xfe, 0x0, 0xd4f, 0x968, 0x2, 0x3, 0x6, 0x5, 0xe7, 0xa582, 0x7fff, 0x8001, 0x1ff, 0x8d88, 0x0, 0x1, 0x7, 0x2, 0x80000001, 0xeb, 0x3, 0x6, 0x4, 0x4, 0x7, 0x9, 0x8, 0x2, 0x800, 0x8, 0x2, 0xffffffffffffffff, 0x5, 0x3, 0xe1, 0xffff, 0x4585, 0x5, 0x9, 0x6, 0x1, 0x401, 0xe, 0x5, 0x9, 0x10000, 0x1, 0x7, 0x7, 0x9, 0x38e, 0x6, 0x8, 0x3, 0x200, 0xffffffffffffff81, 0x8, 0x3, 0x3f, 0x3f, 0x4, 0x1, 0x0, 0x9b29, 0x7, 0xfff, 0x2, 0x3, 0x0, 0xe0, 0x5, 0x5, 0x4, 0x3, 0x8, 0x100000000, 0x101, 0x0, 0x6, 0x5, 0x9a, 0x0, 0x4, 0x7, 0x100, 0x100, 0xc1, 0x9, 0x4, 0x0, 0xffffffffffffff01, 0x5, 0x6, 0x6, 0x18067ba7, 0x1, 0x10001, 0x3, 0x1a44, 0xffffffffffff7fff, 0x5, 0x9, 0xfff, 0x2, 0x999, 0x9, 0x611f, 0x3f, 0x1, 0x1, 0x9, 0x6, 0x9, 0x86, 0x800, 0x401, 0x6, 0x5bbc, 0xce, 0x59, 0x1, 0x1, 0xca, 0x101, 0x1, 0x3f, 0x1, 0xfffffffffffffff8, 0xea6, 0x3, 0x100000001, 0x5, 0x40, 0x101, 0x9, 0x2, 0x2, 0xff, 0x80, 0xfd, 0x1, 0x40, 0x4, 0xea, 0x8, 0x10001, 0x39d3, 0x2, 0x1, 0xfffffffffffff6c0, 0x8, 0x6ee, 0x6, 0xcc7, 0xe, 0x1e, 0xefe, 0xe96, 0x9, 0x4, 0x88, 0x0, 0x800000000000, 0x6, 0x0, 0x1, 0xf03, 0x1000, 0x10000, 0x401, 0x0, 0x8, 0x6, 0x7, 0xcd, 0x6, 0x5, 0x100000000, 0x4, 0xa4, 0x100000001, 0x9, 0x20, 0x400, 0x0, 0xffffffffffffffff, 0x6, 0xfffffffffffffe01, 0x1, 0x8, 0x7, 0x0, 0x8, 0x1a, 0x10000, 0x10000, 0x2, 0xf4, 0x100, 0x6, 0x2, 0x40, 0x7, 0x2, 0x5, 0x3f, 0x3, 0x9, 0x1, 0x6, 0x6, 0x7, 0x62, 0x81, 0x8f, 0x0, 0xfffffffffffffe86, 0x1a09, 0x2, 0x5, 0xe8, 0x8001, 0xffff, 0x6, 0x20, 0x5, 0x400, 0x2, 0x8, 0xfffffffffffffffb, 0x60a4, 0x3, 0x6, 0x9af, 0x5, 0x1b35, 0x800, 0x100, 0x4, 0x4, 0x6, 0xfff, 0x401, 0x9, 0x1ff, 0x800, 0x7, 0x3, 0x8, 0x4, 0x1, 0x7, 0x8d, 0x1c00000000, 0x1, 0x6, 0x3, 0x2, 0x5, 0x837, 0x100000000, 0x7ea4, 0x7, 0x3, 0x10000000000000, 0x8000, 0x4, 0x9, 0x3ff, 0x0, 0x0, 0xffff, 0xf4, 0x8, 0x3, 0xb43, 0xfff, 0x5, 0x3, 0xfffffffffffffeff, 0x2, 0x5b7, 0x6, 0x4, 0x6, 0x1, 0x5, 0x6, 0x1, 0x7, 0x5, 0x400, 0x7fffffff, 0x4, 0x7ff, 0x9, 0x7, 0x8, 0x3, 0x37, 0x9, 0x2, 0x5, 0x7fff, 0x3ff, 0x8, 0x91, 0x8, 0x5, 0x101, 0x7, 0x0, 0xe000000000000000, 0x798, 0x0, 0x7fffffff, 0x6, 0x1, 0x10000, 0x40, 0x80, 0x2, 0xbd, 0x7ff, 0x3, 0x3, 0xfff, 0x4, 0x400, 0xffffffffffff9ad5, 0xfffffffffffffffb, 0xff, 0x9, 0x9e, 0x1, 0x88, 0xfffffffffffffff9, 0xfd3a, 0xfffffffffffffffe, 0x1000, 0x6, 0x8, 0x6, 0xffffffffffffff01, 0x80, 0x100, 0x88d6, 0xd04, 0x5, 0x401, 0x41a, 0x2, 0x1f, 0x5, 0xff, 0x7, 0x80, 0x83c, 0x6, 0x848d, 0x3f, 0xf47, 0x6, 0x800, 0x8, 0x7, 0x7, 0x79, 0x1000, 0x100000000, 0x7, 0x8, 0xde, 0x2, 0x100000001, 0xab81, 0x6f03, 0x9, 0x8, 0x0, 0x1f, 0x7a2f, 0x0, 0x8, 0x1ff, 0x3, 0x2, 0x1000, 0x9, 0x401, 0x7, 0x7, 0x3, 0x4, 0x8001, 0x4, 0x3ff, 0x9, 0x43, 0x81, 0x10001, 0x8, 0x7, 0x1, 0x1, 0x3, 0x800, 0x4, 0x3, 0x1, 0x3, 0x1, 0x3ff, 0x7, 0x0, 0x0, 0x100, 0x8, 0x4, 0x100000000, 0x9, 0x5cf, 0x800, 0x0, 0xffffffffffffff29, 0x4c, 0x3, 0x9, 0x2, 0x20000000000000, 0x614, 0x8, 0x5, 0x2e, 0xbb36, 0xffffffffffffff7f, 0x5, 0x8, 0x0, 0xffffffffffff6f0e, 0x7, 0x2f0, 0xfff, 0x7, 0x6, 0x7, 0x0, 0x7ff, 0xb3d3, 0xffffffffffff27a0, 0x8, 0x832, 0x1, 0x5ed, 0x0, 0x14, 0x2, 0x6, 0x8000, 0x9e, 0x3, 0x3, 0x7a, 0xc819, 0x800, 0x9, 0x0, 0x17, 0x6, 0x800, 0x8, 0x6, 0x3, 0x80000000, 0xfffffffffffffff9, 0x9, 0x5, 0x7fff, 0x0, 0x6, 0x0, 0x4, 0x7, 0x7f, 0xa, 0x1f3, 0x9, 0x0, 0x7, 0xc3c4, 0x1, 0x400, 0x6, 0x9, 0x7, 0x400, 0x0, 0x4, 0x4, 0x4, 0x8, 0x259, 0x2, 0x6, 0xca, 0x5, 0x2, 0x884, 0x7, 0x240000000000000, 0x2f, 0x3c1, 0x2, 0x4fe, 0x4, 0x0, 0x5, 0x0, 0x8000, 0x2, 0x9, 0x9, 0x1, 0x3, 0x8, 0x15, 0x5, 0xffffffffffffff81, 0x3, 0x1ff, 0x4, 0x0, 0x1, 0x4, 0x0, 0x10000, 0x9b, 0xaea, 0x4, 0x83, 0x4, 0xce, 0x8, 0x3, 0xc8b, 0x2b3, 0xfff, 0x2, 0x3, 0xfffffffffffffffa, 0x1, 0x1000, 0x2, 0x40, 0x1, 0x2, 0x1000, 0x0, 0xfffffffffffffffe, 0x1ff, 0x5, 0x9451, 0x0, 0x5, 0x1f, 0x5, 0x20, 0x6, 0x2, 0xc734, 0x2e15, 0x3, 0x80000001, 0x0, 0x0, 0x0, 0xbc, 0x7, 0x5, 0x3, 0x7, 0x7, 0x7, 0x1, 0x8001, 0x3, 0x8, 0x10000, 0x6, 0x0, 0x212f, 0x0, 0x400, 0x7f, 0x7, 0x80000000, 0x401, 0x1, 0x8, 0x8, 0x1, 0x9, 0x2fc, 0x7fff, 0x5, 0xf61, 0xd7, 0x7f, 0x9, 0x81, 0xffffffff, 0x20, 0xffffffffffffff7f, 0x2b, 0x0, 0xffffffff80000000, 0x9, 0x100, 0xb6, 0x81, 0x2, 0xffffffffffff3073, 0x7, 0x81, 0x81, 0x7f, 0xfffffffffffffff9, 0x200, 0xf7e6, 0x7, 0x2, 0x30, 0x35b1, 0x2, 0x6, 0xd53, 0xb9, 0x5, 0x81, 0x1ff, 0x2, 0x5, 0x1c9525c8, 0x100000000, 0x2, 0xf5, 0xbe, 0x6, 0x6, 0x9, 0x7, 0x9, 0xfffffffffffffffc, 0x5, 0xe79, 0x4, 0x9, 0x1, 0x7, 0x100000000, 0x5, 0x0, 0x3e, 0x1a3, 0x7ff, 0x9, 0x81, 0x8, 0xd2e, 0x3fffffffc000000, 0x9, 0x7fff, 0x5, 0x7fff, 0x1, 0x0, 0x6, 0x5, 0x4, 0x20, 0x2b6, 0x200, 0x1ff, 0x7fffffff, 0x7, 0x1, 0x0, 0x4, 0x2, 0x6, 0x1, 0x8000, 0x7fff, 0x2, 0x0, 0x8, 0x5, 0x100000000, 0x7, 0x9, 0x6c09, 0x98b, 0xff, 0x100000000, 0x619a45c7, 0x6, 0x3, 0xfffffffffffffeff, 0x8, 0xffffffffe0394d61, 0x4, 0x101, 0x4, 0x0, 0x3, 0xffffffff, 0x6, 0xfffffffffffffff9, 0x8509, 0x4dc, 0x8000, 0xffffffffffffd38a, 0x9, 0x8000, 0x3, 0x7fffffff, 0x1, 0xffff, 0xfff0000000000, 0x3, 0x5, 0x5, 0x7, 0x7, 0x10001, 0x9, 0x4, 0x200, 0x7, 0x5, 0x1c000000, 0x9, 0x1, 0x9, 0x4, 0x80, 0x5, 0x1000, 0x3, 0x9, 0x3, 0x8, 0x8, 0x8000, 0x6, 0x0, 0x3, 0x2, 0x81, 0x8, 0x4745, 0x1, 0x0, 0x20, 0x4, 0x80000000, 0x3f, 0x0, 0x1, 0x1ff, 0x0, 0xd0, 0xfff, 0xfffffffffffffffa, 0x1, 0x20, 0x3, 0x685, 0xfffffffffffffff9, 0x2, 0x7, 0x7fff, 0xdc1, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x8, 0x1, 0x2016, 0x8f, 0x5, 0x7f, 0x1, 0x0, 0x5, 0x2, 0x8, 0x0, 0x7ff, 0x100000001, 0x7, 0xb000000000000000, 0x1000000000000000, 0x8, 0x7, 0xfffffffffffffffa, 0x4, 0x4, 0x9, 0x0, 0x3, 0x3, 0xfc, 0x0, 0x80000001, 0x0, 0x7, 0x0, 0x0, 0x4, 0x401, 0x9, 0x9, 0x8, 0x47a, 0x9, 0xfffffffffffffffc, 0x9, 0x80000000, 0x7fffffff, 0xfffffffffffffffe, 0x75bd, 0x5, 0xe48, 0x1, 0x9, 0x3, 0x4, 0x101, 0x6, 0x3, 0x434, 0xffff, 0x101, 0x81c, 0x200, 0x3, 0x7, 0x8, 0x8, 0x2d384968, 0x3f, 0x0, 0x7], "bddb37f975abcd84cfe6ac685b25d3e394b54f2e3c3891a52682ce6227491b5938a74546143eb1f356a27d6304801ce0a63271f88050f2d7620d5d78230e5dafa10db4f534a7777ccebfb05e93b33c8d2b6ac8e5cbd536313f34edeeeba3ad4227f8b1ea6aed8fd9e8972ebb49f83aa85fe9cf0df51c3802c1240638afb4b2971c2d6bb1337339ac58acdde9955d30e9a4aaa1d88a3e91f2020539f6215e6f1264da2fba39f1abdda10f8bca9692e2655f58d4207104f2605a69f7956ac6e568a3ae406a1e29ec1bfc021088006a5f4ee3eca0ca7337579a801fdcd514319b92d944b2293e0d219bab4deefd23432c"}}) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x10000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in6={0xa, 0x4e24, 0x10001, @local, 0x7}}}, 0x90) 03:20:34 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) [ 1013.587547][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 1013.665816][T30410] binder: 30409:30410 ioctl c018620b 0 returned -14 [ 1013.776926][T30424] binder: 30418:30424 ioctl c018620b 0 returned -14 [ 1013.783168][T30431] binder: 30409:30431 got reply transaction with bad transaction stack, transaction 1024 has target 30409:0 03:20:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x20000101}, 0xaf}], 0x1, 0x4004001) 03:20:34 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000080)=[@request_death={0x400c630e, 0x4, 0x3}, @enter_looper, @exit_looper, @free_buffer={0x40086303, r2}], 0x50, 0x0, &(0x7f00000000c0)="9197edb7bb9786fc57dc3c4abffec37a23b4edfe7aa92c5379b0787334899f5abf92ea4f2cb7adbb5f564a7d49b013c01ad2d59a037d6a202a56f8fb19ffb5ca3940269a397aaa136489a2feed70dde7"}) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') ioctl$TCFLSH(r1, 0x540b, 0x5) fchmod(r0, 0xd8) [ 1013.828427][T30419] binder: 30418:30419 ioctl c030623d 200003c0 returned -22 [ 1013.900938][ T22] binder: release 30418:30430 transaction 1028 out, still active 03:20:34 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x3f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xffffffff}, 0x2, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306250, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:35 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:35 executing program 0: mq_unlink(&(0x7f00000000c0)='/\x05ev/kvm\x00') r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x100) ioctl$KDDELIO(r0, 0x4b35, 0x4) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x80000, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000040)={0xa166, 0x8, 0x20000}) 03:20:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x7ffff000}, 0xaf}], 0x1, 0x4004001) [ 1014.015478][T30450] binder: 30449:30450 ioctl c018620b 0 returned -14 [ 1014.107785][T30462] binder: 30449:30462 ioctl c0306250 200003c0 returned -22 03:20:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0xfffffdef}, 0xaf}], 0x1, 0x4004001) [ 1014.464984][T30483] binder_alloc: binder_alloc_mmap_handler: 30409 20001000-20004000 already mapped failed -16 [ 1014.475623][T30431] binder: 30409:30431 ioctl c018620b 0 returned -14 [ 1014.476722][T30483] binder: BINDER_SET_CONTEXT_MGR already set [ 1014.488871][T30483] binder: 30409:30483 ioctl 40046207 0 returned -16 [ 1014.488953][T30484] binder_alloc: 30409: binder_alloc_buf, no vma [ 1014.502647][T30431] binder: 30409:30431 got reply transaction with no transaction stack 03:20:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done={0x40106309, 0x0, 0x3f00}], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:35 executing program 1: syz_genetlink_get_family_id$ipvs(0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = getpgrp(r1) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x5, 0xbb, 0x48ca, 0x1, 0x0, 0x82b8, 0x2002, 0x2, 0x2, 0x3, 0x80, 0x1ffc00, 0x632, 0x4, 0x10001, 0x3, 0x4, 0xa1ee, 0x80000001, 0x980, 0x1ff, 0x7, 0xffff, 0xff, 0x7fff, 0x5, 0x8, 0x1, 0x3, 0xfffffffffffffeed, 0x401, 0x8001, 0x0, 0x9, 0xaf4e, 0x2, 0x0, 0x5, 0x5, @perf_bp={&(0x7f0000000040), 0x8}, 0x400, 0x7, 0x80000000, 0x8, 0x4, 0x8, 0xffffffffae71aec6}, r2, 0x7, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffff9c, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x8) 03:20:35 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0x4b, 0x4, 0xff, "564c32f53f63c968196c2a4512d86385", "fc3a12ddaaf9c2f2a46ecfb9f5d78eb43f8bbd1d57ab1de03bb190844770510184b816c1e8ff9578351dcb656d41e89650a80974eb24"}, 0x4b, 0x3) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x20000, 0x0) setsockopt$inet_int(r0, 0x0, 0xe, &(0x7f00000000c0)=0x4, 0x4) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x800, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0x100000000) 03:20:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0xffffff1f}, 0xaf}], 0x1, 0x4004001) 03:20:35 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000000)={0x7fff, "dbd8d6b69af45ef789abe7affea0184966e8f525b3db709f19929a57ac147575", 0x0, 0x1}) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x0, @rand_addr=0xbb78, 0x4e20, 0x0, 'sed\x00', 0x20, 0x9, 0x5c}, {@remote, 0x4e20, 0x3, 0x1, 0x3, 0x1}}, 0x44) [ 1014.507654][T29797] binder: release 30409:30431 transaction 1024 out, still active [ 1014.522717][T29797] binder: send failed reply for transaction 1024, target dead [ 1014.532248][T29797] binder: send failed reply for transaction 1028, target dead [ 1014.551628][T29797] binder: send failed reply for transaction 1031 to 30449:30462 [ 1014.630632][T30500] QAT: Invalid ioctl 03:20:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x2}, 0xaf}], 0x1, 0x4004001) [ 1014.656542][T30502] binder: 30496:30502 ioctl c018620b 0 returned -14 [ 1014.676429][T30505] QAT: Invalid ioctl [ 1014.682054][T30502] binder_alloc: 30496: binder_alloc_buf, no vma 03:20:35 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) getsockname$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 1014.710986][T30497] binder: 30496:30497 BC_ACQUIRE_DONE u0000000000000000 no match [ 1014.807090][T30462] binder_alloc: binder_alloc_mmap_handler: 30449 20001000-20004000 already mapped failed -16 [ 1014.850118][T30462] binder: 30449:30462 ioctl c018620b 0 returned -14 [ 1014.911994][ T22] binder: undelivered TRANSACTION_ERROR: 29189 03:20:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306256, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:35 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x1, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000100)='./file0\x00', r3, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e24, 0x8, @mcast2, 0x7fffffff}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={r4, 0x4, 0x5}, 0x8) fcntl$setstatus(r0, 0x4, 0x2dced9df971bfcc9) 03:20:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done={0x40106309, 0x0, 0x1000000}], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:35 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, r0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r2) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x9) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x113}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000002c0)={0x3, 0x2d, 0xfa00, {{0xa, 0x4e24, 0x838, @ipv4={[], [], @loopback}}, {0xa, 0x0, 0x6, @rand_addr="4519b4706a9baf9754454d4a9e0a7ae7"}, r3, 0x8}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x3}, 0xaf}], 0x1, 0x4004001) 03:20:36 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$NBD_CLEAR_QUE(r0, 0xab05) 03:20:36 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x372, 0xff, 0xffffffffffffc071, 0x0, 0x6, 0x10, 0x5, 0xffffffff, 0x10001, 0x2, 0x8, 0x8, 0x5, 0x8000, 0x3ff, 0x100000001, 0x3f, 0x4, 0x4, 0x4, 0x900000, 0x454, 0x10000, 0x7, 0x9, 0x3f, 0x8, 0xdcf2, 0x81, 0xffffffff, 0xaa, 0x7fff, 0xfffffffffffffffa, 0x878, 0x9, 0x0, 0xc5, 0x0, @perf_bp={&(0x7f0000000000), 0xf}, 0x30000, 0x29f5, 0xfffffffffffffffe, 0x1, 0x6, 0x101, 0x6}, r1, 0x6, r0, 0x3) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000000c0)) r3 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xffffffff, 0x101) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00000001c0)={0x9, 0x0, 'client1\x00', 0x2, "fce40b77093cb6d4", "9425e175918aef5e0444f0eb77785f5fcd8deb47277c23c6af8c9711feffe352", 0x1, 0x1}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) [ 1015.110829][T30641] binder: 30634:30641 ioctl c018620b 0 returned -14 [ 1015.119370][T30652] binder: 30636:30652 ioctl c018620b 0 returned -14 03:20:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x3d, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) [ 1015.193981][T30747] binder: 30634:30747 BC_ACQUIRE_DONE u0000000000000000 node 1042 cookie mismatch 0000000001000000 != 0000000000000000 03:20:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x4}, 0xaf}], 0x1, 0x4004001) 03:20:36 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x2, @time={0x77359400}, 0x9, {0x3, 0xffff}, 0x7fff, 0x0, 0x7}) 03:20:36 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000002400)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) recvmmsg(r2, &(0x7f00000002c0)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/101, 0x65}, {&(0x7f00000001c0)=""/237, 0xed}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x3, &(0x7f0000001400)=""/4096, 0x1000}, 0x229}], 0x1, 0x1, &(0x7f0000000340)={r3, r4+30000000}) syz_extract_tcp_res$synack(&(0x7f0000002440), 0x1, 0x0) recvmmsg(r1, &(0x7f0000005740)=[{{&(0x7f0000002480)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000002740)=[{&(0x7f0000002500)=""/136, 0x88}, {&(0x7f00000025c0)=""/237, 0xed}, {&(0x7f00000026c0)=""/67, 0x43}], 0x3, &(0x7f0000002780)=""/91, 0x5b}, 0x9}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002800)=""/7, 0x7}, {&(0x7f0000002840)=""/167, 0xa7}, {&(0x7f0000002900)=""/43, 0x2b}], 0x3, &(0x7f0000002980)=""/59, 0x3b}, 0x800000000000}, {{&(0x7f00000029c0)=@isdn, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002a40)=""/88, 0x58}, {&(0x7f0000002ac0)=""/248, 0xf8}, {&(0x7f0000002bc0)=""/242, 0xf2}, {&(0x7f0000002cc0)=""/138, 0x8a}, {&(0x7f0000002d80)=""/63, 0x3f}], 0x5, &(0x7f0000002e40)=""/69, 0x45}}, {{&(0x7f0000002ec0)=@isdn, 0x80, &(0x7f0000003280)=[{&(0x7f0000002f40)=""/189, 0xbd}, {&(0x7f0000003000)=""/175, 0xaf}, {&(0x7f00000030c0)=""/166, 0xa6}, {&(0x7f0000003180)=""/251, 0xfb}], 0x4, &(0x7f00000032c0)=""/4096, 0x1000}, 0xfffffffffffffffb}, {{0x0, 0x0, &(0x7f0000005680)=[{&(0x7f00000042c0)=""/61, 0x3d}, {&(0x7f0000004300)=""/215, 0xd7}, {&(0x7f0000004400)=""/109, 0x6d}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000005480)=""/106, 0x6a}, {&(0x7f0000005500)=""/67, 0x43}, {&(0x7f0000005580)=""/218, 0xda}], 0x7, &(0x7f0000005700)=""/49, 0x31}, 0x40}], 0x5, 0x2, &(0x7f0000005880)) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000058c0)) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000005900)={0x3, 0x1}) [ 1015.393418][T30763] binder: 30762:30763 ioctl c018620b 0 returned -14 [ 1015.427438][T30768] binder: 30762:30768 unknown command 0 03:20:36 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x7}, 0xaf}], 0x1, 0x4004001) [ 1015.459559][T30768] binder: 30762:30768 ioctl c0306201 200003c0 returned -22 [ 1015.480988][ T22] binder: release 30762:30775 transaction 1044 out, still active 03:20:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x50, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) [ 1015.666685][T30797] binder: 30791:30797 ioctl c018620b 0 returned -14 [ 1015.729302][T30802] binder: 30791:30802 unknown command 0 [ 1015.737489][T30802] binder: 30791:30802 ioctl c0306201 200003c0 returned -22 [ 1015.870573][T30805] binder_alloc: binder_alloc_mmap_handler: 30634 20001000-20004000 already mapped failed -16 [ 1015.881134][T30804] binder: 30634:30804 ioctl c018620b 0 returned -14 [ 1015.881195][T30805] binder: BINDER_SET_CONTEXT_MGR already set [ 1015.893420][T30806] binder_alloc: 30634: binder_alloc_buf, no vma [ 1015.900772][T30805] binder: 30634:30805 ioctl 40046207 0 returned -16 [ 1015.908129][ T22] binder: send failed reply for transaction 1041 to 30634:30747 03:20:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done={0x40106309, 0x0, 0x3f000000}], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:36 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x2, 0x2, 0x908b, 0xc4b, 0xa, 0x957e, 0x401, 0x6, 0x4, 0x408000000000000, 0x3, 0x2}) 03:20:36 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_adjtime(0x3, &(0x7f0000000000)={0x2, 0x0, 0x5, 0x800, 0xd17, 0x5, 0x7f, 0x6, 0x5, 0x80000001, 0x3, 0x9, 0xff, 0x80, 0x3, 0x2, 0x36e3, 0x4, 0x4, 0x5, 0x408000, 0xfffffffffffffffa, 0x7f, 0x4, 0x20, 0x5}) setxattr$security_smack_transmute(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0x4, 0x3) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x9}, 0xaf}], 0x1, 0x4004001) 03:20:36 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) recvmmsg(r1, &(0x7f0000002680)=[{{&(0x7f0000000000)=@sco, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000080)=""/13, 0xd}], 0x2}}, {{&(0x7f0000000100)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f0000000200)=""/52, 0x34}, {&(0x7f0000000400)=""/222, 0xde}, {&(0x7f0000000240)=""/91, 0x5b}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x5, &(0x7f0000000500)=""/69, 0x45}, 