4, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6, 0x0, 0x0, 0x0, 0x100000000000000}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) [ 368.801155] binder: undelivered TRANSACTION_COMPLETE [ 368.953184] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 368.960364] FAT-fs (loop1): Filesystem has been set read-only [ 368.966392] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 368.980304] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 368.990098] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 14:46:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:46:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x74, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) 14:46:49 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000140)=ANY=[@ANYBLOB="920f05e42b9a61e513f3c87ffb7f46bb8a8091782597891df5d1600978fb32f9af307db71e160a8ca361454b3e94cc842a1463ec9308c68af53eec9a6391713f4ef4d27239c30f4bb3"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="0f01588566ba2000ec0f01ca66660fd445000f01c8f20f2d3f66ba2100ed66baf80cb8e8b2ff82ef66bafc0cedc4e2893baa002015e2f20f09"}], 0x3b3, 0x0, &(0x7f0000000040), 0x1de) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x100, 0x0) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f00000000c0), 0x4) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x4, 0x0, [{0x2, 0x80000001, 0x7, 0x8, 0xf, 0xfffffffffffffeff, 0x5}, {0x4000000b, 0x100000001, 0x1, 0xb6e5, 0xfffffffffffffffa, 0x0, 0x200}, {0x40000000, 0xbac, 0x0, 0x401, 0x1f, 0x3, 0x1}, {0xc0000019, 0x1, 0x6, 0xfff, 0x6, 0x8}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:46:49 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x1000000, 0x1000000020000) 14:46:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x900]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:46:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6, 0x0, 0x0, 0x0, 0x40000}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:46:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xa3, 0x1000000020000) 14:46:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x3]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 370.954461] 9pnet: p9_fd_create_tcp (29074): problem connecting socket to [ 370.954461] 27.0.0.1 14:46:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:46:49 executing program 7: syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000200)=""/4096) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2284, &(0x7f0000000080)={0x104, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000400)}, &(0x7f0000000100), &(0x7f0000001400)=""/71, 0x0, 0x0, 0x0, &(0x7f0000000040)}) 14:46:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x600000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="3970fe", 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:46:49 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000001380)="0a5cc80700315f85714070") bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) [ 371.085273] 9pnet: p9_fd_create_tcp (29098): problem connecting socket to [ 371.085273] 27.0.0.1 14:46:49 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000100)=""/249) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)) 14:46:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x9000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0xec040000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 371.302340] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 371.309565] FAT-fs (loop1): Filesystem has been set read-only [ 371.331848] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075d) [ 371.339085] FAT-fs (loop6): Filesystem has been set read-only [ 371.370170] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 371.377813] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075d) [ 371.395312] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000ff0) [ 371.408233] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000020) 14:46:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x400000000000000, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) 14:46:49 executing program 7: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) dup3(r0, r1, 0x0) 14:46:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:46:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x20000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xd2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, &(0x7f000000a000)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x0) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r1, 0x280080) sendfile(r1, r1, &(0x7f0000d83ff8), 0x2008000fffffffe) 14:46:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x40000, 0x1000000020000) 14:46:49 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x2d000000, 0x1000000020000) 14:46:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6, 0x0, 0x0, 0x0, 0x11000000}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) [ 371.738563] binder_alloc: binder_alloc_mmap_handler: 29064 20001000-20004000 already mapped failed -16 [ 371.748141] binder: BINDER_SET_CONTEXT_MGR already set [ 371.753440] binder: 29064:29143 ioctl 40046207 0 returned -16 [ 371.760125] binder_alloc: 29064: binder_alloc_buf, no vma [ 371.765713] binder: 29064:29144 transaction failed 29189/-3, size 0-0 line 2969 [ 371.773469] binder: undelivered TRANSACTION_ERROR: 29189 [ 371.781138] binder: undelivered transaction 406, process died. [ 371.818814] binder: undelivered TRANSACTION_COMPLETE [ 371.831236] 9pnet: p9_fd_create_tcp (29163): problem connecting socket to [ 371.831236] 27.0.0.1 14:46:50 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)) read$FUSE(r2, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) 14:46:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x300]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:46:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0xfeffffff]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:50 