0x3}], 0x2, 0x12020, &(0x7f0000000580)={0x77359400}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000002700)={@loopback, 0x5e, r2}) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) [ 1015.917663][ T22] binder: send failed reply for transaction 1044, target dead [ 1015.925221][ T22] binder: send failed reply for transaction 1047 to 30791:30802 03:20:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0xa}, 0xaf}], 0x1, 0x4004001) 03:20:37 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') r1 = accept4(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x80, 0x80800) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x88, 0x4) [ 1016.095320][T30823] binder: 30818:30823 ioctl c018620b 0 returned -14 [ 1016.098331][T30829] binder_alloc: 30818: binder_alloc_buf, no vma 03:20:37 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/userio\x00', 0x400000040004, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000000)={0xe, 0x5, 0x9, 0x4, 0x83, "77bd3f594573ec666d2d89bd141a30e4836e17bcfe7f3db910f385926d7d1556c52bb0ab08b43d7a43db2c6bbbfe2564240beafb5b0fe5730ddef7ab1210c3a58beeca7740072f1a81a9f0f1bc88a2f31ab0e4d1d33bf40482c8b63c73054c70a0180827c4cb5bbe7d8820949f39f98ae484371ab61cb5cade567007fd721741340538"}, 0x8f) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 1016.150990][T30820] binder: 30818:30820 BC_ACQUIRE_DONE u0000000000000000 no match 03:20:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0xe}, 0xaf}], 0x1, 0x4004001) [ 1016.193199][T30829] binder_transaction: 9 callbacks suppressed [ 1016.194549][T30829] binder: 30818:30829 transaction failed 29189/-3, size 24-8 line 3147 03:20:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done={0x40106309, 0x0, 0x100000000000000}], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:37 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x240000) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x1, 0x4) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') [ 1016.425788][T30887] binder_alloc: binder_alloc_mmap_handler: 30791 20001000-20004000 already mapped failed -16 [ 1016.426817][T30852] binder: 30850:30852 ioctl c018620b 0 returned -14 [ 1016.458628][T30802] binder: 30791:30802 ioctl c018620b 0 returned -14 [ 1016.463076][T30889] binder_alloc: 30850: binder_alloc_buf, no vma [ 1016.478809][T30877] binder: 30850:30877 BC_ACQUIRE_DONE u0000000000000000 no match [ 1016.491279][T30903] binder_alloc: 30850: binder_alloc_buf, no vma [ 1016.491299][T30889] binder: 30850:30889 transaction failed 29189/-3, size 24-8 line 3147 [ 1016.522836][T30903] binder: 30791:30903 transaction failed 29189/-3, size 24-8 line 3147 [ 1016.527237][T29797] binder: undelivered TRANSACTION_ERROR: 29189 03:20:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x56, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:37 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='\x00', r0}, 0x10) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done={0x40106309, 0x0, 0x3f00000000000000}], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:37 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) epoll_pwait(r0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x0, 0x7f, &(0x7f0000000080)={0x3c}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:37 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000200)={r1, 0x446}) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r3, @in={{0x2, 0x4e22, @loopback}}, 0x81, 0x2}, &(0x7f0000000140)=0x90) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r2) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x9e) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x10}, 0xaf}], 0x1, 0x4004001) [ 1016.676210][T30977] binder: 30975:30977 ioctl c018620b 0 returned -14 03:20:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x14}, 0xaf}], 0x1, 0x4004001) 03:20:37 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x15c, r1, 0x104e33212fb18104, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2000000000000}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000001}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x16}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa14}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="bd105b044dd8000738783f69238a9612"}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7fffffff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xcc}]}, 0x15c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 1016.761330][T30989] binder: 30975:30989 BC_ACQUIRE_DONE u0000000000000000 node 1058 cookie mismatch 3f00000000000000 != 0000000000000000 [ 1016.774682][T30993] binder: 30978:30993 ioctl c018620b 0 returned -14 03:20:37 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') socket$rxrpc(0x21, 0x2, 0x2) [ 1016.836550][T30987] binder: 30978:30987 unknown command 0 [ 1016.842223][T30987] binder: 30978:30987 ioctl c0306201 200003c0 returned -22 03:20:37 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000002c0)=0xffff, 0x4) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') setsockopt$inet_mreq(r0, 0x0, 0x27, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x20}, 0x8) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x138, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xe8, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x60000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa2a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffff76}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffe1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1d}]}]}, @TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}]}, @TIPC_NLA_MON={0x4}]}, 0x138}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x34}, 0xaf}], 0x1, 0x4004001) 03:20:38 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1000, 0x800) connect$ax25(r0, &(0x7f0000000040)={{0x3, @default, 0x3}, [@bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') [ 1017.447457][T31032] binder_alloc: binder_alloc_mmap_handler: 30975 20001000-20004000 already mapped failed -16 [ 1017.458013][T31031] binder: 30975:31031 ioctl c018620b 0 returned -14 [ 1017.459331][T31032] binder: BINDER_SET_CONTEXT_MGR already set [ 1017.471161][T31032] binder: 30975:31032 ioctl 40046207 0 returned -16 [ 1017.476677][T31033] binder_alloc: 30975: binder_alloc_buf, no vma [ 1017.484203][T31033] binder: 30975:31033 transaction failed 29189/-3, size 24-8 line 3147 [ 1017.496464][ T22] binder: release 30975:30989 transaction 1057 out, still active [ 1017.505079][ T22] binder: send failed reply for transaction 1057, target dead [ 1017.513752][T30987] binder: 30978:30987 ioctl c018620b 0 returned -14 [ 1017.522330][ T22] binder: send failed reply for transaction 1060 to 30978:30987 [ 1017.522467][T31035] binder: 30978:31035 transaction failed 29189/-22, size 24-8 line 2994 [ 1017.539938][T29797] binder: undelivered TRANSACTION_ERROR: 29189 03:20:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x2, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x35}, 0xaf}], 0x1, 0x4004001) 03:20:38 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:38 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x2, 0x9, 0x3561, 0x7, 0x0, 0x0, 0x20, 0x2, 0xd661, 0x8, 0x7c, 0x7, 0xc48, 0x8, 0x81, 0x80000000, 0xff, 0x80000000, 0x7, 0x1000, 0x4f800000000000, 0x5, 0x0, 0x0, 0x8c08, 0x8, 0x9, 0x8, 0x7de3, 0x5, 0x7fffffff, 0x0, 0x9, 0x40, 0x641, 0x6, 0x0, 0x200, 0x3, @perf_bp={&(0x7f0000000080), 0x6}, 0x8400, 0x1ce20a0000000000, 0x4e4, 0x9, 0x101, 0x3ff, 0x5}, r1, 0xa, r0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0xffffffff7fffffff) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:38 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x400, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4, 0x6, @rand_addr="44faaa00decd2f095325ccb62b7e1acb", 0x7}}, 0x0, 0x603a, 0x0, "444231ed63a0a70ba980da455d5fc3b58e4f0dfa7f38fe9f3afc2e258707dbc485a6b29d0f68418740271dd2c407e269835a6ba79b9a4442dcf4b1d1d5902a8ce4721699aa7067130269263e289ff993"}, 0xd8) mq_unlink(&(0x7f0000000000)='/dev/kvm\x00') 03:20:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x3f00, &(0x7f00000007c0)}) 03:20:38 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe1f, 0x8c000) sendmmsg$nfc_llcp(r0, &(0x7f0000001640)=[{&(0x7f0000000040)={0x27, 0x1, 0x1, 0x7, 0x4, 0x0, "49d1da2a127497696b321e8dc5485eb79e7317dd1e41bc886c1a1e5a73afc2cc4048b25789e75096f991df97f4d8d40812aad0446318da0c7795341591799b", 0xc}, 0x60, &(0x7f0000000340)=[{&(0x7f00000000c0)="5bea80d356bbc7f72a00c03c4276b574113fbeb924a37b", 0x17}, {&(0x7f0000000100)="0bbf9b4a7e56073241c815d93b34904dab099c60ea293f3e76d190e488a3538aaef57ce38ac36da58fcf0141fabd471242cac96c1f59", 0x36}, {&(0x7f00000001c0)="08c4951a7c58e33c19fb176b55a2ab3ed4a127ccad43891e352a5fae11424774b8bdafaf6d519c8f136fee6e2284c12122f0dddf3d6fa61cc70078adc43deb78abea99675e74b3e08e09e259f2946d797d210901ea513f04aae0be305729c321a4c4a1", 0x63}, {&(0x7f0000000240)="bb55fc342e477f3380f73e3ecdf789faa4590ee18c86af19e5b1638ea9467b92c6f0b9302eedd87434950c8918d552973a30c310bfdf48aa841a46f7fd6adc4d8906464f57b6b161b41f578051ec968222568b1f2f964eec6f56d365eeb740f41c64fb0eb22bd635c9a6ae86b70d96e205933228fc669b8c0a4581f2cf62a9deb8110c2a708cfe", 0x87}, {&(0x7f0000000400)="b8b7168ec69e69dec5b41d2f4ce19ad9c77f5b47232dfa0d8084437684c07dab9a4dbf3f1a5a2612466d21e3218120c50a515411ca8df6c217c358c03d11bcc3b8fbee9c130df8a838944934cc814877b072fed85f756d4557c42f9d34cb18affe529c3776c6b53b21b627b51dfa76d7fcd78cb19c859682e19e928f06e753500617da3bf9d9eece58655a6d701e2c13b46b89ed92bb7df4120ca8c2d06db1f13670d4c9b7453d482385765e71177d25f34c0446d98d721219d703a2bb1716c6fc5b3564e26dc8105396a4ecfb2b6aa0198dca22c7c09597eef48b61b4dcb2b8b58a0361ce1d135d21837bcc4930a978687ac7ffc0ed6c", 0xf7}, {&(0x7f0000000500)="218d463280e21a8a057932ed42d1eb19a106c013c1e39264fda62a7ef1c957d7c2348b36616d2f8346527123ed364ff73ab788c47f37cf3dc984cf5165e5ae90eb77eb54c3e8dbe48c89a21839005e78ad81ff7c878e539c8391f09ebbee251c1e0da171111879f16dbb2071b8370fc4e3881b502e2174936d19905a02cf3638227c57c9384b7824a43af426a4cbad414ca3d24e5c0c0db5c7488c9668023d46d47df232404f04924ac65c38d844f48aba6cffbce55ddbd0d8323d6b26cc5206de69f2df90fa47fd4d", 0xc9}, {&(0x7f0000000300)}], 0x7, &(0x7f0000000600)={0x1010, 0x116, 0x1f, "9dc2c54482dd231f7c23a8dee785531d6c1aa4797b7b3a7a9a8e15465ed17ff4940dcd8d4f7054417ec5b50180501997fb1d2ffda3a86a37ca4dc7da18f5e1c6bcf4892043cf536774331863e45193284cd57de8866e1120fb8d35d21e3a87478e88e845022310ed516a2dbd864b5f67d4e4980eaaf78603f59a45dbaa4635685a29452bcf04acb268734045692a4a305a7c81a2424c6bef3b4bd997d43990e91a7e38bb523b684998fbc96f33d28773b66d493d581b43fe778e429ccd366ec7ebe8bb8f06018ab48e111407fc52da56853ea197877aa1fe3aa9f0c2026aaa3bca7d2f082328ef38176ce4b078074ff9f3a6478279bcfc6369b68dd2d3aee9752d9c73ba85670d4220cf3fd264d8a577db6c1b2b9fef4e414c90d71468d5170f9a602cb0213d4ca72c8bc4861b2789c431dd315204aee26bbea4b80106c629a6090d3706004664824e9049230f7dd74e8fcc471fc42fcb7fd2154da62d061953bee4c37273e822eed2b342c0d68009a45aeba96cc1cf6c4096c9d2a884860b4dd3c1c86130383db984d7b4cfe0237923aa2b155eccd5c4c0744b06a5420f55c82223d3596576d7a250a97b5cde27aab4d651ce30f50ac32cc8cfca0738b8a2d8d99c1cd928cf0698c16069272956d88600eb47343c8801063c1c64b18a8e4378127363bdb5951c120f5222e22fbd8a1bf3018df4ecac433f6739e0781d9197a9fcc2dc7fa4f613c59cb52fb2770ea20f19f94ab40728395b9f2cddf599ad643be0ddaa61001ce180829b94695f2e324fe7df54b76b8d3c088d8a66945e4e65f4eafe3038316ea0c1fcb9ebb54ef65e433826000f0e5b12e3ba091ae6cfad6975115411c9fde84f47a27bf3352c8123856d625d3eedad63bc7ce8faa19255749db22779f9dd1510eb054ccb53f89e1d076b03be6b0a9b7007064cb1cdc5c2ea3517344c582d203d39f48cafeaf6d538a19da00c5ac77797d22f867b9997656e383cbf97d05306f71497f58d5052982076bd71abc7d0afd3fb33063c146d5fbe32b046161738e93a6a7a7c61cedcd4bf9df49416a60a2184575ee8e9f71bc0a6a5992cbddf2f54f5dc3a30a8144ba4054e1745ff349be8f48b54df51fce8e5d58ef8d58850b692dcc86cb333d9477303e97a817431dca11b1b2a735e96d4096afccd17e878df5ac55374713adf9cad47589a3281a9f52ed20977898cbf64386b8ce0ace085771b9e33b3fadb7fbf742544e12c7fb1b84b2a9bd8798f5b0a4390bee69a137e7b39559048406e16c91b1aa67be47a7ea7bf80ce8fbe4dd21a22452714a20abeb16e1dbe984f6fc14a9d117a025f531188f89f104e4133ddf11029f68661127f43ea656a867147511aa009c924e62c589fc0468ede6a9e11d65ee5f43885d3dbff0e6958d3e8d51d38e782695ec5a5e3ecfcaaaeb68121a4de319de2c0c8ed7c1de1c3d501d945c71ec6747df7675db3e9f281beab0538e1cded7ddeeb331f2804a181b5ebbe067b53c16cd67a4009c5d9b89818e4d165be678aec155dde3f2ac6f8b42b6e4c558d545f245efe5a0bd42523992d8c55e957713457441b77b126a008f46ebfa63c03cd074885862a61e8aeb1773d5f90ef752c24b005218b8e7fcd9accac376ce3ef8a3d93789d3b527e0cb742e21bafd5cd642e0f05a4ab1dacec48807c887b749cc878657d4d15b2181ac452d8c8b2363f6eb31222cf142851f9d840418b42775f5e15969759e39f002da7a7e1538112d9a78e3ebbf19ee00a6dafab4cdaa9bd96aff46650f8f6f0dd7670166fa485b59bdf221c999daa1ed2032a359e3b656c187917d33a82cc22b5f3b5b4f35b7c73dc2c8cffb13d8e37b0b9e10719b438568b79ee643b4f96faf0d8d89db5bb27d274da12f41d1d905742af1323139546a041922627e1a97484494b4a5012135744704efb04be8bbb3a3b281bffd45d356935fc76826e891bac4c0f9593484e11a325e9a395415b0f7b187a8a79e4f0936a37e8300e2b8696bd6b21e8b5f6209603b7f8f539608f85b331d8d20bb654558e717aac87aa37265512dbbe52f806143ad8d53404452a2e9b2a34b8f706d2a332f6b394f7f44f4fc5e19d237418bb1b9e82a3efd37c316c621b3a8337ef22c297dbf5c235b9a06c1c87c9ed7e3b0b287cd7b8f41b7af302b5a24c942faebf1446ff38f19d1ff8f1bca7cba33a84e06e435d28a30e599c954c66a0591f3b64a2ce8d7d365623986ae6d771006fe583524a2de95fe29cc02372fafe4130709d91450a5b5c7b52e2c274443f59c2d994b7ea7f722f09e8a997f0a22b0f1f51eb591f6236c279fb25e86f242eaad9aad9961637227a546ea2a844b1ee904b7f06558cf6e6567a0f8165d454d113a35db65651d1c2d5466b0ac6c18364d5132343752457161d5437bb9b5ad95472ff980b3eadffa6d2f1a221e94cf51acf2c119e431708e01eba8a6f8b1649dbacf55797c2185f1a64991980dece927b69d0ac859e0a28bf366771b783ea6ed37c66539ef88ffc0a05c8da64bd1908d04a6a06b680c544501e726890a61acf669f6cf761f653b5b34b146c332142b5800ce4c6c657cea272be3a673d3b957a0d473b73bc777c761cbbf247c1787454871d4d4a8f41e8f92150b0da92b101e96b14b1d5f6532d242d78f619fd0195786e74f7fe3f00cf6496466a8bb5cc4de457df027bce5e364cef3574b78a5d99290535c38de32f218f2586b5a4059d981d898c4506a7d9c96608db7398a0d9a78468f42639a35797e4f8eab6efdf8e100dceb5e7277b87e672531bdbdff3f5d683f454465dce7573aa7528417abece355b8aae177b22426801ac755f1599eba491d45490e6ea01f9018f288f20b03d49f07b315ff0428856031ef897f6f76bb5c240df32baa82d6a0aa991afff00b9cff4c62243711af1599a7955639d972bd04f875ea63f9b93ec0749ab3f63bbf903e0d9f4259fe164d97191463a6cd39f57cffd45375d3554537139517492b4de003e42055858720c18a1ee3dcba4dc47544d7d9ac271e93c536515ca98ef0bb9a9611ba9f9d86d835ef807a49f06200132ed3e771a671e9decb38245590c2170350b2a751b46e02d5d0bef082376c77798975fb9fde398ece325c3842e565a141de6dd2acebbf08ed60a1401d26087d0313b1cee07d3809ae91d35cc1701c86319042dceff1ff3e4ad9624ca97e423037f24ecd52e1ed0ae384f572785e17a6e3f75a577b2473c3cd3bbd7d59499e671c1aec58f54a26666df6c217230529151440a343f783ef9562d10dc9a34d1e94daeeac3f333e1b432fa39b833dfd328ae74abfb7db53d01b4f2076be3c4c0418a8c7e49aaa1aa3eec8d98a8f9b8f2f0bd0d2a4b6398d656c4505d76012cd850cde6d089ac0b0fd9375169bf61a65b4af716bbedea9224683df106b12936cb114e6f296d006fbf2f3b25d1b6420bdc42b67b403579ead6df9a13086e758d1b8596c5bc2877bfab87c8277e5b9fe2b527c86004ab108ef336c611119db99d2b58f08d8c5bd5280dbbc0f26c507e8d872cd4b5881a1f69d531b6e7d952a983a15f628d1f3af05ce24f1474d21dda6e9c81bc2008b032dcd6f79a15402acbbf25ba22f2a769cbb1569ed420cca58dc57428f67e9063adb7d0294cd93288fc52244868d4395e7b9c46b46d00a2391e15f39f1fa83999da6f56241c34a7af184979becd3f48008c63a03efab68130fb0374fd8b7a07afa99be43394f0ab913ff0af5da5804d097e1e4104c0cffaef26012c921fc1adf3cc1d260032d2cabe23fe3d861a479e1993292eb755443bb1f08df2c5142e491e93a0512409adb717f1aedf7b998679856cd7202b320c4c5ae30841f985d407c180d032b7a06a16bc2643bffd7c15de9e6e82782f892b27db35a9a8e50151a83654ad969019b8fa11f085ae895fc1f3ff358788731e6a6a1eacb6a512956db79556373c10ac2063da405035131a547fc2ad1575c2dbbfd8c458211a3ad808d0d23786a2e474de34ce78ed4c4559329b7e6a80386b13690eff9ffe1b87626d01085d9b8f2a6103256dd00239f61f43940fc7f93f055c6b8bce34f9c3e8fe42e4c0b3d4a0dc11b68d57c494eae6bf393f97044c014b1201111ec2928201a2b0b58c81bc189731d0ac9423f7ea79400a84a027aed259fa6c8afe9ef727ebfbc6421bced02ae2a95cb01e76b1cf7c519278f3bf3ede3eb1a255b0d0e39e9c89c3d1dd1e432de57b90834e86bc580edf565db4cd8fa96908092a7762818eb7143703c83193eab52190dc511201baf6552bbfa9a614ddd1b6ea6f3c1dcdc764059ff66dea0c66228727d9dfacc73b3bd751952e5501bf05382b7b03bdf578fd741eff9050a04c3bd4ec5d926284790bc76563a5fb454262d7e12fb35bff1a21fae14cbae840b2ef52ecbcb783405e7d1482a8f26440eaa49e3320ffdb6c83f51627f4c7ec9ef1da1a9d95568e5ab4e5dba6abb0710a7274fdde5c1b1c38bde1644f9dec4ed4764e2445890e71e6dbead5dc0f3029c7718598d409caa9179709227aa35f0f7dd2ee8da11ba24718b6f42b43c7cf7e6f0f25982b8cab21ebae5bf65941218ea471722e5d3494a08041431dd6cd50fb5f47edb4757fa94fb34e77d08c4929d2f490dc3bd3c84d76a008a9feb25096f15f4a3ffa5c41cdde04c7ce259e495349f838e77f6d0261eafc4961ea7e2563440a37982fd481bce7edc1c010df1316ff87b9606f4ee7a2477cf3f41352bd6e12c9d0d667fbc8933b0b697a5c709bb85391d65c1bd1f220390a8979e3eee1814170b3d059bc0b696d2853f3ebcc17fe2aa05197c4020e605010809e4995eaa2dc6161cc99f362ee78a9948ceeab78e33714efe75231acd409697d161300cd076d863f89b83244290d8c6e3e58d7e46ccbb8f2d289bd41d9cce20db74db7896b594f822e5a1970509b0b00b4360f047aa31e4b21dc2683513f0cd16e9436f0466d90ef8474407cf6272281e3f4d2634e0c14f778be600aa3a13a2d8f81542d71d7a44e8b49c6d166459d8b047041cd1f671c41f49caa7bb87fae8018609d9109912736ea89d41dd3458899d225bc5c43a672efb329b22208783ffca1176d93e1a5a9f1c26a99c64a23d534072b161bee02fd7ff266444dda95f502bea61c1942cc31638c478b0e0fed016e8e19da5bcb8da7933af7329bb731a9642a4581fb6c00e9a689c33f05cb56c90df4bc49263a43299d35b9f785c472f1b45bf2525174287976c6c982e507d4238b78f85fbab5481f75917675e9c86a6b0a83c000ca49adb65c9006aabd1c4650d824de417e76094a299dcbf070feaa50f1db5ae2c07685169348ff3841a089fced36bd32233f1ae3de13c9fe4eeddc020d57bf03038c167d9a8f4cc72ab4bb3944500925b43deea992dc2d6469187efb91b74737104c8e7642da2029569ca32d097771a2bf20ad029a6547bd69be5386ccb6a8f20c57a3ed5fa328a95b72bcc6b7cc2e619765d636862d9532e73cea2c7f32b97cad0c4d4c3d794ea8122bdf5cc3275def6f623a0518e2f94aecf80c3662590d3e3da0d6c540c20e79ee83a5f26a74095897faf4ba4a15d8abe14d484abd214779b8380413ff0531818ac1d0db6c11cc8e0aa505ffd69298bca21f115d9d6e66dae1fc26fbf0cf4d82de57f0bd5ff64fd8fef5e9fe4e2193140a0d2dc6ee22bac9e35bd86a16c3912ddee8a83edcdf87d3c6f78a74fee57aab0c4b0a071300368b3991c65a6d96450e275b7a4b40652fa470ce440850234c8da1f797c8f0"}, 0x1010, 0x8c0}], 0x1, 0x4000000) 03:20:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x1f4}, 0xaf}], 0x1, 0x4004001) [ 1017.687618][T31051] binder: 31050:31051 ioctl c018620b 0 returned -14 [ 1017.697098][T31055] binder: 31045:31055 ioctl c018620b 0 returned -14 [ 1017.704414][T31059] binder: 31045:31059 transaction failed 29189/-22, size 24-8 line 2994 03:20:38 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000001080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xc4, 