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000030c0), 0x1000) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="9000000000000000020000000000000001000000000000000000000b00001ea90066ce656d316e6f246576656d310000000000000000000000000000002c000000000000619fcd3823b7c94f5a3276ce8c9461000000000800617bec47d25b21307379737465746a48be1b31486dcc638d4e7361746367726f7570246367726f00040000000000000000000000000000"], 0x90) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) [ 371.984511] 9pnet: p9_fd_create_tcp (29184): problem connecting socket to [ 371.984511] 27.0.0.1 14:46:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="3970ff", 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:46:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0xfc000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x9]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 372.092109] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075d) [ 372.099325] FAT-fs (loop6): Filesystem has been set read-only [ 372.119411] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 372.123533] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075d) [ 372.126587] FAT-fs (loop1): Filesystem has been set read-only [ 372.130726] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 372.154793] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 372.170166] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 14:46:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0xecffffffffffffff, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) 14:46:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$inet6(0xa, 0xf, 0x9, &(0x7f0000000040)) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f0000000080)) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000080)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000d8e000)=@known='security.capability\x00', &(0x7f0000a2af87)=""/121, 0x71) 14:46:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:46:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xab, 0x1000000020000) 14:46:50 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x440, 0x1000000020000) 14:46:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x7ffff000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:50 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6, 0x0, 0x0, 0x0, 0x2000000}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) [ 372.614029] binder_alloc: binder_alloc_mmap_handler: 29149 20001000-20004000 already mapped failed -16 [ 372.623648] binder: BINDER_SET_CONTEXT_MGR already set [ 372.629382] binder: 29149:29214 ioctl 40046207 0 returned -16 [ 372.635394] binder_alloc: 29149: binder_alloc_buf, no vma [ 372.640993] binder: 29149:29216 transaction failed 29189/-3, size 0-0 line 2969 [ 372.648696] binder: undelivered TRANSACTION_ERROR: 29189 [ 372.654497] binder: undelivered transaction 409, process died. 14:46:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0xfe80000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 372.676834] binder: undelivered TRANSACTION_COMPLETE [ 372.688054] 9pnet: p9_fd_create_tcp (29230): problem connecting socket to [ 372.688054] 27.0.0.1 [ 372.710028] tmpfs: No value for mount option 'security.capability' 14:46:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:46:50 executing program 7: socketpair(0x3, 0x80801, 0x20, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000040)={0x200000000000000, 0x10000, 0x1000, 0x0, 0x10}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x2429}}, 0x18) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x70, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000000), &(0x7f0000000180)="c72a842ac261ea56c8da62d326ca3aa9327e8542f58373e97867c1bd9086b7f411386bfa1ba929190b292736ce92a42960c1c2c150337303c7dbdc9021d91b6b697df6d56ad33c9c42f85208c4dc2df335"}, 0x36a) r2 = shmget$private(0x0, 0x4000, 0x440, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f00000002c0)=""/201) close(r1) 14:46:50 executing program 4: r0 = memfd_create(&(0x7f0000049000)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000040)) r2 = add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000180)="9d07ad46345007996a5a94db35056a8d5404668d766f7724b1548c5f8b8922e55ef4924af14a4dd47a60282af1b19cdd9ceece935150f86329b281fad8a636cdfe828761795498d7144706152b60a46f6ff9f7294aa0896ce1ac59b6dc0379b96e6446122fe5b716d111", 0x6a, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0x0) keyctl$reject(0x13, r2, 0x6, 0x3, r3) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f000004d000)={0x80, 0x1, "636c69656e743100fffc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008", 0xffffffff80000004, "7fd82d5e02ca3901", "88e7ed00007fff051eaa961ef6c6992b6900000000f9ffff7711be18a3d918e0"}) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0xde) 14:46:51 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0xb80b000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:51 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x200000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 372.851197] 9pnet: p9_fd_create_tcp (29257): problem connecting socket to [ 372.851197] 27.0.0.1 14:46:51 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x200000, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x14) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0xffffffffffffff35) 14:46:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:46:51 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = memfd_create(&(0x7f0000000040)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r2, &(0x7f0000000140)='\x00', 0x1) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="00f6ff00fb01000000000000000000000000000000000000000000ce35651e8d38ab0000000000"], 0x20) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) [ 372.991238] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075d) [ 372.998476] FAT-fs (loop6): Filesystem has been set read-only [ 373.030034] 9pnet: p9_fd_create_tcp (29277): problem connecting socket to [ 373.030034] 27.0.0.1 [ 373.032340] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075d) [ 373.065181] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 373.072371] FAT-fs (loop1): Filesystem has been set read-only [ 373.092343] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 373.113538] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 373.123375] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 373.478395] binder_alloc: binder_alloc_mmap_handler: 29219 20001000-20004000 already mapped failed -16 [ 373.488172] binder: BINDER_SET_CONTEXT_MGR already set [ 373.493502] binder: 29219:29294 ioctl 40046207 0 returned -16 [ 373.499459] binder_alloc: 29219: binder_alloc_buf, no vma [ 373.505056] binder: 29219:29295 transaction failed 29189/-3, size 0-0 line 2969 [ 373.513067] binder: undelivered TRANSACTION_ERROR: 29189 [ 373.518562] binder: undelivered transaction 412, process died. 14:46:51 executing program 7: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffff67}, 0x7) mkdir(&(0x7f0000000700)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'noextend'}}, {@access_user='access=user'}, {@cache_mmap='cache=mmap'}, {@uname={'uname', 0x3d, "1d"}}, {@posixacl='posixacl'}]}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f0000000080)={0x8000000000000000}) 14:46:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0xffec, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) 14:46:51 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0xffff1f0000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:51 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xe00000000000000, 0x1000000020000) 14:46:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:46:51 executing program 4: r0 = socket$inet6(0xa, 0x21000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000040), 0x113, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) close(r1) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ioctl$int_out(r5, 0x3, &(0x7f0000000080)) 14:46:51 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xa9, 0x1000000020000) 14:46:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6, 0x0, 0x0, 0x0, 0xf00000000000000}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) [ 373.524618] binder: undelivered TRANSACTION_COMPLETE 14:46:51 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0xfcff0000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 373.555115] 9pnet: p9_fd_create_tcp (29304): problem connecting socket to [ 373.555115] 27.0.0.1 14:46:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="397006", 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:46:51 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x282000, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000000c0)=0x5, 0x2) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040), 0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x701000) ioctl$BLKPG(r2, 0x1269, &(0x7f0000001080)={0x1f, 0x9d, 0x1291, &(0x7f0000002200)="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"}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000010c0)={r0}) listen(r2, 0xc) 14:46:51 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x4080, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f00000002c0)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="6f3d071e9eff008000000100000004000000000000"]}) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000100)={0x6, 0x3, 0x4, 0x1, 0xb4, 0x800}) getsockopt$netlink(r1, 0x10e, 0x7, &(0x7f0000000240)=""/38, &(0x7f0000000280)=0x26) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000140)=""/187) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x15, 0x12, &(0x7f0000000040)="73d8963c09761e364f3352db25a9ebd0df76"}) close(0xffffffffffffffff) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000200)={0x6, 0xffff, 0x3, 0x7, 0x5, 0x6, 0x6, 0x10000, 0x100000000, 0x9}) 14:46:51 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0xfcff]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0', [{0x20, 'selinuxnodevusernodevvboxnet1'}, {0x20, '/dev/ptmx\x00'}, {0x20, '\'ppp1'}, {}], 0xa, "dffa64617939307cf84b369ca9c9d285ab2c985ea9ee2eee781275a46b485fa666db40c02e"}, 0x60) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xb9e8, 0x204000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x5, {0x7, 0x1b, 0xa1, 0x34, 0x1, 0x1, 0x6, 0x400}}, 0x50) syz_open_pts(r0, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000180)={0x65e, 0xffffffffffff8000}) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000040)={0x16, 0x0, 0x0, 0x0, 0x3}) 14:46:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9pz', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:46:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socket$inet6(0xa, 0x2, 0x40000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000180)) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0xf503}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x27, 0x1, 0x0, 0x0, {0xf}, [@typed={0x8, 0x7, @str=',]\x00'}]}, 0x1c}}, 0x0) 14:46:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0xb800]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 373.871230] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 373.916667] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075d) [ 373.917026] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 373.923869] FAT-fs (loop6): Filesystem has been set read-only [ 373.930961] FAT-fs (loop1): Filesystem has been set read-only [ 373.948322] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 373.965464] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075d) [ 373.985885] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 