0x1, {"1548e19aeeeb185981fe36bc580d3d722e30cd77e40bab7346c95c2b581eaa172471f49715054fb4586f023e710f044e87a33bb1535fa829ca964af696f2eb30ac7a9e635bae31ce2121fb147d8250c8ebdb2d4dae599de4e9809880b77efb893f7a1efd2ccaaa2606af174bdb0ec9f52ff61f054bfb58b10eacf6b96ee6b16e0ff098996757436d8b9ae5e128d0ff0d4e34eda4db8a16a4ecba69b4c412eb155aa78dec99b729ec3564"}}, {0x0, "72ab2a644d0451825e7aea07563f08121554bd5e95010db37451a2272c84cf51b72ae182aa120bfa0364068e9792457c7a8560743b29dbaa3242252db6d3ac5d696214c1289201197ac00731c4eaaddf9a0a3118e89e39b0cb5e6d13e6efdfc1d11a55bde221de700b2659091b56df01308b56811901f95535b311ad7142c5bcd139d7ce517110e38803ee6ed535b4d1cc8821b6e4c9537b0ceb700d1a38d3a3bab0a643e5f386f993a65867acd2242f145c449bb5577c4500319cf604429aeabe358ff9ee99f46e56e134b8f760094392caa1dbe64f2c24e943256f5ae95f104fd5f3e7966e855d4211394fd851c0e9431cf11ac35a9f6a5f08cbd0f0"}}, &(0x7f0000001280)=""/181, 0x1c3, 0xb5}, 0x20) syz_open_dev$sndseq(&(0x7f0000001380)='/dev/snd/seq\x00', 0x0, 0x2000) syz_init_net_socket$ax25(0x3, 0x7, 0x8) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) r1 = syz_open_dev$media(&(0x7f0000001400)='/dev/media#\x00', 0x1, 0x2000) r2 = fcntl$dupfd(r0, 0xfffffffffffffffd, r1) syz_genetlink_get_family_id$ipvs(0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r3, &(0x7f0000001040)=[{&(0x7f0000000040)="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", 0x1000}], 0x1, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x8) [ 1017.750579][T31051] binder: 31050:31051 transaction failed 29189/-22, size 24-8 line 2994 [ 1017.763053][T31047] binder: 31045:31047 BC_ACQUIRE_DONE u0000000000000000 no match [ 1017.796700][T31062] binder: 31050:31062 unknown command 16400 [ 1017.824952][T31062] binder: 31050:31062 ioctl c0306201 200003c0 returned -22 03:20:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x1000000, &(0x7f00000007c0)}) [ 1017.922397][T31075] binder_alloc: binder_alloc_mmap_handler: 31050 20001000-20004000 already mapped failed -16 03:20:38 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x880, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x6, @local, 0x7}, r1}}, 0x30) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), r1, 0x1}}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000400)='vmnet0\x00') 03:20:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x218}, 0xaf}], 0x1, 0x4004001) [ 1018.022885][T31081] binder: 31080:31081 ioctl c018620b 0 returned -14 [ 1018.035410][T31062] binder: 31050:31062 ioctl c018620b 0 returned -14 [ 1018.039939][T31075] binder: 31050:31075 transaction failed 29189/-22, size 24-8 line 2994 03:20:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x3, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:39 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 1018.133803][T31094] binder: 31080:31094 BC_ACQUIRE_DONE node 1070 has no pending acquire request 03:20:39 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x8000000000004) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x8000f, 0x6c4) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) sendfile(r2, r1, 0x0, 0x93) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:39 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x208001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000240)={r0, 0x9, 0xad, "5f5ed698c0189c00ee335c8017276b2d782784d42a8b6b6a61037a6704bfe3d7e6c7840ea60323d5375f20d570b74d5bb17a23c125d27269a113"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000040)={0x2, 0x1, 0xcabe, 'queue1\x00', 0x3ff}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/udmabuf\x00', 0x2) r1 = gettid() perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000200)={0x4, 0x8, [0x8, 0x4]}) mq_unlink(&(0x7f00000001c0)='/dev/udmabuf\x00') write$P9_ROPEN(r0, &(0x7f00000002c0)={0x18, 0x71, 0x1, {{0x8, 0x0, 0x2}, 0x5}}, 0x18) 03:20:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x240}, 0xaf}], 0x1, 0x4004001) [ 1018.213804][T31166] binder: 31158:31166 ioctl c018620b 0 returned -14 [ 1018.311786][T31206] binder: 31158:31206 unknown command 64 03:20:39 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000080)={0x2, 0x9}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x305000, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 1018.353801][T31206] binder: 31158:31206 ioctl c0306201 200003c0 returned -22 03:20:39 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000400)="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", 0x1000, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x300}, 0xaf}], 0x1, 0x4004001) 03:20:39 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000080)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2}}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000000100)=""/195}, 0x48) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/175, 0xaf) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 1018.770677][T31249] binder_alloc: binder_alloc_mmap_handler: 31080 20001000-20004000 already mapped failed -16 [ 1018.782334][T31249] binder: BINDER_SET_CONTEXT_MGR already set [ 1018.784866][T31248] binder: 31080:31248 ioctl c018620b 0 returned -14 [ 1018.789185][T31250] binder_alloc: 31080: binder_alloc_buf, no vma [ 1018.800859][T31249] binder: 31080:31249 ioctl 40046207 0 returned -16 [ 1018.802360][T31250] binder: 31080:31250 transaction failed 29189/-3, size 24-8 line 3147 03:20:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x3f000000, &(0x7f00000007c0)}) 03:20:39 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x467, @ipv4={[], [], @remote}, 0x7}], 0x3c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x3e8}, 0xaf}], 0x1, 0x4004001) [ 1018.817293][T31248] binder: 31080:31248 BC_ACQUIRE_DONE u0000000000000000 no match [ 1018.821231][T29797] binder: send failed reply for transaction 1069 to 31080:31081 [ 1018.835540][T29797] binder: send failed reply for transaction 1072 to 31158:31166 [ 1018.846504][T31206] binder_alloc: binder_alloc_mmap_handler: 31158 20001000-20004000 already mapped failed -16 [ 1018.870123][T31166] binder: 31158:31166 ioctl c018620b 0 returned -14 [ 1018.893902][T31256] binder: 31158:31256 transaction failed 29189/-22, size 24-8 line 2994 [ 1018.912094][T31166] binder: 31158:31166 unknown command 64 03:20:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x4, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:39 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1000, 0x7, 0xb000}, 0x4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x700}, 0xaf}], 0x1, 0x4004001) [ 1018.921119][T31166] binder: 31158:31166 ioctl c0306201 200003c0 returned -22 [ 1018.955906][T31260] binder: 31259:31260 ioctl c018620b 0 returned -14 03:20:40 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x7, &(0x7f0000000000)="1a0e82e1dffea7af1ea3d709016ec1aae570adc3641d4572cf738a100bba483f9cb67b9d6b73d7608ce300bd3a5151aeb9f7c3fb91981f99b37005ed19a06b850b364cef8f6bf3408586cfa3179438868d24143c85ab5810097bf6ea737aa030e4e5200a1b8c3cd1") mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x12, 0x20080) setsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f00000000c0)=0x5, 0x4) [ 1019.065714][T31268] binder: 31266:31268 ioctl c018620b 0 returned -14 [ 1019.128042][T31336] binder: 31266:31336 unknown command 0 [ 1019.133706][T31336] binder: 31266:31336 ioctl c0306201 200003c0 returned -22 03:20:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x900}, 0xaf}], 0x1, 0x4004001) 03:20:40 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, &(0x7f0000000080)) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000001c0)=""/4096) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000100)='/dev/vbi#\x00') 03:20:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0xa00}, 0xaf}], 0x1, 0x4004001) 03:20:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0xe00}, 0xaf}], 0x1, 0x4004001) 03:20:40 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$void(r0, 0xc0045c78) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@dev, @in=@loopback}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 1019.742197][T31410] binder_alloc: binder_alloc_mmap_handler: 31259 20001000-20004000 already mapped failed -16 [ 1019.752836][T31409] binder: 31259:31409 ioctl c018620b 0 returned -14 [ 1019.754353][T31410] binder: BINDER_SET_CONTEXT_MGR already set [ 1019.765968][T31410] binder: 31259:31410 ioctl 40046207 0 returned -16 [ 1019.767550][T31411] binder_alloc: 31259: binder_alloc_buf, no vma [ 1019.780376][T29797] binder: send failed reply for transaction 1078 to 31259:31267 03:20:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x100000000000000, &(0x7f00000007c0)}) 03:20:40 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0x400, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) exit_group(0x0) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x7, 0x4, 0x438, 0x0, 0x0, 0x0, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x4, 0x7f}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xffffffff, @mac=@random="f146ee793903", {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}, @mac, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}, 0x4000000, 0xd2, 0xc3, 0x2, 0x7, 0x8, 'bcsh0\x00', 'gretap0\x00', {0xff}, {}, 0x0, 0x8}, 0xf0, 0x118}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x83}}}, {{@arp={@remote, @empty, 0xffffff00, 0xffffff00, @empty, {[0x0, 0xff]}, @empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}, 0xca, 0x40, 0x3, 0x9, 0x377, 0xa66a, 'ipddp0\x00', 'ip6_vti0\x00', {}, {0xff}, 0x0, 0x41}, 0xf0, 0x120}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x4e, 0x0, 0x7, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x488) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000240)={0x7ff, 0x9, 0x8000, 0x8, 0x88f4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, 0x0, &(0x7f0000000140)) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1, 0x0, 0x0, 0x3f4}, 0x0) syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0xffffffffffffffff, 0x2) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000380)) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000180)=0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)) r2 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r3) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) [ 1019.788196][T29797] binder: send failed reply for transaction 1081 to 31266:31336 [ 1019.788719][T31267] binder: 31259:31267 ioctl c0306201 200003c0 returned -14 [ 1019.813363][T31336] binder_alloc: binder_alloc_mmap_handler: 31266 20001000-20004000 already mapped failed -16 [ 1019.829930][T31336] binder: 31266:31336 ioctl c018620b 0 returned -14 [ 1019.880458][T31421] binder: 31420:31421 ioctl c018620b 0 returned -14 [ 1019.896147][T29797] binder: undelivered TRANSACTION_ERROR: 29189 03:20:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x5, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x1400}, 0xaf}], 0x1, 0x4004001) 03:20:40 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x10000}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r1, 0x3}, 0x8) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:41 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9, 0x1000000040) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x7, 0x2}, @sack_perm, @mss={0x2, 0x10001}, @mss={0x2, 0x29dd}, @mss, @sack_perm, @timestamp, @sack_perm, @sack_perm], 0x9) 03:20:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x1802}, 0xaf}], 0x1, 0x4004001) 03:20:41 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000180)=0xe8) prctl$PR_CAPBSET_DROP(0x18, 0x15) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@empty, @in6=@mcast2, 0x4e23, 0x81, 0x4e23, 0x7fff, 0xa, 0xa0, 0x0, 0x3b, r1, r2}, {0x3ff, 0x3f, 0x8f, 0x4, 0x100000000, 0x6, 0x1, 0x4}, {0xffffffffffffffff, 0x6ea, 0x9, 0x5}, 0xcd, 0x6e6bb7, 0x0, 0x1, 0x3, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d4, 0xff}, 0x0, @in6=@loopback, 0x3503, 0x1, 0x1, 0x705c3f6c, 0x7f, 0x1f, 0x1}}, 0xe8) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:41 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={r1, 0x2, 0x20}, &(0x7f0000000200)=0xc) mq_unlink(&(0x7f0000000000)='/dev/kvm\x00') 03:20:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x3400}, 0xaf}], 0x1, 0x4004001) 03:20:41 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) mount$9p_rdma(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x400, &(0x7f0000000100)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x1}}, {@rq={'rq', 0x3d, 0xbf}}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@seclabel='seclabel'}, {@dont_appraise='dont_appraise'}, {@seclabel='seclabel'}]}}) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f00000001c0)=0x1, 0x8) [ 1020.340353][T31441] binder: 31439:31441 ioctl c018620b 0 returned -14 [ 1020.376433][ T22] binder: release 31439:31461 transaction 1090 out, still active [ 1020.677570][T31578] binder_alloc: binder_alloc_mmap_handler: 31420 20001000-20004000 already mapped failed -16 [ 1020.693256][T31577] binder: 31420:31577 ioctl c018620b 0 returned -14 [ 1020.699301][T31578] binder: BINDER_SET_CONTEXT_MGR already set [ 1020.709213][T31578] binder: 31420:31578 ioctl 40046207 0 returned -16 [ 1020.709320][T31579] binder_alloc: 31420: binder_alloc_buf, no vma 03:20:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x3f00000000000000, &(0x7f00000007c0)}) 03:20:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x6, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:41 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2800, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:41 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="3fad204b60f3609b327b7c1d6200294bb5274b9d504d622f7e01829a2948a67d57ead0b1afd0cbb397abdee8ae9b172b63f980e39cd0905c5fca45851355784fe1d897a5c42ad59c0ec77455a324458b154f52212a8f0ca1e2488bde981e295290ca31df74ba713a18bb952865608bfaff783ec831aa49ea91f36d10ec1de734ecc084368c4cf0c261bfbca31d35b40650a509d811c523867f1c7ce73a3b0f6164848d846b0f635862489f5c32634b501972b850a48311a867cb9314ff9fc4", 0xbf, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000140)={r2, 0x3f, 0x8001}, &(0x7f00000001c0)={'enc=', 'raw', ' hash=', {'tgr160-generic\x00'}}, &(0x7f0000000400)="ddda436eed603ec23ed380bc0e728863a14c481cbe741401f32b53f2d5392387561c3f4c1f57d4180d130b16b633085ce4cd63257d64d3ddcae7866ebf191c887fa1b322a3774b349995532a7f8a1935377f085f3dd86e51814269fd118819a846b90995efb8e0402a3b63ad82a7ebdae214eb6225e9512aa468fb621d50bed085f183cf3ff8ce9d61e5378427565e5e064edb0d4305d459440f896fb7fb9f92e8fe74e08ae899069f94ec64709edfe7da9ec65a5fdb2ecac834ce35a9b7c7638229716ad5cf1ee9eaeca04ac297988f1a75ed63e76bf1be67a0bc4b2d", &(0x7f0000000500)="8460159545c08fff814e923402fe894cf8b6d089dd72be219b7483cfdf03afa8a4bcf8225934f372eea1cf27779347e46692866e17fb6dce743d16d2aa67b606568301b3f7217f6b3a65c940d64b5604b9d6820a66a473d42ccce91770582fd316ceaadf19dde541e42a1ea0481620b37e3124a55d6609ca360d4133783cfe46034311fbec49818c414412625e5b6c6206a4b55c2b810db42ede001a64f6201c9a9aa9aba1d30a9c8b") sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0xffffff1c) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x3500}, 0xaf}], 0x1, 0x4004001) 03:20:41 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x10000001}) [ 1020.723635][T31577] binder: 31420:31577 BC_ACQUIRE_DONE u0000000000000000 no match [ 1020.723871][T29797] binder: send failed reply for transaction 1087 to 31420:31427 [ 1020.740168][T29797] binder: send failed reply for transaction 1090, target dead [ 1020.747886][T29797] binder: undelivered TRANSACTION_ERROR: 29189 [ 1020.809105][T31584] binder: 31580:31584 ioctl c018620b 0 returned -14 03:20:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x4000}, 0xaf}], 0x1, 0x4004001) [ 1020.871100][T31597] binder: 31580:31597 unknown command 0 [ 1020.878736][T31597] binder: 31580:31597 ioctl c0306201 200003c0 returned -22 [ 1020.925322][T31593] binder: 31592:31593 ioctl c018620b 0 returned -14 [ 1020.941928][T31607] binder_alloc: 31592: binder_alloc_buf, no vma 03:20:42 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400000, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r1 = fcntl$dupfd(r0, 0xffffffff7ffffffb, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0x100f}}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0xfffffffffffffffd, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000440)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) syz_genetlink_get_family_id$ipvs(0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000480)={0x43, "28c1f920107f1fffb2332e61b6577c9e365d3b3364395ac565404575eabaf852c5a36e86557b19d4a25199c0f80ae7ebac3a69376fa50a5dc84e9df24662340152ae5df6544e7513d43970431364a8d997dc6c2a95c1d1ddf69a4813ef94c9a4351717b3159d6f4f8faa1683d12fe9a4566120b13197a8b924537e01178220fb"}) sendto$inet(r1, &(0x7f0000000080)="38837479e2bed805b8434e53f84c82a682ba02bff8e718f19ff914488cdca1026609b2215d1310873e416fbc1141ce6923fb1e04d388532443b25266de7c90af77767fa8269f3d429b1988e2729e863b7d7076573de5f85543514d262a3278afb52ac02f413f5a8be91f1122d59f5f0fe1109a876a44636f28c5bd6f45f519b707e4ecea73eda2894e06f61d4bf47958f04108a745674d7b3bf1dfcce536cbdcfa4010c6b2a2f83a94d7764c0005e3cd51b7e525e4cf6fed5e73ac301cdb28a8766d2b86c1010c", 0xc7, 0x4, &(0x7f0000000180)={0x2, 0x4e20, @multicast2}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x8) 03:20:42 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x143, 0x0) syz_mount_image$erofs(&(0x7f00000001c0)='erofs\x00', &(0x7f0000000200)='./file0\x00', 0x12, 0x9, &(0x7f0000001600)=[{&(0x7f0000000240)="6e40ceaaeaf66660eff04f5b6dd6fc44642e31a101b673bb15c9b950263df865121558c000", 0x25, 0x1fffe000}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000280)="84f19b7880da3b0347af289417c4cb4b7ad2d90b6b6fafa10ab88b0dd7aa009706c89039d593dbfa5b31ff41243752f59d7576539a4c34ebc159eb048c969f1421", 0x41, 0x7}, {&(0x7f0000000300)="0fbee05b9782217ccbf4aa3f10d20bd047d5c7120c27355253c7bc2422424ae026326b", 0x23, 0x6}, {&(0x7f0000001400)="3cb47af6af47ebcae1125f9213edf7c9f078f8aa6edf48a1594687e4bbb6106a1e4cb8f80b0477191a42b553551ca9fabd67f9c3fab7cb6fc4a1161e6d057a72950a65b356c8fc0ad7658cc2823f88b7d649733d79f1e7010309e7abfcd764201153a406fd16349ea602e9e02cbea2f7b93cfccafaa1a8714fcfb68b23d5c46ca2517a51252a2a", 0x87, 0x2}, {&(0x7f0000000340)="bf4fcd47bcd2526562d578ad773f49b58b7f1c5962b3f54b0c38e19952806ba854a89acd50a8ececc751e699e61bdc1ca5b5c43c9571713453d91cb29c4cea29998a1c5ab1bfbfef7a09b40df95d1e1df330", 0x52, 0x8}, {&(0x7f00000014c0)="d85bb089a2d924f3380bddafe504fca88f1b0627ebd3115cc8819ce250d506", 0x1f, 0x4}, {&(0x7f0000001500)="c22f75108fa45d5c5fe653fc746a1d3a3a7c13ac7f358578923339981cdbf7f391752ba84645a6203b50fe69f127616484358590a55ec9d06b3969e216e97149c46af947d417a3dce5bfd926d6", 0x4d, 0x9}, {&(0x7f0000001580)="351d636e2f9088a4e6fe1225d2b11d6a84f2c35ac906aaa6db375c433245be8594a470db2a7173fb5da0427fd21c9c8682f1c10f506e87efdba33a1937fc0d8f2aca79ea5f19112b", 