373.994088] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 374.001142] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000020) [ 374.002506] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 14:46:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x500, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) 14:46:52 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) syz_open_procfs(r1, &(0x7f0000000080)='net/dev\x00') ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000000c0)={{&(0x7f00007a0000/0x3000)=nil, 0x3000}, 0x4000000008000}) 14:46:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0xfe80]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:46:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000100)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x40, 0x1, [0x8]}, &(0x7f0000000140)=0xa) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r2, 0x4}, &(0x7f00000001c0)=0x8) shutdown(r1, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r3, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x76, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @rand_addr}}}, &(0x7f0000000000)=0x2c2) 14:46:52 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x1000000000000000, 0x1000000020000) 14:46:52 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x4000000, 0x1000000020000) 14:46:52 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6, 0x0, 0x0, 0x0, 0x40030000000000}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) [ 374.347516] binder_alloc: binder_alloc_mmap_handler: 29303 20001000-20004000 already mapped failed -16 [ 374.357095] binder: BINDER_SET_CONTEXT_MGR already set [ 374.362416] binder: 29303:29371 ioctl 40046207 0 returned -16 [ 374.368583] binder_alloc: 29303: binder_alloc_buf, no vma [ 374.374178] binder: 29303:29372 transaction failed 29189/-3, size 0-0 line 2969 [ 374.382870] binder: undelivered TRANSACTION_ERROR: 29189 [ 374.389038] binder: undelivered transaction 415, process died. [ 374.415806] binder: undelivered TRANSACTION_COMPLETE 14:46:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x3e8]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 374.436229] 9pnet: p9_fd_create_tcp (29390): problem connecting socket to [ 374.436229] 27.0.0.1 14:46:52 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54000010, &(0x7f0000eb1000/0x3000)=nil) shmat(r0, &(0x7f00003f9000/0x1000)=nil, 0x7000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 14:46:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:46:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0xc0fe]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025c3f0a00145f8f764070") syz_mount_image$iso9660(&(0x7f00000001c0)='iso9660\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="d1657373696fb9306a083ac69dd53030303030303730303030302c00"]) 14:46:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0xa]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 374.594757] 9pnet: p9_fd_create_tcp (29413): problem connecting socket to [ 374.594757] 27.0.0.1 14:46:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:46:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000), 0x297, &(0x7f0000013ff1)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001800010000000000000000000010fe06000c000000000000000c0000000000001aee05717de09f083a821cc93fedf2ed0000000002000000009468b4"], 0x30}}, 0x0) [ 374.722598] 9pnet: p9_fd_create_tcp (29431): problem connecting socket to [ 374.722598] 27.0.0.1 [ 374.761382] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 374.768595] FAT-fs (loop1): Filesystem has been set read-only [ 374.775259] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 374.820039] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075d) [ 374.827272] FAT-fs (loop6): Filesystem has been set read-only [ 374.833373] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075d) 14:46:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x300, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) 14:46:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0xfeffffff00000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:53 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x4, 0x8000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x2, 0x2}}, 0x20) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) mount(&(0x7f00000005c0)='.', &(0x7f0000000680)='./file0/file0\x00', &(0x7f0000000640)='mslos\x00', 0x500c, &(0x7f00000e7000)) umount2(&(0x7f0000000100)='./file0/file0\x00', 0x0) 14:46:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 375.214027] binder_alloc: binder_alloc_mmap_handler: 29380 20001000-20004000 already mapped failed -16 [ 375.223863] binder: BINDER_SET_CONTEXT_MGR already set [ 375.234778] binder: 29380:29446 ioctl 40046207 0 returned -16 [ 375.240758] binder_alloc: 29380: binder_alloc_buf, no vma [ 375.246393] binder: 29380:29447 transaction failed 29189/-3, size 0-0 line 2969 [ 375.249218] binder: undelivered TRANSACTION_COMPLETE 14:46:53 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') sendfile(r0, r0, &(0x7f0000000100)=0x400005, 0x6) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000980)='/dev/vhost-net\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) close(r1) 14:46:53 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xc0030000, 0x1000000020000) 14:46:53 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xf5ffffff00000000, 0x1000000020000) 14:46:53 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6, 0x0, 0x0, 0x0, 0x200000000000000}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:46:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 375.280577] binder: undelivered transaction 418, process died. [ 375.287463] binder: undelivered TRANSACTION_ERROR: 29189 [ 375.293279] 9pnet: p9_fd_create_tcp (29459): problem connecting socket to [ 375.293279] 