0x48}], 0x808000, &(0x7f0000001700)={[{@noacl='noacl'}, {@fault_injection={'fault_injection', 0x3d, 0x3}}, {@fault_injection={'fault_injection', 0x3d, 0x2}}, {@user_xattr='user_xattr'}, {@user_xattr='user_xattr'}, {@nouser_xattr='nouser_xattr'}, {@user_xattr='user_xattr'}, {@nouser_xattr='nouser_xattr'}, {@acl='acl'}, {@acl='acl'}], [{@audit='audit'}]}) rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x7, 0x2, 0x8000, 0x10000}}, 0x20, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) 03:20:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0xa4, 0x0, &(0x7f0000000000)="b0b8480c5f08a67ef10f97d7490aa1fae54b1bca26f36feebf8228c98077c3cc3d606b877b47ddebfbb2909dfa90d1c0ea2e09e655f3e0a0dc8a1df65a57be8e0f408a0b229196700f9c13bcd70b09b5672779bc67b7c998ff505967aef68636a0e27fb8496e5a328c3bb5901712179a113a4870033423b26dfb5265de2a09c2760050346c64201a40fa02d9e99e051964883f0373a807eeade8889bb507b35c850aed14"}) 03:20:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x4002}, 0xaf}], 0x1, 0x4004001) [ 1021.059532][T31617] binder: 31615:31617 ioctl c018620b 0 returned -14 03:20:42 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r2) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) [ 1021.139732][T31620] erofs: read_super, device -> /dev/loop0 [ 1021.203591][T31620] erofs: options -> noacl,fault_injection=0x0000000000000003,fault_injection=0x0000000000000002,user_xattr,user_xattr,nouser_xattr,user_xattr,nouser_xattr,acl,acl,audit, [ 1021.246539][T31620] erofs: cannot find valid erofs superblock 03:20:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0xe803}, 0xaf}], 0x1, 0x4004001) 03:20:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x7, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:42 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, r1) mq_unlink(&(0x7f0000000200)='-^\x00') openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x400, 0x0) write(r0, &(0x7f0000000000)="5942105e16881a93f93a76815f9fa20e8ea915d199b73019486c727554ed53f7cc44764d5f870fb4339df2b12783dadaec025630be4b3137ac54e180e446ea37a5c9abdbd8491eb8d258880b09325b9ada3eb2d017a988511495309efd74be86206ab91850766811171076185db4b74cf1a9b3e8a9aaf69da5ec971b461eaa4ba6aec2cac6ebc7afa0eb8568d623c6747cdf41df8c43b6d1e9cf2bcab9c8353dcf69237cfdc8d2e320ec5b2e", 0xac) r2 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0)=0x3, 0x4) 03:20:42 executing program 1: r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffff9c, 0xfffffffffffffffe, r0) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000440000005c000000ff070000335ca98129482886d38f4ac895268a45038b8fefdd35582cd6c450386828c0299002c6fd150e38bb51d873a497321503a2b956829db479bb1ae311d2954bc216d40000000039b995fdb1efa1d11c968e3c2f3cfb7c9a7990f1b4b77262d344004c697103a451e37687d3c5566cd8738ac91b5659820ee808b3868fae2857309bd32728b6c06296aea17371df94a8c6db229d3c4f0784ffea70a95041823d01bd2887e28306e819c688724448783aec0f11ba3daaefd66aaae0d3d16351dd0ac9c6078b2d913dbc2a2263dc354cd7af7c5ea6d44cdd5d08f99bcb0e44dbb5e2a015a946b76708ac70a29f3fa6a0b3554174dbbfc2f984d24259752f4ecba15d52f67b1b978c0a9d8d229d8dfcc0519c77a6daf42449a3a342414c76b089148911ed5f3cf0248f7e2ae3332c0e150ed1d8f47e17c001d004f030c29f255b19eeb1586095e288165a72183ea3bec1695eb71d265edec262fbb3b60d300ea0834fc4f0f286b899b3f7b4c356ed1138c813897536246a556af551fddc4fdf2b0f2a0c4bc1253d442e495240232c9a0bf0a6ce8d1a895cb81211f4a4f5c1e6f368e1361f3602e5299e616b15066a211e78d749d0171bac273c00307a9e10b49807e50392e3e9274e45388b5b116a7a1c763189cadd8aab2825554d296471497eb784f67bc9b5030776808b1fa9d59d906e1d39405956a4e70e80fcdf4cb86ab09f2a8715da672604dda736cec7ae5551b07a7b6a356ace05b036e31e64710dbcfba89b058b6ad5f1515fa26b4f5b4f98e81a6ca502ce0a08bdbcd16984f11212a09d88b3e707ae34d07d4a03a365990d40e4e30befe063fa7939896a3f7569864a661af95183075fecab2339899c7bd636a9da09f37d16a777e94fe19a1a3e4aa1f0d4b20539ea686a782d0d4eb5c383c2413f10ee7b7cc0e1e3c20d5a063d6ca13c69e4621fc49672a80ea69496930289f71e665c317f7fa22f521fcd78cdf4627824b2421ac0fe0ab387033ff47c8d0c92ae1ee83c6c35374eeb11ebbf92d24d1205b1f3944a0ebfd4f6c09a4305f14493a694b718bc880661f03470ea58da912b45c123dc5d8d00d4096e249530a49dae3c41528457fd6f8787099f2aff335c7a4183f563fc0bc1db5946fa9abde46c770741d9d74732fa4bfb6d7a9337057a882f15ecb93513b42d5f70a92a91c667e2116372a900330612d6c032f1303a6b93da5f26866c6d98065c27f83c36bb23c10df4ed75ccab032eed6fb03a25905f47973a45e4a1a526a1cd820da82f4c1b79e452cac63bbb6c5aa8f0ad7410dc71739aa0a6d103931b54fc00b019c8a7cb595a8f4240e22791255e1bd6a23716524ee810ec14cb337657f2a80ddeb09508eced5bd6ac702af35cb163531f1f8bb719dd704426809b7f898e0f3d85cb83781ba01f3b4f4d5d20b379ec8181376ed37bb3dc969c425be97276f69f9109d1b2dbfc5cdccf04998d304ea77ed82e3789a0401f2b79d39c35fae3987319467664e6451e0da18b22610e04bdb74418756862f2d0f6dddebeb3856ba4431724a522b4c9896b90a14393b00dab2813db30f0eff7ebcb98aededa3ce09d6e8842e1b5e6fd10caf58c1ca37b25c09805f93163bec7985fc2671d0aa59a3cca00d20eaacbed99094fec5f62f70b517320bacfeaa32ccb5a79fa0b38b75d4b55468151c1557f89800acb7ccca5bf3c76199f120de552ab1349a0ced2b45fe8b852786dc02c57db8e02bc421cc5398cc24b285185dc9ff394c014daa32169ff1916a2e2cdf729ccebc1e6627e4297e9167bf16cbfe1ff023fffe6bf052e590d831483c166f1e10f0e151be58a3c91436f6c866b49d68d3f779cce0e4d14348e9bfb653aca38bf285c97af0aeb210cce5806ec93886a9738b358af4af658cf9f00bd365c090ff6a9e9b365e51fa4badb8f9bf2b6d16775ed65c91da1179c1f314159b878df2d31497022951d66614580c76dbb9f5bf66af373c6014df7fcc1205a56ea65a96b00a16fa6f56169061214d001054d97dae1d9533e62a18dc168b47b05e622b1fb079f745bac011e0e77903c8681ece49bb4a50fec77638328ccb778acd4c3d41ada3f21dff4a3fdbf231022dde3d8b557679dbf2fa8e3e4ea484635f29844cb6a2e69b9cf7b81354b1116742af214566797d09dee5401b77b434702df22bcc519714243212678e5644a30afba2bd50f4e02ce24da49913c7de49f221f018e58373263ebe8c7c16bfe7887adbb861d53a7a8044fdc322e947a304a53238964af2889d28800b5cffe6f445020382c0ad8bdec8d452b0f4f57969a5a6d986ca491cec452bd6a62aad266439e0a6f9141191f4c5cc344bfcb1849fab99a0ee42085a0157894ffe8625cfcb9796473cc53c79b3cf77e4d65a9e6d4aa562bf4a7280260644d69f482f6529a6d91c75636d611a8e7d3382339873dfface5197f6736d3e2ac7f9a9c091bdea9e965bd72de38829bb2390288fdff4997fcee10f5eb8da4a2f070edac8e0adbef3bbb66f0c282e7f83589e2b4dbb4389397665df57bb36ad5f018da696b20a677b7b961a2f22fa217c5848ce4f0f92c444c02832827eb02672a90d1e11c6556750aa7ea4b71876bf72bc62400c26ae2d4fe919e4f9e53147d7394c5353fb1702b6346c5458f4945ae2bc9d26ec0bbfe587cc865a3f992fcb9ccfba361109a8be9da09c6f304b67b1e0d3cef8b78b0bf07f4df996faa5b7ad948a8f3734fabec241752c086a16c8a1cd8c9d0444adebb2b9cba379bd0d662be4525aae433844da1b03af11dab7890784ec91687969a9271ccaeea7fcf150442f258f6ce409fe883807453d51ec32d3ed520459cea0118a0c944bca7d787a3823d21e0f8ea66055babccf016428368857c44af504d1bcc43a4b7c14d12737eef97aae58eb5fac3b023d3eddee2604f1f7a000552cdef49732f30653665c6497c57e6638088edb950546ee06600dd436904e9c07ac4014f9ebc3f9a838f3cf19a60e495a082f8b5f3eb72bb9064f4baac4d11831937f72cb3736625e7025562b6f16feaf9e6a51f49882b82917909e1fe87f1d5ecf24d177089fc29c8825ceead82f924b64ce4ae378fa19b1f8cfd0322dd978526a2e3251c6f6b7549eb509514ef60ca8613484eff7cbcf363a5a8934f4b8b51b9338b1be8fb1dd25ec23c4754ca0b3379316900d60fd61e7cc1e935509fb69cb59959e9e33d1b8237f5a46343b66a1f2efe46fed21a2eb789fa1e22df79bb6f45a1d13bb0b1d7c1973f45e3ccd2e63832469fb639d56b0df824241c66c2d0cd1e16f3f96f953d525414b642fc9e159c0f6dac9932d9eca2446ee762fcb6596f6080d185b53e6563ccf3a48033daf1964f849ff08b5a232f5c057735272343997054bb8b4d5a49673744cfc9aac4287aef3add6ee46dd4081717a46c273b7d53daf313ea6b4b0b54aa7c7b700b8e58d2f25249c3211873479b50ed531974a6f9e7202fb9acc92df13973a17b76b7a2cdc5d8120f896334b1049230ffc0ddc1cf8a4212a1cac7e260edf6a161604aeeec6254bf74f5f2c211d6153e5b5491b996ac29f171f5b5a846c8d73bc27ef99329eb61857e0035fda224a380c13c0d87ae690cb9729a8d51c987605d5d680524a0a2caee72ebeaa3f46c10cfbd3196e96dcfccd91183e7c0ebdd0e28670fbeb89e0ebeff777ae4e812711742f4181ce3b18610864c6276969379cb126a9f1e965159c7862d30822f7ca64f5c2afc788941e36b50e394421c7042d08466cdd108d24e6a176baf2047274a9794ee44abc97a47de83519d14d30a6dde6021c40e9efddbc8ac633eda2c725487bfe574f44fd296f3a1e88061b2f7d7d84188b4fe09477cdfd623a51e85be562d2d4dc8883abc04bd04c682ef891bb35af5e7f12fc8bbb630625b29f64a73d9f6d7a0e95120dbdfaf6b2ffdf11b8b933304ebdd4db670e391d828009650c8d3c6da5e9f157fb9cbce86a1ed6caa478d753994b09dd70ec2b25bb9ef5680b56f2ff3aca9f356ded32ee5d76e08bd02b7a85824873cca629f38cdaf2059063cadc6437906c55a6e3767a8e2b595661f07157b86ab823c11b0cd0f5866912e208e18eef1e35b8ddcf32a0236df0843c7bbeb3328fde3b1bb8783218ab80050149466edea299d9f27e842648701ec739c3c01d9908c5947d8e8f378b62b8ab7177955415dd81d7dff7ead4d62a2a43ef866f907f3bf658b9e5735e42d43a3910efc4e0d69abf7977a9b386b237dee86bd0325f7d811f00229f6e22be93457f7a13258c61d226e83a3aec91acda7354af5f05466e22e4223122d29738d477139b7db81871d5f84479d91124a84f22e878a3b7441511542e34591dede0f05211dafdabe75f972726c6250d4532581d1b76dab109154f798e0b83293a3dac9301a9317f504acb541d3778c90a9c265c9a0ce13e988c17299ef45cfbce5a917b2388bc387d6b7933231a61e6a3fa9e6b85ab580ec7556f708fc30a7e29dee2182fdafd88aa964bfe65180886094a47278ec2d22bccdfca8e23bade6e7b9df6be9fee5b37ef5f1ad700bcee96e3fda2dc11d31e28bbfe17b6e6fd7c704da7ee4d120e448c223046b48a76f09a818796f6014d3df81b5da3ab4cae6e5b3a41a44c415d15498133b84db6b49087934c9fd0762657f937a8b2cc16c5f6c5a2d59a8d3a89f7db03adbd77d15ba06cf12f3eff968108f1d093c1c69ccc47c6735efa378ecddb769c20ad950fee70296a560fe8e3cd10acfa666293b2d2393b2307d1ccc45906482b17aa51773c0689ec2a1cce5bbaec71be0e2fa6bb1b60864b9aa58b6917495ee4828d7f253ba14565ed215c2fac500fc1c87556a40f35879242f00666dcae474981e4a4de7d05e8db90bf7de85b45830af31a18949f0b95610b5fe78b49af46635d4c2035073158ec96f75d20905fa2f04a174e981bc9bf9c7a66b5be2ac49d07da33c084b6202ca3bba872899dcd07beb20e71c042ef22a32d179c074a839cc6bde77dadcb2284a3ba506b86051d22e289f94cbb4533c80305f53b51fdcbac1f152a8aac1ea0cb9bdcffde6cc0e9884a3f941621c6cf0eafc55978008655e9c86b534b3e367fce78bb3dd2a35f002ae42d3fbdb79f4ca2e7fd9b8f6306f29d1edc9d4addedbecad80d7b367c135e5cb65e0bcc929a0e9db2c0a12069c972f4e394067420942c952e9acd8e040cce8d63f5e6aba37e599f36564f33372d48376f68ff9c1cd90c8ac9fa600b7d418db75c890b62b0619630168823c11729ca95cdd64727501d6816318757f9f47c8837d28a86db1492030fa37e121ad5dcc8dd1e798d3a58fa027dba3ae5fc6106298bf2774ab3839f2449fb85c3d84d8716779e0aa07389d8d8f87cfa44966ee976507c914c0b387c299e229a68e059d14d0c820d60fa0999ec27c5b5d2171e601677aa26cc0178188efe738a2a11ecb14d0bc890f42e8d1251509636cb5ab53e7e71376c16afe99c91ba002d077f2fb898815eac6ae6625826efef77de11b5bb003a35c198a410c4b36190628ab5b063ee61fa63c5ed1832f6ffbcf1b047b162bb5398a55aa330685aaff418d24c5bdf836aae119ae69a2397c3e5364f330047ca429dc20cb27e46043f82abc724648389b8cf06ea72aeb6eb825a33467f7bf39b88a3fd8d0242c093b3b0d712b1013dcb6cba5009bc16c5e768ecd4da31c725ec9aa583c031498e81a4b0aa314cc90f5d731de72c29309987ffdabaf3bc23831a116aa8234512956e39f3dce1dfe00e2fe9bdb8b1711269c5163519e79980a9744d56994bf915d35978a23c7b9031e2fd2e51dde750c7984522aa1bfca3afb9c90bcdd712c4616c45048dadd2c2a538db452f2ee9b46b0c213564600"], &(0x7f0000001140)=""/216, 0x105e, 0xd8, 0x1}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x39459893335e5bca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0xfffffffffffffffc) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x400000) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000001240)={0x8, 0x8000000000, 0x100, 0x1, 0x1, 0x7fff}) 03:20:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0xf401}, 0xaf}], 0x1, 0x4004001) [ 1021.578227][T31597] binder_alloc: binder_alloc_mmap_handler: 31580 20001000-20004000 already mapped failed -16 [ 1021.594239][T31597] binder: 31580:31597 ioctl c018620b 0 returned -14 [ 1021.602184][T29797] binder: release 31580:31651 transaction 1101 out, still active 03:20:42 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000000)={0x1, "227628399e40f4b19cd0332211f663e858c20ee4eb1094bdff57312c977cc6f5", 0x3, 0x1}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x21080}, 0xaf}], 0x1, 0x4004001) 03:20:42 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xeda2, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') [ 1021.734609][T31665] binder: 31662:31665 ioctl c018620b 0 returned -14 03:20:42 executing program 1: r0 = accept$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) fsetxattr(r0, &(0x7f0000000100)=@random={'btrfs.', '/dev/userio\x00'}, &(0x7f0000000140)='proc\x00', 0x5, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) uselib(&(0x7f00000000c0)='./file0\x00') ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x8) [ 1021.853298][T31671] binder: 31662:31671 unknown command 0 [ 1021.864385][T31671] binder: 31662:31671 ioctl c0306201 200003c0 returned -22 [ 1021.901357][T31678] binder_alloc: binder_alloc_mmap_handler: 31615 20001000-20004000 already mapped failed -16 [ 1021.929404][T31683] binder: BINDER_SET_CONTEXT_MGR already set [ 1021.937064][T31678] binder: 31615:31678 ioctl c018620b 0 returned -14 [ 1021.945070][T31683] binder: 31615:31683 ioctl 40046207 0 returned -16 [ 1021.970835][T31686] binder_alloc: 31615: binder_alloc_buf, no vma [ 1021.992662][ T22] binder: release 31615:31627 transaction 1098 out, still active [ 1022.002564][T31686] binder_transaction: 5 callbacks suppressed [ 1022.002582][T31686] binder: 31615:31686 transaction failed 29189/-3, size 24-8 line 3147 [ 1022.017591][ T22] binder: send failed reply for transaction 1098, target dead [ 1022.031016][ T22] binder: send failed reply for transaction 1101, target dead [ 1022.043503][ T22] binder: send failed reply for transaction 1104 to 31662:31665 03:20:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80, 0x80800) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000180)=""/84, 0x122000, 0x1000, 0x9}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000380), &(0x7f0000000480)=0x18) r3 = fcntl$dupfd(r1, 0x406, r1) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09631040bc30c7a1d16ffe3c8b7edfac347f21fd248a119fc57434b5920c8cdeb4297861737f522c5df37ec28dec95f1193fd26aeff9c6709a3f05efe3b0a78e008dabc38437a5a7d9ff2601499fb261d24e049a", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:43 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0xe647c}, 0xaf}], 0x1, 0x4004001) 03:20:43 executing program 3: ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000280)={0x0, 0x7, 0x400, 0x4800}) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x200, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x701001, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) fcntl$lock(r2, 0x25, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000080)=""/74) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f00000001c0)={0xe, "4e6d5304eafdbf270f74b0d484110788b0b1224c7de6a8bf46d09bde0142dac8f11c5e107890ae3230d27f57c87212edc4200c20404a19055823c492b8061da7f0af15c67ae7913cff8e62183c8a5528bc0240b10f8a76aef54dc383254afe20998b6929c50346e245c90be0e0bc91c9f2027b41c083c576f82ec49eec1e9007"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x3104d6513c90b44e, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r3) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) memfd_create(&(0x7f0000000000)='/dev/dlm_plock\x00', 0x1) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:43 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x210200, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000040)={0x5, 0x2, @stop_pts=0x7}) syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0x7, 0x8, 0x9, [@loopback]}]}}, @icmp=@timestamp_reply={0xe, 0x2}}}}}, &(0x7f0000000100)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') [ 1022.067035][T31665] binder_alloc: binder_alloc_mmap_handler: 31662 20001000-20004000 already mapped failed -16 [ 1022.180129][T31671] binder: 31662:31671 ioctl c018620b 0 returned -14 [ 1022.206210][T31707] binder: 31701:31707 ioctl c018620b 0 returned -14 [ 1022.228629][T31710] binder: 31662:31710 transaction failed 29189/-22, size 24-8 line 2994 03:20:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0xa, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:43 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0xfffffc, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:43 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x142800}, 0xaf}], 0x1, 0x4004001) [ 1022.290604][T31711] binder: 31701:31711 BC_ACQUIRE_DONE u3cfe6fd1a1c730bc no match 03:20:43 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='\x00') [ 1022.394405][T31724] binder: 31717:31724 ioctl c018620b 0 returned -14 03:20:43 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x281400}, 0xaf}], 0x1, 0x4004001) 03:20:43 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) clock_gettime(0x6, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x6, 0xb, 0x4, 0x40000040, {r1, r2/1000+10000}, {0x2, 0x0, 0x10001, 0x6, 0x4, 0x16b, "901361b6"}, 0x56, 0x7, @planes=&(0x7f0000000100)={0x9, 0x8, @fd=0xffffffffffffff9c, 0xfffffffffffffffe}, 0x4}) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 1022.497342][T31735] binder: 31717:31735 unknown command 0 [ 1022.503783][T31735] binder: 31717:31735 ioctl c0306201 200003c0 returned -22 03:20:43 executing program 0: utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x101, 0x80}) mq_unlink(&(0x7f0000000040)='em1bdev.\'$\'bdevsecurity\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x200200, 0x0) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000140)=0xfffffffffffffff8) 03:20:43 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x800000}, 0xaf}], 0x1, 0x4004001) [ 1022.980027][T31861] binder_alloc: binder_alloc_mmap_handler: 31701 20001000-20004000 already mapped failed -16 [ 1022.990655][T31860] binder: 31701:31860 ioctl c018620b 0 returned -14 [ 1022.992363][T31862] binder: BINDER_SET_CONTEXT_MGR already set [ 1023.003506][T31862] binder: 31701:31862 ioctl 40046207 0 returned -16 [ 1023.010399][T31861] binder: 31701:31861 BC_ACQUIRE_DONE u3cfe6fd1a1c730bc no match [ 1023.010609][T31860] binder_alloc: 31701: binder_alloc_buf, no vma 03:20:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:44 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) accept4$llc(r1, 0x0, &(0x7f0000000000), 0x80000) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:44 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) seccomp(0x0, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xdc, 0x1, 0x1000, 0x5}, {0xef6f, 0x5d7a, 0x101, 0xffffffffffff7fff}, {0x9, 0x0, 0x4, 0x7}]}) 03:20:44 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) open_by_handle_at(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x40) syz_genetlink_get_family_id$ipvs(0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001080)={0x0, @in6={{0xa, 0x4e21, 0x57d5, @mcast2, 0x7fff}}, 0x4c, 0xffff}, &(0x7f0000001140)=0x90) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001180)={r1, @in={{0x2, 0x4e22, @rand_addr=0x2}}}, 0x83) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x1, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) bind$tipc(r0, &(0x7f0000001240)=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}, 0x3}}, 0x10) [ 1023.018857][T29797] binder: release 31701:31711 transaction 1110 out, still active [ 1023.030356][T31860] binder: 31701:31860 transaction failed 29189/-3, size 24-8 line 3147 [ 1023.033837][T29797] binder: send failed reply for transaction 1110, target dead [ 1023.048607][T29797] binder: send failed reply for transaction 1113 to 31717:31724 [ 1023.058239][T31724] binder_alloc: binder_alloc_mmap_handler: 31717 20001000-20004000 already mapped failed -16 [ 1023.077851][T31724] binder: 31717:31724 ioctl c018620b 0 returned -14 [ 1023.114255][T31735] binder: 31717:31735 transaction failed 29189/-22, size 24-8 line 2994 03:20:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x10, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x8001a0}, 0xaf}], 0x1, 0x4004001) 03:20:44 executing program 0: mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x402800) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000100)=0x9) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0xfffffffffffffeff, 0x9, 0x401, 0x3f}, {0x8, 0x8b4, 0x9, 0x2}, {0x100000001, 0x6, 0x7fff, 0x8}, {0x4, 0x9, 0x92f7, 0x9}, {0x4, 0x20, 0xfff, 0x5}, {0x7, 0x4, 0x2, 0x2}]}, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x103040, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x1000000007fc) [ 1023.174641][T31875] binder: 31870:31875 ioctl c018620b 0 returned -14 03:20:44 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0xd1, "cbeace7c954f5500f7f4029b95b583749218c39da950fd384dcd2f15924c0868a70db45ac01d9d618a3b57e4933741d7409c985cc8d6b561442913055a81b89e162d806339368c0af6f1a4f7a4d79de33fe8ec27fdd47cfce97bebac9501fa9ab65179ac86ee5307b57170c408796209a8688d56d7d777056e6bca4ec284b3743991640fea4d3a3fee3f7b4b8bcbfe6f1cfffc9bd139cdb401ba863c013b6def688a465630af986b66b7f1a40bad394fb0e5f9958c12082351072128ec6fd204849b986f05bceb85763c2b19dee65c0092"}, &(0x7f0000000180)=0xd9) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={r1, 0x9, 0x7, [0x7, 0x6, 0x7ff, 0x3, 0x20000, 0x10001, 0x8]}, &(0x7f0000000200)=0x16) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040), 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x1000000}, 0xaf}], 0x1, 0x4004001) [ 1023.298106][T31887] binder: 31882:31887 ioctl c018620b 0 returned -14 03:20:44 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x67b, 0x3, [0x9, 0xd03, 0x0]}, &(0x7f00000000c0)=0xe) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r1, 0x1ff}, &(0x7f00000001c0)=0x8) [ 1023.370260][T31894] binder: 31882:31894 unknown command 0 [ 1023.379919][T31894] binder: 31882:31894 ioctl c0306201 200003c0 returned -22 03:20:44 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0xfffffffffffff801, 0x2, {0xffffffffffffffff, 0x0, 0x8, 0x1, 0x6}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x2000000}, 0xaf}], 0x1, 0x4004001) [ 1023.943244][T31926] binder_alloc: binder_alloc_mmap_handler: 31870 20001000-20004000 already mapped failed -16 [ 1023.954535][T31926] binder: BINDER_SET_CONTEXT_MGR already set [ 1023.960126][T31925] binder: 31870:31925 ioctl c018620b 0 returned -14 [ 1023.961177][T31926] binder: 31870:31926 ioctl 40046207 0 returned -16 [ 1023.973088][T31927] binder_alloc: 31870: binder_alloc_buf, no vma [ 1023.980392][T31927] binder: 31870:31927 transaction failed 29189/-3, size 24-8 line 3147 [ 1023.989994][T31926] binder: 31870:31926 BC_ACQUIRE_DONE u0000000000000000 no match 03:20:45 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) getsockname(r0, &(0x7f0000000180)=@generic, &(0x7f0000000100)=0x80) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x4000, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r3, 0x400443c9, &(0x7f00000002c0)={{0x7ff, 0x5, 0x6, 0x3, 0x1, 0x800}, 0x5}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0045404400000000000000000000000000000000000000000000000018000000000000000800000000010000000000000000000446c2685ae175eb3782719ee0eec67e43ba251cb126290472", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0963234526f55066875a", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:45 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x4, 0xf, 0x4, 0xf020, {0x77359400}, {0x0, 0xd, 0x100000001, 0x3bf, 0x5bfc, 0x2, "77ba5bab"}, 0x2, 0x1, @userptr=0x1, 0x4}) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/126, 0x7e) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)={0x0, @speck128}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0xc8, r2, 0x928, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x58}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xef92}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8068}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffffff81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x1}, 0x80) 03:20:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x3000000}, 0xaf}], 0x1, 0x4004001) 03:20:45 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000040)=0x3, 0x4) [ 1024.035467][ T22] binder: release 31870:31885 transaction 1119 out, still active [ 1024.043685][ T22] binder: send failed reply for transaction 1119, target dead [ 1024.052024][ T22] binder: send failed reply for transaction 1122 to 31882:31894 [ 1024.086218][T31931] binder_alloc: binder_alloc_mmap_handler: 31882 20001000-20004000 already mapped failed -16 [ 1024.150100][T31894] binder: 31882:31894 ioctl c018620b 0 returned -14 [ 1024.163039][T31940] binder: 31882:31940 transaction failed 29189/-22, size 24-8 line 2994 [ 1024.185279][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 1024.207488][T31942] binder: 31935:31942 ioctl c018620b 0 returned -14 [ 1024.218636][T31945] binder: 31935:31945 unknown command 1145062656 [ 1024.229232][T31945] binder: 31935:31945 ioctl c0306201 20000440 returned -22 03:20:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x12, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:45 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$dupfd(r1, 0x0, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x4000000}, 0xaf}], 0x1, 0x4004001) 03:20:45 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000000)='/dev/kvm\x00') [ 1024.253086][T31937] binder: 31935:31937 unknown command 1159947017 [ 1024.307068][T31937] binder: 31935:31937 ioctl c0306201 200003c0 returned -22 [ 1024.349573][T31955] binder: 31954:31955 ioctl c018620b 0 returned -14 03:20:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x2e75, 0x0, 0x1, 0x1, 0x40, 0x9}, &(0x7f0000000080)=0x20) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:45 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000000c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000100)='attr/sockcreate\x00') ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000040)) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x7000000}, 0xaf}], 0x1, 0x4004001) [ 1024.416806][T31955] binder: 31954:31955 transaction failed 29189/-22, size 24-8 line 2994 03:20:45 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x400, 0x0) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 1024.502307][T31962] binder: 31954:31962 unknown command 0 [ 1024.545831][T31962] binder: 31954:31962 ioctl c0306201 200003c0 returned -22 [ 1024.573778][T31971] binder: 31970:31971 transaction failed 29189/-22, size 24-8 line 2994 [ 1024.591353][T31971] binder: 31970:31971 BC_ACQUIRE_DONE u0000000000000000 no match [ 1024.611600][T31962] binder_alloc: binder_alloc_mmap_handler: 31954 20001000-20004000 already mapped failed -16 03:20:45 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') r0 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@rc, &(0x7f0000000080)=0x80, 0x80800) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={r1, 0xc5, 0xff, 0x2}, &(0x7f0000000200)=0x10) 03:20:45 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x42) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(0xffffffffffffffff) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) rt_sigsuspend(&(0x7f0000000040)={0x8}, 0x8) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x9000000}, 0xaf}], 0x1, 0x4004001) [ 1024.646385][T31955] binder: 31954:31955 ioctl c018620b 0 returned -14 [ 1024.671670][T31987] binder: 31954:31987 transaction failed 29189/-22, size 24-8 line 2994 03:20:45 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) write$P9_RCREATE(r1, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x5, 0x4, 0x7}, 0x4}}, 0xffffffffffffff75) 03:20:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x48, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:45 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x200000) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000040)={{0x1, @name="73c1ed35048bf9145294d196322ef866b9bae437a825f1d89eac5975cd41e122"}, 0x8, 0x8, 0x2}) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') [ 1024.894154][T32008] binder: 32003:32008 ioctl c018620b 0 returned -14 03:20:45 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x200081) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x8) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x1f, 0x931, "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", 0x20, 0x8, 0x6, 0x7, 0x3, 0x0, 0x10001, 0x1}, r2}}, 0x120) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB='D\a\x00\x00\x00'], &(0x7f0000000080)=0xc) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x1ff) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x8) 03:20:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0xa000000}, 0xaf}], 0x1, 0x4004001) [ 1024.972239][T32015] binder: 32003:32015 transaction failed 29189/-22, size 24-8 line 2994 03:20:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$packet(r2, &(0x7f0000000080)={0x11, 0x2, r3, 0x1, 0xeeb, 0x6, @remote}, 0x14) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xffffffffffffff2f, 0x0, &(0x7f00000000c0), 0x12a, 0x0, &(0x7f0000000480)="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"}) 03:20:46 executing program 0: r0 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x1a, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc}}, r0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:46 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0xc5112b2}, 0xaf}], 0x1, 0x4004001) 03:20:46 executing program 1: modify_ldt$read_default(0x2, &(0x7f0000000000)=""/41, 0x29) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000180)=""/171) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x800100b, 0x0, 0x1}) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xbe0000, 0x0, 0x4, [], &(0x7f00000000c0)={0x7b763ef1aa7aa10d, 0xd8, [], @string=&(0x7f0000000080)=0xfffffffffffffffe}}) openat$userio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/userio\x00', 0x101000, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 1025.303231][T31977] binder: 31970:31977 ioctl c018620b 0 returned -14 [ 1025.308620][T32029] binder_alloc: 31970: binder_alloc_buf, no vma 03:20:46 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x800}}, 0x10) r2 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x6, 0x8c4, 0x4, 0x7ff, 0x0, 0xe5d9, 0x20, 0xb, 0x80, 0x5, 0xdd, 0x10000, 0x8000, 0x9, 0x1, 0x5, 0xba, 0x3, 0x0, 0x9, 0x3, 0x20, 0x1, 0xffff, 0x4, 0x9c65, 0x6, 0x1, 0x7, 0x5, 0x4b36, 0x150, 0x7ffd, 0x7, 0x7ff, 0x8ed, 0x0, 0x9, 0x7, @perf_config_ext={0x3, 0x3}, 0xc0, 0x101, 0x1f, 0x5, 0x3, 0x7fffffff, 0x8}, r2, 0xe, r0, 0x2) [ 1025.415293][T32041] binder: 32039:32041 ioctl c018620b 0 returned -14 03:20:46 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r2, 0x8) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:46 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0xe000000}, 0xaf}], 0x1, 0x4004001) 03:20:46 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 1025.682609][T32057] binder_alloc: binder_alloc_mmap_handler: 32003 20001000-20004000 already mapped failed -16 [ 1025.693461][T32015] binder: 32003:32015 ioctl c018620b 0 returned -14 03:20:46 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x2, 0x8}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000000c0)=':~\xfb]/kvm\x00') ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000080)) 03:20:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x4c, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) [ 1025.748481][ T22] binder: release 32003:32057 transaction 1138 out, still active [ 1025.786406][ T22] binder: unexpected work type, 4, not freed [ 1025.821476][ T22] binder: undelivered TRANSACTION_COMPLETE 03:20:46 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x24000) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000040)) 03:20:46 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x10000000}, 0xaf}], 0x1, 0x4004001) [ 1025.947183][T32179] binder: 32173:32179 ioctl c018620b 0 returned -14 [ 1026.024653][T29797] binder: release 32173:32182 transaction 1141 out, still active [ 1026.049308][T29797] binder: unexpected work type, 4, not freed [ 1026.073083][T29797] binder: undelivered TRANSACTION_COMPLETE [ 1026.193148][T32198] binder_alloc: binder_alloc_mmap_handler: 32039 20001000-20004000 already mapped failed -16 [ 1026.204549][T32199] binder: 32039:32199 ioctl c018620b 0 returned -14 [ 1026.220606][T32198] binder: BINDER_SET_CONTEXT_MGR already set [ 1026.227570][T32198] binder: 32039:32198 ioctl 40046207 0 returned -16 [ 1026.234594][T32197] binder_alloc: 32039: binder_alloc_buf, no vma 03:20:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) r2 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x7ff, 0x800c0) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xe0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:47 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000040)={0x2, 0x100000001}) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0xffffffffffffff9f, 0x8, 0x8, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x1, 0x0) 03:20:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x60, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:47 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x14000000}, 0xaf}], 0x1, 0x4004001) 03:20:47 executing program 0: prctl$PR_SET_KEEPCAPS(0x8, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@alg, &(0x7f0000000080)=0x80, 0x800) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x12c6, @default, @bpq0='bpq0\x00', 0x5, [@null, @bcast, @bcast, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:47 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x4, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r2) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x7) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) [ 1026.241624][T29797] binder: release 32039:32050 transaction 1135 out, still active [ 1026.257198][T29797] binder: send failed reply for transaction 1135, target dead [ 1026.264783][T29797] binder: send failed reply for transaction 1138, target dead [ 1026.283073][T29797] binder: send failed reply for transaction 1141, target dead [ 1026.344431][T32210] binder: 32204:32210 ioctl c018620b 0 returned -14 03:20:47 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000000c0)={@empty, @local, r1}, 0xc) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:47 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x18020000}, 0xaf}], 0x1, 0x4004001) [ 1026.395867][T32214] binder: 32213:32214 ioctl c018620b 0 returned -14 03:20:47 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x2) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:47 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80040, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:47 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x34000000}, 0xaf}], 0x1, 0x4004001) 03:20:47 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620c, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8000, 0x0) name_to_handle_at(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x7f, 0x1000, "1df4380433840a8975f2c5f4bd4d05b5afadd77cffd6b14a665accc39866d99ba7588edda0ba1e44dac86ce3c887e77476687ec00d07f7760e383243133eb623ae4bc2f1e212810f5e122b7febdf267c98aede6c7d8e9a1fb97016635a7f43d655282c646d46c35f57652c4793c020972e36bd8eaf2529"}, &(0x7f0000000300), 0x400) r2 = getpgid(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000001c0)={{0x7, 0x7, 0x9, 0x401, 'syz1\x00', 0x401}, 0x0, 0x2, 0x4, r2, 0x1, 0x83f0, 'syz0\x00', &(0x7f0000000040)=['/dev/kvm\x00'], 0x9, [], [0x8001, 0x3, 0xe9, 0x7]}) [ 1026.799834][T32352] binder: 32350:32352 ioctl c018620c 0 returned -14 [ 1026.834694][T32354] binder: 32350:32354 ioctl c018620c 0 returned -14 [ 1027.128144][T32359] binder_alloc: binder_alloc_mmap_handler: 32204 20001000-20004000 already mapped failed -16 [ 1027.138728][T32220] binder: 32204:32220 ioctl c018620b 0 returned -14 [ 1027.145576][ T22] binder: release 32204:32360 transaction 1150 out, still active [ 1027.162593][T32362] binder_alloc: binder_alloc_mmap_handler: 32213 20002000-20005000 already mapped failed -16 [ 1027.173434][T32361] binder: 32213:32361 ioctl c018620b 0 returned -14 [ 1027.181636][T32363] binder: BINDER_SET_CONTEXT_MGR already set [ 1027.196606][T32364] binder: 32213:32364 BC_ACQUIRE_DONE u0000000000000000 no match [ 1027.201429][T32363] binder: 32213:32363 ioctl 40046207 0 returned -16 [ 1027.204701][T32362] binder_alloc: 32213: binder_alloc_buf, no vma [ 1027.214821][T29797] binder: send failed reply for transaction 1147 to 32213:32225 03:20:48 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000540)='/dev/midi#\x00', 0x5871ffb0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000a80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000800)={0x22c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x58d0f19}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd57c}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x42}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x63fc}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xce}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffff50}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b31}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x8123c356af4a52b6, 0x0) fstat(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000062678147c472ffe663ffbd3c15a882942b3be62714513f89a5032181511a573a01439f70430a3ae611035795635603d8a1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000580)=0x18) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000005c0)={r6, 0x7}, &(0x7f0000000600)=0x8) getgroups(0x5, &(0x7f00000000c0)=[0x0, 0xee00, 0xffffffffffffffff, 0xee01, 0x0]) write$FUSE_ENTRY(r4, &(0x7f0000000480)={0x90, 0x0, 0x7, {0x2, 0x0, 0x3, 0x8000, 0x4, 0x4, {0x4, 0xff, 0x3ff, 0x440, 0xf5f5, 0xfffffffffffffeff, 0x8001, 0x9, 0x4, 0x22b, 0xffff, r5, r7, 0x81, 0x10000}}}, 0x90) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={r8, 0x4c, &(0x7f0000000280)=[@in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e22, 0x3, @rand_addr="cc39276aabb489e8b6fe506caf50bb90", 0x1}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000380)=0x10) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0063404000f53b2572b89b314f0000000000000000000000000000000000000000000000180000000000000008008da90000000014d483ae73787481b406d9687068382792e6380309d3a90f59146a9c8ab6ed32ac84b4d034400ca10f4474e27460504971d8fafa4b3bcdaf1903a95d01b59c09bd8e8603b31ed380bd231f5183a1af0581e2f6de3230bd1b9c3c840c16f574394b507dbe9a221328ce7043a7612c4191ce8f3c1098fa1f", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x68, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:48 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080)=0x5, 0x4) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:48 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(r0, 0x20000000000025, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x35000000}, 0xaf}], 0x1, 0x4004001) 03:20:48 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f00000001c0)=0xc) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x12c, 0x7, 0x6, 0x2, 0x0, 0xab, 0x10000, 0x4, 0x81, 0x7, 0x1, 0x101, 0x3, 0x3, 0xfffffffffffffffd, 0x0, 0x667, 0x6, 0x0, 0x3f, 0x9, 0x8001, 0x7, 0x1, 0x7, 0x8a, 0x0, 0xaf, 0x479, 0x62, 0x2c752544, 0x3, 0x4, 0x1, 0xfff, 0xffffffff7fffffff, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000040), 0x2}, 0x2008, 0x75, 0xef5, 0x0, 0x9, 0x20, 0x3}, r1, 0x6, r0, 0xa) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000000)=0x1) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x0, 0x0) accept$netrom(r2, 0x0, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000280)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r3, 0x800, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x1}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x40) [ 1027.225708][T29797] binder: send failed reply for transaction 1150, target dead [ 1027.227056][T32362] binder_transaction: 3 callbacks suppressed [ 1027.227073][T32362] binder: 32213:32362 transaction failed 29189/-3, size 24-8 line 3147 [ 1027.308757][T32372] binder: 32366:32372 ioctl c018620b 0 returned -14 03:20:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x40000000}, 0xaf}], 0x1, 0x4004001) [ 1027.371073][T32382] binder: 32379:32382 ioctl c018620b 0 returned -14 [ 1027.379981][T32385] binder: 32366:32385 transaction failed 29189/-22, size 24-8 line 2994 03:20:48 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') arch_prctl$ARCH_GET_CPUID(0x1011) 03:20:48 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0xe) io_setup(0x199a, &(0x7f0000000040)=0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) io_submit(r3, 0x3, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x5, r2, &(0x7f0000000080)="6a77091854d7e3376d4a13c5839a9ea31bd1a0b45e2cac69a8f183c8d3b4b69c58998d1e18394412fa0d263518e2c5c965e286c6c92a522760aef03b0d7baf37ec2cec7115932d70631f1d66c4ee600c1a0f670fc6f33aabb69dfa4f5eb7e7c11da5f75bcd9f6dc9fb8d4e930c82ab20f5413a4ae94ea3b0f550b299c5b8", 0x7e, 0x20, 0x0, 0x3, r0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x4, r1, &(0x7f0000000140)="9463eefde180eda974872c0c86779b2a82e49039e0cc91a1103a2b0a989b44a018789b54a971174ba4a707ded8471865d206cac411c585bcaf6724f665d2d9945af3511de4d7d53abc57bd5b7ce7e9eb2d9d6e99748ac0719a3445f5c85a93538231331381e50ce14cb4ea46ce746e53c72fff86c590f903bea67e5aefba6223a9f091784d5aadd528d8323dde6d1d97407ae3dd336510b6df853a064db0a54c79113bc720e19d36af7113c71c8bad6e3718228830dd8a704be1e0e56665b0598fa22545c7fb761cb434e502e3dd1f96b9ac340f94173bbcae47097685a7cc7814d5771ee5f1e63d868e60", 0xeb, 0x0, 0x0, 0x2, r0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x42018c34, r1, &(0x7f0000000280)="a65572c7e7fb04ead2a1b84b6a741a1edfc01c74715517ea19aec892908ac106a48f429a1ce6a7c5409f0a55fb8ac6245d02e86065f56eeea4b1f07e65f34c5e429e47e7d3383fedda883d5cf82038a8bc1dbbabef560b25782db74b38f99e2c9e02ed9538e914e0628353e71ac7230b4fb628b2f94fa4f0007b8e664811eafebc8b71de6391d933411a4a7b4f69869b7fd454920f9aa2cef62cd541ce8ef04a2da0a0891f375a980c1668f07e3f26a402451b508fd343a30e0bea85fbb7071a0e853c0bce374ac44ad06bd13e9b71fc38d0febe2f1dba4c549f73116f580c6d95a366fcd8ccd52df3b835c64c38cfb331b615e5", 0xf4, 0x7, 0x0, 0x2, r0}]) [ 1027.446960][T32391] binder: 32379:32391 got transaction to invalid handle [ 1027.481613][T32391] binder: 32379:32391 transaction failed 29201/-22, size 24-2844590088 line 2994 03:20:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x40020000}, 0xaf}], 0x1, 0x4004001) [ 1027.586596][T32401] binder: 32379:32401 BC_ACQUIRE_DONE node 1155 has no pending acquire request [ 1027.614782][T32401] binder: 32379:32401 unknown command 0 [ 1027.625820][T32401] binder: 32379:32401 ioctl c0306201 200003c0 returned -22 03:20:48 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440)='/dev/cachefiles\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="a2000000b5b40f308052b0c4d30c34ec6f6cdf19bb161bbe10eb1d1853bb73940be24d0b96e52a718486ea4facc780f980607a02fc09398afa20bd35db78557b0b37dbc5c176f3d02d03ce0fb45acdee04fdb58a020933706ca48eeae302387772cb86bd332658d3e08237bb915ecc5a0d0c27549304212ecaa0acd5e275efcefda2c7a7f7eac2f9f7168804a6363fc887ef86d9dcb28a318600"], &(0x7f0000000540)=0xaa) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000580)={0x0, 0x9, 0x8, 0x101, 0x4, 0x1, 0x7, 0x67e9a7d8, r1}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x400, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e20, @broadcast}}, 0x0, 0x1c45, 0x0, "55e4ee5136310f12245074b038185aaa4161053c3b12af65af68c06a114fa1dfebe7ad6aa1d4ecd46d34ea1713fb213bdd02a0077cfa6248acd5d5fbf8758e0828d8c456d03a41d944959e4b78004bd6"}, 0xd8) fstat(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r3, &(0x7f0000000400)='security.capability\x00', &(0x7f0000000680)=@v3={0x3000000, [{0x80, 0x6}, {0x7, 0x7033}], r4}, 0x18, 0x3) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000002c0)={0x0, 0xe3, "8ffd1118948da9ac99782cf1ebca633fa96c1b8969e91d187edc0cea509e1b0ea4dde6889b68bfcc2759d2180acef2684c85ff399743b369755d7424ed8a943fe8707e2d6c6d9a26c0a4cc6ec39de7450578569f5c66cdc24144d332b47a1d5fa11cfc32e7d1778dcfc873a462a38ee51c881b42c90f4b179b7b60afe24af5cbf503bf2496ee12e4dc7f57a558767fc58297bc03d08840f7b34c5361a8069df9dc6bb11f23ceef85540c69edefef1a011db1a1a84850e5aa07c7f4d81e14a608d4f03ff300eedf510ac24d329c0149639867e3767b033815b546ef4a2895a78d217a98"}, &(0x7f00000003c0)=0xeb) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000005c0)={r1, 0xc0000000}, 0xfffffffffffffea9) sysfs$3(0x3) mq_unlink(&(0x7f0000000100)='/dev/kvm\x00') 03:20:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x7c640e00}, 0xaf}], 0x1, 0x4004001) [ 1028.085855][T32426] binder_alloc: binder_alloc_mmap_handler: 32366 20001000-20004000 already mapped failed -16 [ 1028.096452][T32385] binder: 32366:32385 ioctl c018620b 0 returned -14 [ 1028.097793][T32427] binder_alloc: 32379: binder_alloc_buf, no vma [ 1028.109668][T32427] binder: 32366:32427 transaction failed 29189/-3, size 24-8 line 3147 [ 1028.147009][T32391] binder: 32379:32391 ioctl c018620b 0 returned -14 [ 1028.157094][T32429] binder: BINDER_SET_CONTEXT_MGR already set [ 1028.163170][T32429] binder: 32379:32429 ioctl 40046207 0 returned -16 [ 1028.170063][T32401] binder: 32379:32401 got transaction to invalid handle [ 1028.172233][T32429] binder: 32379:32429 BC_ACQUIRE_DONE u0000000000000000 no match [ 1028.177795][T32401] binder: 32379:32401 transaction failed 29201/-22, size 24-2844590088 line 2994 03:20:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:49 executing program 0: setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000040)=0x4, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000080)='/dev/sequencer\x00') 03:20:49 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) pipe(&(0x7f0000000000)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x80100200}, 0xaf}], 0x1, 0x4004001) 03:20:49 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000040)=""/163) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000140)) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000100), 0x4) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x6c, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) [ 1028.332155][T32438] binder: 32434:32438 ioctl c018620b 0 returned -14 [ 1028.341220][T32444] binder: 32436:32444 ioctl c018620b 0 returned -14 03:20:49 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syncfs(r0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') 03:20:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0xa0018000}, 0xaf}], 0x1, 0x4004001) 03:20:49 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x43, 0x0) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/49) [ 1028.395864][T32452] binder: 32434:32452 transaction failed 29189/-22, size 24-8 line 2994 [ 1028.464608][T32456] binder: 32434:32456 unknown command 0 [ 1028.522133][T32456] binder: 32434:32456 ioctl c0306201 200003c0 returned -22 03:20:49 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000000)) 03:20:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0xb212510c}, 0xaf}], 0x1, 0x4004001) 03:20:49 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) accept$unix(r1, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) [ 1029.075284][T32456] binder_alloc: binder_alloc_mmap_handler: 32434 20001000-20004000 already mapped failed -16 [ 1029.086839][T32456] binder: 32434:32456 ioctl c018620b 0 returned -14 [ 1029.091928][T32490] binder: 32434:32490 transaction failed 29189/-22, size 24-8 line 2994 [ 1029.113391][T32492] binder_alloc: binder_alloc_mmap_handler: 32436 20001000-20004000 already mapped failed -16 [ 1029.125389][T32491] binder: 32436:32491 ioctl c018620b 0 returned -14 [ 1029.125886][T32492] binder: BINDER_SET_CONTEXT_MGR already set [ 1029.139397][T32492] binder: 32436:32492 ioctl 40046207 0 returned -16 [ 1029.146892][T32493] binder_alloc: 32436: binder_alloc_buf, no vma [ 1029.154757][T32493] binder: 32436:32493 transaction failed 29189/-3, size 24-8 line 3147 03:20:50 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x800, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x5) 03:20:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0xe8030000}, 0xaf}], 0x1, 0x4004001) 03:20:50 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x4000, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') r1 = shmget(0x3, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_LOCK(r1, 0xb) ioctl$CAPI_INSTALLED(r0, 0x80024322) 03:20:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xb37, 0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000049b93798cea356f63e5abf3"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000080)=0x9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x74, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:50 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) [ 1029.169074][T29797] binder: send failed reply for transaction 1161 to 32436:32451 03:20:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0xf4010000}, 0xaf}], 0x1, 0x4004001) [ 1029.298232][T32511] binder: 32499:32511 ioctl c018620b 0 returned -14 [ 1029.316657][T32514] binder: 32499:32514 transaction failed 29189/-22, size 24-8 line 2994 03:20:50 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x800, 0x400000) ioctl$KDDELIO(r0, 0x4b35, 0x7ff) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') fsetxattr$security_ima(r0, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@v2={0x3, 0x2, 0x7, 0x10000, 0x46, "daa22648ded6356d51f9764ad8a97b95c27fdf3dddb68a80b8976302389f25cf7c8363c233558a50bcdaafa9205ec796661bd3b451cef9c34738c845539898b60cba4bfbdb3e"}, 0x50, 0x2) 03:20:50 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000680)={@remote, @remote, 0x0}, &(0x7f00000006c0)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)=@delqdisc={0x88, 0x25, 0x0, 0x70bd29, 0x25dfdbfb, {0x0, r2, {0xffe2}, {0xf, 0xffe1}, {0x5, 0xfff1}}, [@TCA_RATE={0x8, 0x5, {0x401}}, @qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x34, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x458}, @TCA_PIE_TARGET={0x8, 0x1, 0x8}, @TCA_PIE_TARGET={0x8, 0x1, 0x8001}, @TCA_PIE_LIMIT={0x8, 0x2, 0x3}, @TCA_PIE_ECN={0x8}, @TCA_PIE_TARGET={0x8, 0x1, 0x7ff}]}}, @TCA_STAB={0x20, 0x8, [@TCA_STAB_BASE={0x1c, 0x1, {0x4, 0x6, 0x0, 0x7c8124a3, 0x2, 0x8, 0x34, 0x7}}]}]}, 0x88}}, 0x8000) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x7a, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0xffffff7f}, 0xaf}], 0x1, 0x4004001) 03:20:50 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_SECCOMP(0x15) mq_unlink(&(0x7f00000003c0)='/dev/kvm\x00') [ 1029.533466][T32521] binder: 32513:32521 ioctl c018620b 0 returned -14 [ 1029.541997][T32537] binder: 32534:32537 ioctl c018620b 0 returned -14 [ 1029.567189][T32517] binder: 32513:32517 transaction failed 29189/-22, size 24-8 line 2994 03:20:50 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) inotify_init1(0x800) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0xe2, 0x4, 0x7fffffff, 0x8001, 0x2}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x23beb65e, 0x6}, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000080)) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) [ 1029.607948][T32539] binder: 32513:32539 BC_ACQUIRE_DONE u0000000000000000 no match 03:20:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x80, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000040)=0x7fff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:50 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) [ 1029.752978][T32558] binder: 32553:32558 ioctl c018620b 0 returned -14 03:20:50 executing program 0: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0xe) io_setup(0x199a, &(0x7f0000000040)=0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) io_submit(r3, 0x3, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x5, r2, &(0x7f0000000080)="6a77091854d7e3376d4a13c5839a9ea31bd1a0b45e2cac69a8f183c8d3b4b69c58998d1e18394412fa0d263518e2c5c965e286c6c92a522760aef03b0d7baf37ec2cec7115932d70631f1d66c4ee600c1a0f670fc6f33aabb69dfa4f5eb7e7c11da5f75bcd9f6dc9fb8d4e930c82ab20f5413a4ae94ea3b0f550b299c5b8", 0x7e, 0x20, 0x0, 0x3, r0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x4, r1, &(0x7f0000000140)="9463eefde180eda974872c0c86779b2a82e49039e0cc91a1103a2b0a989b44a018789b54a971174ba4a707ded8471865d206cac411c585bcaf6724f665d2d9945af3511de4d7d53abc57bd5b7ce7e9eb2d9d6e99748ac0719a3445f5c85a93538231331381e50ce14cb4ea46ce746e53c72fff86c590f903bea67e5aefba6223a9f091784d5aadd528d8323dde6d1d97407ae3dd336510b6df853a064db0a54c79113bc720e19d36af7113c71c8bad6e3718228830dd8a704be1e0e56665b0598fa22545c7fb761cb434e502e3dd1f96b9ac340f94173bbcae47097685a7cc7814d5771ee5f1e63d868e60", 0xeb, 0x0, 0x0, 0x2, r0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x42018c34, r1, &(0x7f0000000280)="a65572c7e7fb04ead2a1b84b6a741a1edfc01c74715517ea19aec892908ac106a48f429a1ce6a7c5409f0a55fb8ac6245d02e86065f56eeea4b1f07e65f34c5e429e47e7d3383fedda883d5cf82038a8bc1dbbabef560b25782db74b38f99e2c9e02ed9538e914e0628353e71ac7230b4fb628b2f94fa4f0007b8e664811eafebc8b71de6391d933411a4a7b4f69869b7fd454920f9aa2cef62cd541ce8ef04a2da0a0891f375a980c1668f07e3f26a402451b508fd343a30e0bea85fbb7071a0e853c0bce374ac44ad06bd13e9b71fc38d0febe2f1dba4c549f73116f580c6d95a366fcd8ccd52df3b835c64c38cfb331b615e5", 0xf4, 0x7, 0x0, 0x2, r0}]) 03:20:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x14280000000000}, 0xaf}], 0x1, 0x4004001) 03:20:50 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000080)={0x0, 0x4, 0x4, &(0x7f0000000040)=0x5}) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x80000000000000}, 0xaf}], 0x1, 0x4004001) 03:20:51 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bond0\x00', 0x8a00}) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) 03:20:51 executing program 0: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x200081) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x8) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x1f, 0x931, "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", 0x20, 0x8, 0x6, 0x7, 0x3, 0x0, 0x10001, 0x1}, r2}}, 0x120) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB='D\a\x00\x00\x00'], &(0x7f0000000080)=0xc) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x1ff) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x8) [ 1030.319414][T32545] binder_alloc: binder_alloc_mmap_handler: 32534 20001000-20004000 already mapped failed -16 [ 1030.340784][T32545] binder: 32534:32545 ioctl c018620b 0 returned -14 [ 1030.352143][T29797] binder: release 32534:32706 transaction 1173 out, still active 03:20:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x300, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:51 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) openat$cgroup_subtree(r1, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x0, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x8f, 0xfa00, {{0xa, 0x4e24, 0x9, @mcast1}, {0xa, 0x1, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x400000000000000}, r2, 0xc1}}, 0xfffffffffffffca4) fcntl$setsig(r1, 0xa, 0x35) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x8001a0ffffffff}, 0xaf}], 0x1, 0x4004001) 03:20:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x10, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) [ 1030.501258][T32717] binder: 32716:32717 ioctl c018620b 0 returned -14 [ 1030.501972][T32715] binder: 32714:32715 ioctl c018620b 0 returned -14 [ 1030.544792][T32723] binder_alloc: binder_alloc_mmap_handler: 32553 20001000-20004000 already mapped failed -16 [ 1030.560046][T32722] binder: 32553:32722 ioctl c018620b 0 returned -14 [ 1030.570161][T32724] binder_alloc: 32553: binder_alloc_buf, no vma [ 1030.573296][T32723] binder: BINDER_SET_CONTEXT_MGR already set [ 1030.588768][T32723] binder: 32553:32723 ioctl 40046207 0 returned -16 [ 1030.596145][T32726] binder_alloc: 32553: binder_alloc_buf, no vma [ 1030.607728][T32726] binder: 32714:32726 unknown command 0 [ 1030.613424][T32726] binder: 32714:32726 ioctl c0306201 200003c0 returned -22 [ 1030.621852][T32722] binder: 32553:32722 BC_ACQUIRE_DONE u0000000000000000 no match [ 1030.633016][T29797] binder: release 32553:32628 transaction 1170 out, still active 03:20:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000180)={0x0, 0xa33}, &(0x7f00000001c0)=0x8) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000400}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x78, r3, 0x320, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xabd5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000000000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x78}}, 0x20008880) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={r2, 0x5}, &(0x7f00000002c0)=0xc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006340400000000000000000008000000000000000000000000000000000000000000000180000000000000008000000000000005e512565b24bfdf7d11bbf67535dd733ba22493eb75a9fa45e9b8e18908c4fdbf763e8d3c163afb97365a282ee95e271a81c8821d518d8ed8f8ae9f79aa129c38db24490b5e186e3c8f85f66aeaad43f849ef22811bf59400a165e992c0529fa4fb20477cd340413f006be7bbfd7ba1e483d378e10c627e707f36a99aefa2511e0e3ab292ee611158fe1c787fc215278392b3542a1602a5a1f", @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB="852a62730000000051f86697b2db91b83b884f7cf67708da9261ab4623106e893b77f2ada055d092cd0e4a44b22f5deca096665edc91fe5957de9ed3a0a502d763369c4875b4c9bc24fa8fa336a5676f1713de", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:51 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000040)={{0x7, 0x1}, {0x2000006}, 0x2800, 0x4, 0x401}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000180)={{0x5, 0x1}, {0x100000000, 0xce}, 0x4, 0x2, 0x6}) read(r1, &(0x7f0000000100)=""/75, 0x4b) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x3, 0x4) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 03:20:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x100000000000000}, 0xaf}], 0x1, 0x4004001) [ 1030.642719][T29797] binder: send failed reply for transaction 1170, target dead [ 1030.650520][T29797] binder: send failed reply for transaction 1173, target dead 03:20:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x200000000000000}, 0xaf}], 0x1, 0x4004001) [ 1030.805969][T32735] binder_alloc: 32734: binder_alloc_buf, no vma 03:20:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x300000000000000}, 0xaf}], 0x1, 0x4004001) 03:20:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="bdedd16fca070000"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x2, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000740)=""/4096, &(0x7f00000000c0)=0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="000010000000596fa556319957f5125f754a800b0000c524b46a8ed434c63e89c1051779d779b4883572779812462dfc0f3977afbc30099c76670f9173345955"], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1030.848383][T32742] binder: 32734:32742 BC_ACQUIRE_DONE u0000000000000000 no match 03:20:51 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000500)=0x9, 0x4) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='ifb0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x290, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffffffffffa}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_LINK={0xc8, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffffc0}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffffc1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x894}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0xb8, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfe53000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3df8ea98}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xdb71}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_NODE={0x44, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffffffffff8e}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x101000, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000080)) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x89, @multicast1, 0x4e20, 0x4, 'wlc\x00', 0x14, 0x487, 0x48}, 0x2c) 03:20:51 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) [ 1030.973683][T32756] binder: 32754:32756 ioctl c018620b 0 returned -14 [ 1031.042435][T32762] binder: 32754:32762 got transaction with invalid offset (8566040817085, min 0 max 24) or object. [ 1031.057169][T32762] binder: 32754:32762 BC_ACQUIRE_DONE u0000000000000000 no match [ 1031.272189][ T305] binder_alloc: binder_alloc_mmap_handler: 32716 20001000-20004000 already mapped failed -16 [ 1031.290566][ T305] binder: 32716:305 ioctl c018620b 0 returned -14 03:20:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x500, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x400000000000000}, 0xaf}], 0x1, 0x4004001) 03:20:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80, 0x80800) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000180)=""/84, 0x122000, 0x1000, 0x9}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000380), &(0x7f0000000480)=0x18) r3 = fcntl$dupfd(r1, 0x406, r1) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09631040bc30c7a1d16ffe3c8b7edfac347f21fd248a119fc57434b5920c8cdeb4297861737f522c5df37ec28dec95f1193fd26aeff9c6709a3f05efe3b0a78e008dabc38437a5a7d9ff2601499fb261d24e049a", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:52 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) socket$l2tp(0x18, 0x1, 0x1) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x9, 0x7, 0x7}) 03:20:52 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) [ 1031.364920][T29797] binder: release 32716:307 transaction 1183 out, still active [ 1031.417122][ T314] binder: 313:314 ioctl c018620b 0 returned -14 [ 1031.419828][T29797] binder: unexpected work type, 4, not freed [ 1031.446494][T29797] binder: undelivered TRANSACTION_COMPLETE 03:20:52 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x2, 0x0) [ 1031.489416][ T336] binder: 323:336 ioctl c018620b 0 returned -14 [ 1031.509182][ T402] binder: BINDER_SET_CONTEXT_MGR already set [ 1031.515293][ T402] binder: 313:402 ioctl 40046207 0 returned -16 03:20:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x700000000000000}, 0xaf}], 0x1, 0x4004001) [ 1031.597869][ T402] binder: 313:402 BC_ACQUIRE_DONE u3cfe6fd1a1c730bc no match 03:20:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x900000000000000}, 0xaf}], 0x1, 0x4004001) [ 1031.762939][ T444] binder_alloc: binder_alloc_mmap_handler: 32754 20001000-20004000 already mapped failed -16 03:20:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) exit_group(0x0) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x7, 0x4, 0x438, 0x0, 0x0, 0x0, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x4, 0x7f}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xffffffff, @mac=@random="f146ee793903", {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}, @mac, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}, 0x4000000, 0xd2, 0xc3, 0x2, 0x7, 0x8, 'bcsh0\x00', 'gretap0\x00', {0xff}, {}, 0x0, 0x8}, 0xf0, 0x118}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x83}}}, {{@arp={@remote, @empty, 0xffffff00, 0xffffff00, @empty, {[0x0, 0xff]}, @empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}, 0xca, 0x40, 0x3, 0x9, 0x377, 0xa66a, 'ipddp0\x00', 'ip6_vti0\x00', {}, {0xff}, 0x0, 0x41}, 0xf0, 0x120}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x4e, 0x0, 0x7, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x488) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000240)={0x7ff, 0x9, 0x8000, 0x8, 0x88f4}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x9}, 0x8) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, 0x0, &(0x7f0000000140)) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1, 0x0, 0x0, 0x3f4}, 0x0) syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0xffffffffffffffff, 0x2) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000380)) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000180)=0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)) r2 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r3) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) [ 1031.806813][ T443] binder: 32754:443 ioctl c018620b 0 returned -14 [ 1031.827023][ T444] binder: BINDER_SET_CONTEXT_MGR already set [ 1031.855177][ T444] binder: 32754:444 ioctl 40046207 0 returned -16 [ 1031.867311][ T444] binder_alloc: 32754: binder_alloc_buf, no vma [ 1031.884345][ T450] binder: 32754:450 BC_ACQUIRE_DONE u0000000000000000 no match [ 1031.897355][T29797] binder: send failed reply for transaction 1183, target dead 03:20:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x80000000, 0x40) connect$llc(r2, &(0x7f00000000c0)={0x1a, 0x320, 0x10000, 0x3fe00, 0x4, 0x9, @random="71f9a24fa906"}, 0x10) r3 = syz_open_dev$vcsa(&(0x7f0000000480)='/dev/vcsa#\x00', 0x5, 0x10000) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f00000004c0)=0x1, 0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000040)=0xc00001c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:52 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0x7, 0x5, 0x1}) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)=0x4) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0xfffffffffffffd54) [ 1031.909972][T29797] binder: send failed reply for transaction 1186 to 323:427 [ 1031.931349][T29797] binder: send failed reply for transaction 1189 to 313:402 03:20:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0xa00000000000000}, 0xaf}], 0x1, 0x4004001) [ 1032.049842][ T559] binder: 549:559 ioctl c018620b 0 returned -14 [ 1032.264707][ T427] binder_alloc: binder_alloc_mmap_handler: 323 20001000-20004000 already mapped failed -16 [ 1032.282655][ T427] binder: 323:427 ioctl c018620b 0 returned -14 03:20:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x600, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0xe00000000000000}, 0xaf}], 0x1, 0x4004001) 03:20:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80, 0x80800) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000180)=""/84, 0x122000, 0x1000, 0x9}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000380), &(0x7f0000000480)=0x18) r3 = fcntl$dupfd(r1, 0x406, r1) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09631040bc30c7a1d16ffe3c8b7edfac347f21fd248a119fc57434b5920c8cdeb4297861737f522c5df37ec28dec95f1193fd26aeff9c6709a3f05efe3b0a78e008dabc38437a5a7d9ff2601499fb261d24e049a", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="bdedd16fca070000"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x2, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000740)=""/4096, &(0x7f00000000c0)=0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="000010000000596fa556319957f5125f754a800b0000c524b46a8ed434c63e89c1051779d779b4883572779812462dfc0f3977afbc30099c76670f9173345955"], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1032.310173][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 1032.320805][ T22] binder: release 323:573 transaction 1197 out, still active 03:20:53 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @empty, 0x800}, 0x1c) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000100)) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) write$P9_RREAD(r0, &(0x7f0000000040)={0xb7, 0x75, 0x1, {0xac, "b940eee6d80addc7af933dee394177c4d63c3a30c125e3f0f562d9d5df28d751fefdf3e5d37782280adcb1c25eca4a0fe993029429566aaf0d440fd18f09e89d4ba5717acc17ac828e518fa8900ac006bbc072054a86f9d3c3d73e1877d0f2b15b7f49b7ca272a16fdd1f0004ac074f4e672b276885f87a10cb89085b3dd2476b888e00c5a2f63f6a6e3b7ce6d1ce23ea3698b0a668662a6e0ca8bfd9b487c86b548f4f2e25afd1483d44776"}}, 0xb7) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_delrule={0x70, 0x21, 0x1, 0x70bd2b, 0x25dfdbfe, {0xa, 0x14, 0x14, 0x3f, 0x3, 0x0, 0x0, 0x3}, [@FRA_DST={0x14, 0x1, @mcast1}, @FRA_DST={0x14, 0x1, @ipv4={[], [], @loopback}}, @FRA_DST={0x14, 0x1, @mcast1}, @FRA_DST={0x14, 0x1, @empty}]}, 0x70}}, 0x810) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x1000000000000000}, 0xaf}], 0x1, 0x4004001) [ 1032.400270][ T583] binder: 578:583 ioctl c018620b 0 returned -14 [ 1032.423933][ T585] binder: 580:585 ioctl c018620b 0 returned -14 [ 1032.435228][ T586] binder: 582:586 ioctl c018620b 0 returned -14 [ 1032.480260][ T590] binder: BINDER_SET_CONTEXT_MGR already set [ 1032.500764][ T590] binder: 578:590 ioctl 40046207 0 returned -16 03:20:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x1400000000000000}, 0xaf}], 0x1, 0x4004001) [ 1032.528190][ T595] binder: BINDER_SET_CONTEXT_MGR already set [ 1032.530833][ T590] binder: 578:590 BC_ACQUIRE_DONE u3cfe6fd1a1c730bc no match [ 1032.534334][ T595] binder: 580:595 ioctl 40046207 0 returned -16 [ 1032.541043][ T595] binder: 580:595 got transaction with invalid offset (8566040817085, min 0 max 24) or object. 03:20:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x1802000000000000}, 0xaf}], 0x1, 0x4004001) [ 1032.605191][ T595] binder_transaction: 7 callbacks suppressed [ 1032.605212][ T595] binder: 580:595 transaction failed 29201/-22, size 24-8 line 3241 [ 1032.635889][ T595] binder: 580:595 BC_ACQUIRE_DONE u0000000000000000 no match 03:20:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x3400000000000000}, 0xaf}], 0x1, 0x4004001) [ 1032.835013][ T615] binder: 549:615 ioctl c018620b 0 returned -14 [ 1032.835087][ T616] binder: BINDER_SET_CONTEXT_MGR already set [ 1032.863265][ T617] binder_alloc: 549: binder_alloc_buf, no vma [ 1032.873610][ T616] binder: 549:616 ioctl 40046207 0 returned -16 03:20:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x7fe) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x20000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x3500000000000000}, 0xaf}], 0x1, 0x4004001) [ 1032.876205][ T617] binder: 549:617 transaction failed 29189/-3, size 24-8 line 3147 [ 1032.886819][T29797] binder: send failed reply for transaction 1194 to 549:566 [ 1032.895401][T29797] binder: send failed reply for transaction 1197, target dead [ 1032.916248][T29797] binder: send failed reply for transaction 1200 to 578:590 [ 1032.923737][T29797] binder: send failed reply for transaction 1204 to 582:596 03:20:54 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) recvfrom$rxrpc(r1, &(0x7f0000000040)=""/251, 0xfb, 0x1, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000180)) [ 1033.039840][ T630] binder_alloc: binder_alloc_mmap_handler: 625 20001000-20004000 already mapped failed -16 [ 1033.075674][ T632] binder: BINDER_SET_CONTEXT_MGR already set [ 1033.092656][ T632] binder: 625:632 ioctl 40046207 0 returned -16 [ 1033.223591][ T596] binder_alloc: binder_alloc_mmap_handler: 582 20001000-20004000 already mapped failed -16 [ 1033.242387][ T596] binder: 582:596 ioctl c018620b 0 returned -14 03:20:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x700, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x4000000000000000}, 0xaf}], 0x1, 0x4004001) 03:20:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80, 0x80800) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000180)=""/84, 0x122000, 0x1000, 0x9}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000380), &(0x7f0000000480)=0x18) r3 = fcntl$dupfd(r1, 0x406, r1) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09631040bc30c7a1d16ffe3c8b7edfac347f21fd248a119fc57434b5920c8cdeb4297861737f522c5df37ec28dec95f1193fd26aeff9c6709a3f05efe3b0a78e008dabc38437a5a7d9ff2601499fb261d24e049a", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:54 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) write$P9_RLOCK(r0, &(0x7f0000000140)={0x8, 0x35, 0x2, 0x1}, 0x8) close(r0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x602000, 0x0) syncfs(r3) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44880002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40094}, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x2000000838, @remote}, {0xa, 0x0, 0x6, @loopback, 0x2}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="bdedd16fca070000"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x2, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000740)=""/4096, &(0x7f00000000c0)=0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="000010000000596fa556319957f5125f754a800b0000c524b46a8ed434c63e89c1051779d779b4883572779812462dfc0f3977afbc30099c76670f9173345955"], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x420140, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) set_thread_area(&(0x7f0000000040)={0x1000, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000, 0x5, 0x6, 0x54, 0x61, 0x7}) [ 1033.264026][ T641] binder: 582:641 transaction failed 29189/-22, size 24-8 line 2994 [ 1033.278014][T29797] binder: undelivered TRANSACTION_ERROR: 29189 03:20:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80, 0x80800) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000180)=""/84, 0x122000, 0x1000, 0x9}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000380), &(0x7f0000000480)=0x18) r3 = fcntl$dupfd(r1, 0x406, r1) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09631040bc30c7a1d16ffe3c8b7edfac347f21fd248a119fc57434b5920c8cdeb4297861737f522c5df37ec28dec95f1193fd26aeff9c6709a3f05efe3b0a78e008dabc38437a5a7d9ff2601499fb261d24e049a", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1033.411822][ T678] binder: 661:678 ioctl c018620b 0 returned -14 [ 1033.419282][ T652] binder: 650:652 ioctl c018620b 0 returned -14 [ 1033.427256][ T654] binder: 647:654 ioctl c018620b 0 returned -14 [ 1033.473974][ T740] binder: 661:740 transaction failed 29189/-22, size 24-8 line 2994 [ 1033.498269][ T759] binder: BINDER_SET_CONTEXT_MGR already set 03:20:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x4002000000000000}, 0xaf}], 0x1, 0x4004001) [ 1033.519243][ T768] binder: 742:768 ioctl c018620b 0 returned -14 [ 1033.530679][ T759] binder: 650:759 ioctl 40046207 0 returned -16 [ 1033.552340][ T771] binder: 650:771 got transaction with invalid offset (8566040817085, min 0 max 24) or object. [ 1033.563005][ T771] binder: 650:771 transaction failed 29201/-22, size 24-8 line 3241 03:20:54 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) [ 1033.590500][ T759] binder: 650:759 BC_ACQUIRE_DONE u0000000000000000 no match [ 1033.604695][ T774] binder: BINDER_SET_CONTEXT_MGR already set [ 1033.618500][ T774] binder: 742:774 ioctl 40046207 0 returned -16 [ 1033.635992][ T774] binder: 742:774 BC_ACQUIRE_DONE u3cfe6fd1a1c730bc no match 03:20:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x7c640e0000000000}, 0xaf}], 0x1, 0x4004001) 03:20:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x8010020000000000}, 0xaf}], 0x1, 0x4004001) 03:20:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0xb212510c00000000}, 0xaf}], 0x1, 0x4004001) [ 1034.157539][ T769] binder_alloc: binder_alloc_mmap_handler: 647 20001000-20004000 already mapped failed -16 [ 1034.175703][ T769] binder: 647:769 ioctl c018620b 0 returned -14 [ 1034.183015][ T799] binder: BINDER_SET_CONTEXT_MGR already set [ 1034.190043][ T800] binder_alloc: 647: binder_alloc_buf, no vma [ 1034.193854][ T801] binder: 647:801 BC_ACQUIRE_DONE u0000000000000000 no match 03:20:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0xa00, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) 03:20:55 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80000001, 0x2, 0x1, r0}) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000000)) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="bdedd16fca070000"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x2, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000740)=""/4096, &(0x7f00000000c0)=0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="000010000000596fa556319957f5125f754a800b0000c524b46a8ed434c63e89c1051779d779b4883572779812462dfc0f3977afbc30099c76670f9173345955"], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0xe803000000000000}, 0xaf}], 0x1, 0x4004001) 03:20:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/\x00\x00\x00\x00') ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) fstat(r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="80004ee55758f2a0", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) [ 1034.196334][ T799] binder: 647:799 ioctl 40046207 0 returned -16 [ 1034.204992][ T22] binder: send failed reply for transaction 1212 to 647:751 [ 1034.218130][ T800] binder: 647:800 transaction failed 29189/-3, size 24-8 line 3147 [ 1034.218635][ T740] binder_alloc: binder_alloc_mmap_handler: 661 20001000-20004000 already mapped failed -16 [ 1034.238918][ T740] binder: 661:740 ioctl c018620b 0 returned -14 [ 1034.245533][ T802] binder: 661:802 transaction failed 29189/-22, size 24-8 line 2994 [ 1034.310429][ T809] binder: 806:809 ioctl c018620b 0 returned -14 [ 1034.319345][ T810] binder: 803:810 ioctl c018620b 0 returned -14 03:20:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80, 0x80800) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000180)=""/84, 0x122000, 0x1000, 0x9}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000380), &(0x7f0000000480)=0x18) r3 = fcntl$dupfd(r1, 0x406, r1) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09631040bc30c7a1d16ffe3c8b7edfac347f21fd248a119fc57434b5920c8cdeb4297861737f522c5df37ec28dec95f1193fd26aeff9c6709a3f05efe3b0a78e008dabc38437a5a7d9ff2601499fb261d24e049a", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1034.380381][ T809] binder: 806:809 ioctl 400c6615 20000000 returned -22 [ 1034.409683][ T809] binder: 806:809 got transaction with invalid offset (0, min 0 max 24) or object. [ 1034.432179][ T809] binder: 806:809 transaction failed 29201/-22, size 24-8 line 3241 [ 1034.442710][ T809] binder: 806:809 BC_ACQUIRE_DONE u0000000000000000 no match [ 1034.451867][ T825] binder: BINDER_SET_CONTEXT_MGR already set [ 1034.458365][ T825] binder: 803:825 ioctl 40046207 0 returned -16 [ 1034.466442][ T815] binder: 813:815 ioctl c018620b 0 returned -14 03:20:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0xf401000000000000}, 0xaf}], 0x1, 0x4004001) 03:20:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80, 0x80800) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000180)=""/84, 0x122000, 0x1000, 0x9}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000380), &(0x7f0000000480)=0x18) r3 = fcntl$dupfd(r1, 0x406, r1) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09631040bc30c7a1d16ffe3c8b7edfac347f21fd248a119fc57434b5920c8cdeb4297861737f522c5df37ec28dec95f1193fd26aeff9c6709a3f05efe3b0a78e008dabc38437a5a7d9ff2601499fb261d24e049a", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1034.479183][ T825] binder: 803:825 got transaction with invalid offset (8566040817085, min 0 max 24) or object. [ 1034.497251][ T825] binder: 803:825 transaction failed 29201/-22, size 24-8 line 3241 03:20:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0xb63, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) [ 1034.536207][ T22] binder: release 813:822 transaction 1221 out, still active [ 1034.543746][ T22] binder: unexpected work type, 4, not freed [ 1034.551306][ T825] binder: 803:825 BC_ACQUIRE_DONE u0000000000000000 no match [ 1034.570574][ T22] binder: undelivered TRANSACTION_COMPLETE [ 1034.642353][ T838] binder: 828:838 ioctl c018620b 0 returned -14 [ 1034.681408][ T839] binder: 835:839 ioctl c018620b 0 returned -14 03:20:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0xffffff7f00000000}, 0xaf}], 0x1, 0x4004001) [ 1034.711882][ T829] binder: BINDER_SET_CONTEXT_MGR already set [ 1034.718370][ T829] binder: 828:829 ioctl 40046207 0 returned -16 [ 1034.728532][ T829] binder: 828:829 BC_ACQUIRE_DONE u3cfe6fd1a1c730bc no match 03:20:55 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$lock(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0xffffffff00000000}, 0xaf}], 0x1, 0x4004001) 03:20:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0xffffffffa0018000}, 0xaf}], 0x1, 0x4004001) 03:20:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x0, 0x2}, 0xaf}], 0x1, 0x4004001) [ 1035.103252][ T814] binder_alloc: binder_alloc_mmap_handler: 806 20001000-20004000 already mapped failed -16 [ 1035.136718][ T814] binder: 806:814 ioctl c018620b 0 returned -14 03:20:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="bdedd16fca070000"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x2, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000740)=""/4096, &(0x7f00000000c0)=0x1000) 03:20:56 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, 0x0, 0x13) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)=0xfffffffffffffff9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) [ 1035.172346][ T969] binder: 806:969 ioctl 400c6615 20000000 returned -22 [ 1035.180287][ T969] binder: BINDER_SET_CONTEXT_MGR already set [ 1035.188611][ T969] binder: 806:969 ioctl 40046207 0 returned -16 [ 1035.211952][ T814] binder_alloc: 806: binder_alloc_buf, no vma [ 1035.230682][ T969] binder: 806:969 BC_ACQUIRE_DONE u0000000000000000 no match [ 1035.243877][ T814] binder: 806:814 transaction failed 29189/-3, size 24-8 line 3147 [ 1035.261238][T29797] binder: send failed reply for transaction 1221, target dead [ 1035.271235][ T975] binder: 974:975 ioctl c018620b 0 returned -14 03:20:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000100)={0x2, 0x0, 0x80, 0x9, 0xd, 0x2, 0x6, 0xffff, 0x7, 0x1}) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) recvmmsg(r2, &(0x7f0000000740)=[{{&(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/117, 0x75}, {&(0x7f0000000480)=""/142, 0x8e}, {&(0x7f0000000540)=""/131, 0x83}], 0x3, &(0x7f0000000600)=""/253, 0xfd}, 0x8000}], 0x1, 0x20, &(0x7f0000000780)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09001040b85877b8606d403dc4c7c29643dab850e2a1a13711d2dbe4affdbde6be59c55333374f4629b8f263fb0b4cf2555c7039dea2292d27f0bbc1ecd9979f624d803a1c798096d24678d24ddfeb70d7ce3ed5c5ba21f15ef44abb0d696e33ee1fdc5a6cf19b563f005d11df2785faa2f4b723723110daa7e6391c41875b7e0da0d1550000000000000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:20:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x0, 0x3}, 0xaf}], 0x1, 0x4004001) [ 1035.284196][T29797] binder: send failed reply for transaction 1224 to 835:940 03:20:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80, 0x80800) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000180)=""/84, 0x122000, 0x1000, 0x9}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000380), &(0x7f0000000480)=0x18) r3 = fcntl$dupfd(r1, 0x406, r1) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09631040bc30c7a1d16ffe3c8b7edfac347f21fd248a119fc57434b5920c8cdeb4297861737f522c5df37ec28dec95f1193fd26aeff9c6709a3f05efe3b0a78e008dabc38437a5a7d9ff2601499fb261d24e049a", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1035.357309][ T981] binder: 974:981 got transaction with invalid offset (8566040817085, min 0 max 24) or object. 03:20:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x0, 0x4}, 0xaf}], 0x1, 0x4004001) [ 1035.482304][ T940] binder_alloc: binder_alloc_mmap_handler: 835 20001000-20004000 already mapped failed -16 [ 1035.493917][ T989] binder: 983:989 ioctl c018620b 0 returned -14 [ 1035.505428][ T940] binder: 835:940 ioctl c018620b 0 returned -14 [ 1035.512050][ T994] binder: 986:994 ioctl c018620b 0 returned -14 [ 1035.522795][ T989] binder: 983:989 unknown command 1074790409 03:20:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0xc63, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) [ 1035.526417][T24901] binder: undelivered TRANSACTION_ERROR: 29189 [ 1035.537694][ T989] binder: 983:989 ioctl c0306201 200003c0 returned -22 [ 1035.539889][T24901] binder: release 835:997 transaction 1233 out, still active [ 1035.564247][T29797] binder: release 983:984 transaction 1230 out, still active 03:20:56 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:20:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x0, 0x7}, 0xaf}], 0x1, 0x4004001) 03:20:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000000000000653a9e1cc6428f121fa215b0fa4e696b2640b6b4f9713fdff6a65ada86a7ab0c2709b18c6aa03a99b36c20a15ce6b82ae8c35c5761037d146b3d3f06fd1ac3200c3e0502f9"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="00ae33e1b218f39ccf348c834ad2630cc2bb479e09001fc6d552c2d82c90794b21d4628db083e97905d656946538823755e4b1b0cb34ecfcd80baba2c6d87d7e3678799e3cbe8d1f91f28acc37fce48eb32f8e7a752cfa8237e499c5cb504cc7a10624b8a8"], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1035.601024][ T998] binder: 986:998 BC_ACQUIRE_DONE u3cfe6fd1a1c730bc no match [ 1035.699814][ T1006] binder: 1003:1006 ioctl c018620b 0 returned -14 03:20:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x0, 0x9}, 0xaf}], 0x1, 0x4004001) [ 1035.774908][ T1078] binder: 1005:1078 ioctl 80087601 20000000 returned -22 [ 1035.774951][ T1045] binder: BINDER_SET_CONTEXT_MGR already set [ 1035.790769][ T1008] binder: 1005:1008 ioctl c018620b 0 returned -14 [ 1035.795417][ T1078] ------------[ cut here ]------------ [ 1035.802746][ T1078] kernel BUG at drivers/android/binder_alloc.c:1141! [ 1035.864515][ T1045] binder: 1005:1045 ioctl 40046207 0 returned -16 [ 1035.872739][ T1078] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1035.878883][ T1078] CPU: 1 PID: 1078 Comm: syz-executor.2 Not tainted 5.1.0-rc2 #36 [ 1035.886719][ T1078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1035.890583][ T1007] PM: Basic memory bitmaps freed [ 1035.897004][ T1078] RIP: 0010:binder_alloc_do_buffer_copy+0xd6/0x510 [ 1035.897021][ T1078] Code: 02 00 0f 85 20 04 00 00 4d 8b 64 24 58 49 29 dc e8 bf f9 23 fc 4c 89 e6 4c 89 ef e8 d4 fa 23 fc 4d 39 e5 76 07 e8 aa f9 23 fc <0f> 0b e8 a3 f9 23 fc 4c 8b 75 d0 4d 29 ec 4c 89 e6 4c 89 f7 e8 b1 [ 1035.897027][ T1078] RSP: 0018:ffff88805c9a7550 EFLAGS: 00010212 [ 1035.897038][ T1078] RAX: 0000000000040000 RBX: 0000000020001080 RCX: ffffc9000a61f000 [ 1035.897045][ T1078] RDX: 00000000000003d7 RSI: ffffffff854c77d6 RDI: 0000000000000006 [ 1035.897053][ T1078] RBP: ffff88805c9a75d0 R08: ffff88804fcf0140 R09: 0000000000000028 [ 1035.897060][ T1078] R10: ffffed100b934f01 R11: ffff88805c9a780f R12: 0000000000000020 [ 1035.897067][ T1078] R13: 0000000000000028 R14: ffff8880957f0210 R15: 0000000000000000 [ 1035.897077][ T1078] FS: 00007f12faab0700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 1035.897084][ T1078] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1035.897091][ T1078] CR2: 00007faa61d3c000 CR3: 0000000091273000 CR4: 00000000001406e0 [ 1035.897102][ T1078] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1035.897109][ T1078] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1035.897113][ T1078] Call Trace: [ 1035.897139][ T1078] ? memcpy+0x46/0x50 [ 1035.897157][ T1078] binder_alloc_copy_from_buffer+0x37/0x42 [ 1035.897173][ T1078] binder_get_object+0xc3/0x200 [ 1035.897198][ T1078] binder_transaction+0x2b4a/0x6690 [ 1035.897238][ T1078] ? binder_thread_read+0x3d50/0x3d50 [ 1036.043397][ T1078] ? __lock_acquire+0x548/0x3fb0 [ 1036.048364][ T1078] ? __might_fault+0x12b/0x1e0 [ 1036.053159][ T1078] ? lock_downgrade+0x880/0x880 [ 1036.058034][ T1078] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1036.064297][ T1078] ? _copy_from_user+0xdd/0x150 [ 1036.069170][ T1078] binder_thread_write+0x64a/0x2820 [ 1036.074399][ T1078] ? binder_transaction+0x6690/0x6690 [ 1036.079789][ T1078] ? __might_fault+0x12b/0x1e0 [ 1036.084581][ T1078] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1036.090832][ T1078] ? _copy_from_user+0xdd/0x150 [ 1036.095699][ T1078] binder_ioctl+0x1033/0x183b [ 1036.100473][ T1078] ? binder_thread_write+0x2820/0x2820 [ 1036.105943][ T1078] ? tomoyo_path_number_perm+0x263/0x520 [ 1036.111584][ T1078] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1036.117421][ T1078] ? binder_thread_write+0x2820/0x2820 [ 1036.122928][ T1078] do_vfs_ioctl+0xd6e/0x1390 [ 1036.127544][ T1078] ? ioctl_preallocate+0x210/0x210 [ 1036.132667][ T1078] ? __fget+0x381/0x550 [ 1036.136836][ T1078] ? ksys_dup3+0x3e0/0x3e0 [ 1036.141263][ T1078] ? nsecs_to_jiffies+0x30/0x30 [ 1036.146123][ T1078] ? tomoyo_file_ioctl+0x23/0x30 [ 1036.151067][ T1078] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1036.157318][ T1078] ? security_file_ioctl+0x93/0xc0 [ 1036.162446][ T1078] ksys_ioctl+0xab/0xd0 [ 1036.166626][ T1078] __x64_sys_ioctl+0x73/0xb0 [ 1036.171247][ T1078] do_syscall_64+0x103/0x610 [ 1036.175868][ T1078] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1036.181810][ T1078] RIP: 0033:0x458209 [ 1036.185811][ T1078] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1036.205448][ T1078] RSP: 002b:00007f12faaafc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1036.213887][ T1078] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458209 [ 1036.221888][ T1078] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000004 [ 1036.229886][ T1078] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 [ 1036.237884][ T1078] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f12faab06d4 [ 1036.245882][ T1078] R13: 00000000004bf49a R14: 00000000004d0e80 R15: 00000000ffffffff [ 1036.253911][ T1078] Modules linked in: 03:20:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="bdedd16fca070000"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x2, 0x0) [ 1036.263930][ T1038] PM: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1036.275409][ T1078] ---[ end trace 91aaefb15cdfe564 ]--- [ 1036.276552][ T1038] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1036.288599][T24901] binder: release 986:998 transaction 1236 out, still active [ 1036.294208][ T1038] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 1036.302930][ T1078] RIP: 0010:binder_alloc_do_buffer_copy+0xd6/0x510 03:20:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80, 0x80800) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000180)=""/84, 0x122000, 0x1000, 0x9}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000380), &(0x7f0000000480)=0x18) fcntl$dupfd(r1, 0x406, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09631040bc30c7a1d16ffe3c8b7edfac347f21fd248a119fc57434b5920c8cdeb4297861737f522c5df37ec28dec95f1193fd26aeff9c6709a3f05efe3b0a78e008dabc38437a5a7d9ff2601499fb261d24e049a", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 1036.304768][ T3877] kobject: 'loop1' (0000000003507cc4): kobject_uevent_env [ 1036.317808][T24901] binder: send failed reply for transaction 1230, target dead [ 1036.324701][ T3877] kobject: 'loop1' (0000000003507cc4): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1036.342359][T24901] binder: send failed reply for transaction 1233, target dead [ 1036.355708][ T1078] Code: 02 00 0f 85 20 04 00 00 4d 8b 64 24 58 49 29 dc e8 bf f9 23 fc 4c 89 e6 4c 89 ef e8 d4 fa 23 fc 4d 39 e5 76 07 e8 aa f9 23 fc <0f> 0b e8 a3 f9 23 fc 4c 8b 75 d0 4d 29 ec 4c 89 e6 4c 89 f7 e8 b1 [ 1036.365396][ T3877] kobject: 'loop0' (00000000be2aa259): kobject_uevent_env [ 1036.380486][T24901] binder: send failed reply for transaction 1236, target dead [ 1036.393836][T24901] binder: send failed reply for transaction 1239 to 1003:1077 [ 1036.403439][ T1078] RSP: 0018:ffff88805c9a7550 EFLAGS: 00010212 [ 1036.410517][ T3877] kobject: 'loop0' (00000000be2aa259): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1036.413042][ T1078] RAX: 0000000000040000 RBX: 0000000020001080 RCX: ffffc9000a61f000 [ 1036.422111][ T1038] PM: Basic memory bitmaps created [ 1036.432243][ T1078] RDX: 00000000000003d7 RSI: ffffffff854c77d6 RDI: 0000000000000006 [ 1036.444339][ T1143] binder: 1142:1143 ioctl c018620b 0 returned -14 03:20:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbf"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="bdedd16fca070000"]], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x2, 0x0) [ 1036.464316][ T1078] RBP: ffff88805c9a75d0 R08: ffff88804fcf0140 R09: 0000000000000028 [ 1036.475088][ T1078] R10: ffffed100b934f01 R11: ffff88805c9a780f R12: 0000000000000020 [ 1036.484515][ T3877] kobject: 'loop1' (0000000003507cc4): kobject_uevent_env [ 1036.492611][ T1147] binder_alloc: binder_alloc_mmap_handler: 1003 20001000-20004000 already mapped failed -16 [ 1036.493237][ T3877] kobject: 'loop1' (0000000003507cc4): fill_kobj_path: path = '/devices/virtual/block/loop1' 03:20:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x169, &(0x7f0000000180)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r0, r1}) sendmmsg(r0, &(0x7f000000bec0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, 0x0, 0x0, 0xa}, 0xaf}], 0x1, 0x4004001) 03:20:57 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xfe95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4000000000, 0x7f, 0xf69, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x80000001, 0x807c, 0x6, 0x0, 0x2, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) close(r1) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x838, @mcast1}, {0xa, 0x0, 0x6, @ipv4={[], [], @empty}}, 0xffffffffffffffff, 0xe0}}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) [ 1036.515554][ T1038] PM: Basic memory bitmaps freed [ 1036.522639][ T1078] R13: 0000000000000028 R14: ffff8880957f0210 R15: 0000000000000000 [ 1036.531595][ T1078] FS: 00007f12faab0700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 1036.534488][ T1077] binder: 1003:1077 ioctl c018620b 0 returned -14 [ 1036.555238][ T3877] kobject: 'loop5' (00000000236a2da7): kobject_uevent_env [ 1036.564348][ T1078] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1036.573716][ T1152] PM: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1036.581230][ T1149] binder: 1148:1149 ioctl c018620b 0 returned -14 [ 1036.587991][ T3877] kobject: 'loop5' (00000000236a2da7): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1036.598543][T29797] binder: undelivered TRANSACTION_ERROR: 29189 [ 1036.604846][ T1078] CR2: 0000000000000000 CR3: 0000000091273000 CR4: 00000000001406f0 [ 1036.613232][ T1152] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1036.614353][ T1160] binder: 1148:1160 got transaction with invalid offset (8566040817085, min 0 max 24) or object. [ 1036.620963][ T3877] kobject: 'loop3' (0000000082523bc8): kobject_uevent_env [ 1036.638362][ T1078] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1036.652079][ T1152] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff] 03:20:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0xd63, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) [ 1036.660396][ T1078] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1036.662722][ T3877] kobject: 'loop3' (0000000082523bc8): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1036.681876][ T1078] Kernel panic - not syncing: Fatal exception [ 1036.688953][ T1078] Kernel Offset: disabled [ 1036.693314][ T1078] Rebooting in 86400 seconds..