27.0.0.1 14:46:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0xe8030000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:53 executing program 4: r0 = userfaultfd(0x0) r1 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x80000000000000, 0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000820000/0x1000)=nil, 0x1000}, &(0x7f0000000080)=0x10) dup(r1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000240)={{&(0x7f00005e3000/0x800000)=nil, 0x880000}, 0x200000}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00005c6000/0x1000)=nil, 0x1000}, 0x2}) 14:46:53 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000015c0)={r2}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x80, 0x2000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@remote}}, &(0x7f00000000c0)=0xe8) stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@mcast1, 0x4e21, 0x3f, 0x4e24, 0x100000001, 0xa, 0xa0, 0xa0, 0x3f, r4, r5}, {0xc000000000000000, 0x6, 0x8, 0x9, 0x2000200000000, 0x2, 0x10c, 0x7ff}, {0x4, 0x20a8, 0x6}, 0x82, 0x0, 0x2, 0x1, 0x1, 0x3}, {{@in6=@loopback, 0x4d3, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x0, 0x0, 0x2, 0x94, 0x1, 0x5, 0x100000000}}, 0xe8) r6 = eventfd(0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000000)={r2}) r8 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r8, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") dup2(r6, r2) [ 375.368191] 9pnet: p9_fd_create_tcp (29477): problem connecting socket to [ 375.368191] 27.0.0.1 14:46:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0xa00]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="397005", 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:46:53 executing program 4: fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x5) [ 375.494498] irq bypass consumer (token 00000000d52e8874) registration fails: -16 14:46:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\b', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 375.556221] irq bypass consumer (token 00000000fbb742c0) registration fails: -16 [ 375.684458] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075d) [ 375.691681] FAT-fs (loop6): Filesystem has been set read-only [ 375.697812] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075d) [ 375.718493] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 375.725666] FAT-fs (loop1): Filesystem has been set read-only [ 375.732543] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 375.737364] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 375.743095] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000020) 14:46:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x7a, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) 14:46:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0xe00000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:54 executing program 4: r0 = socket$inet6(0xa, 0x2000000805, 0x2fffd) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@mcast1, 0x800, 0x0, 0xff, 0x1}, 0x20) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x7ff, 0x8000) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000100)) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000040)=0xffffffffff7ffc01, 0x100000097) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x807}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f00000002c0)=[{0x18, 0x29, 0xb, "01"}], 0x18}}], 0x1, 0x0) signalfd(r0, &(0x7f0000000080)={0x1ff}, 0x8) 14:46:54 executing program 7: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x3, @mcast2, 0x80}, @in6={0xa, 0x4e23, 0xfffffffffffffff8, @local, 0x10001}], 0x38) read(r2, &(0x7f0000000000)=""/105, 0x69) read(r0, &(0x7f0000000080)=""/150, 0x96) unshare(0x2000400) signalfd(r0, &(0x7f0000000040), 0x8) 14:46:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:46:54 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xffffffff00000000, 0x1000000020000) 14:46:54 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xc000, 0x1000000020000) [ 376.077479] binder_alloc: binder_alloc_mmap_handler: 29455 20001000-20004000 already mapped failed -16 [ 376.087056] binder: BINDER_SET_CONTEXT_MGR already set [ 376.092365] binder: 29455:29523 ioctl 40046207 0 returned -16 [ 376.092527] binder_alloc: 29455: binder_alloc_buf, no vma [ 376.103851] binder: 29455:29524 transaction failed 29189/-3, size 0-0 line 2969 [ 376.111882] binder: undelivered TRANSACTION_ERROR: 29189 [ 376.117437] binder: undelivered transaction 421, process died. [ 376.141718] binder: undelivered TRANSACTION_COMPLETE 14:46:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6, 0x0, 0x0, 0x0, 0xf000000}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:46:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x7000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:54 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xf5ffffff00000000, 0x1000000020000) [ 376.165160] 9pnet: p9_fd_create_tcp (29540): problem connecting socket to [ 376.165160] 27.0.0.1 14:46:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:46:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0xe000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 376.331796] 9pnet: p9_fd_create_tcp (29567): problem connecting socket to [ 376.331796] 27.0.0.1 14:46:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0xfec0]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 376.437972] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 376.445167] FAT-fs (loop1): Filesystem has been set read-only [ 376.474576] 9pnet: p9_fd_create_tcp (29577): problem connecting socket to [ 376.474576] 27.0.0.1 14:46:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x700]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 376.487150] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075d) [ 376.488956] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 376.494327] FAT-fs (loop6): Filesystem has been set read-only [ 376.513869] 9pnet: p9_fd_create_tcp (29577): problem connecting socket to [ 376.513869] 27.0.0.1 14:46:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="397010", 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 376.547172] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000075d) [ 376.554372] FAT-fs (loop4): Filesystem has been set read-only [ 376.575016] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075d) [ 376.588896] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000075d) 14:46:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x40106308}], 0x1, 0x0, &(0x7f0000000140)="06"}) 14:46:55 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x1f4]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:55 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x4000, 0x1000000020000) [ 376.942265] binder_alloc: binder_alloc_mmap_handler: 29526 20001000-20004000 already mapped failed -16 [ 376.952096] binder: BINDER_SET_CONTEXT_MGR already set [ 376.957847] binder_alloc: 29526: binder_alloc_buf, no vma [ 376.958057] binder: 29526:29596 ioctl 40046207 0 returned -16 [ 376.963479] binder: 29526:29597 transaction failed 29189/-3, size 0-0 line 2969 [ 376.977110] binder: undelivered TRANSACTION_ERROR: 29189 [ 376.982716] binder: undelivered transaction 424, process died. 14:46:55 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x460, 0x1000000020000) 14:46:55 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x400000008000007, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000080)=""/7) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000019c0)={&(0x7f0000001840), 0xc, &(0x7f0000001980)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x44}}, 0x0) 14:46:55 executing program 7: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x3, @mcast2, 0x80}, @in6={0xa, 0x4e23, 0xfffffffffffffff8, @local, 0x10001}], 0x38) read(r2, &(0x7f0000000000)=""/105, 0x69) read(r0, &(0x7f0000000080)=""/150, 0x96) unshare(0x2000400) signalfd(r0, &(0x7f0000000040), 0x8) 14:46:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\a', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 377.004187] binder: undelivered TRANSACTION_COMPLETE [ 377.010532] binder: 29600:29603 BC_INCREFS_DONE node 426 has no pending increfs request 14:46:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6, 0x0, 0x0, 0x0, 0x400300}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:46:55 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x7]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 377.059206] netlink: 'syz-executor4': attribute type 1 has an invalid length. 14:46:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:46:55 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x2000000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 377.122569] netlink: 'syz-executor4': attribute type 1 has an invalid length. 14:46:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) unshare(0x2000400) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, r2}) mq_open(&(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x1, &(0x7f0000000080)={0xfffffffffffffffc, 0x6, 0x20, 0x1, 0x7a2, 0x0, 0x0, 0x3}) [ 377.176251] 9pnet: p9_fd_create_tcp (29639): problem connecting socket to [ 377.176251] 27.0.0.1 14:46:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="3970c0", 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:46:55 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0xfe800000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000100)={0x7, 0x1b, 0x7}, 0x7) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000080)={0x20000, 0x0, [0x1f, 0x1, 0x2, 0x6, 0x7444, 0x81, 0x7fffffff, 0x98]}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f000020d000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 14:46:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="39700f", 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 377.351812] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 377.359016] FAT-fs (loop1): Filesystem has been set read-only [ 377.388826] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 377.416220] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000ff0) [ 377.429418] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 377.445729] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075d) [ 377.452892] FAT-fs (loop6): Filesystem has been set read-only [ 377.463405] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075d) [ 377.488687] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 377.497263] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000020) 14:46:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x40046302}], 0x1, 0x0, &(0x7f0000000140)="06"}) 14:46:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x3000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1d}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x8e, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa3e}], &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0xfff7fffffffffffc, 0x0, [0x5f], 0x0, 0x7}, 0x48) 14:46:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x4, 0x1000000020000) 14:46:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 377.803641] binder_alloc: binder_alloc_mmap_handler: 29600 20001000-20004000 already mapped failed -16 [ 377.813265] binder: BINDER_SET_CONTEXT_MGR already set [ 377.818616] binder: 29600:29675 ioctl 40046207 0 returned -16 [ 377.823169] binder_alloc: 29600: binder_alloc_buf, no vma [ 377.830110] binder: 29600:29676 transaction failed 29189/-3, size 0-0 line 2969 [ 377.837905] binder: 29600:29675 BC_INCREFS_DONE u0000000000000000 no match [ 377.838210] binder: undelivered TRANSACTION_ERROR: 29189 14:46:56 executing program 7: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x3, @mcast2, 0x80}, @in6={0xa, 0x4e23, 0xfffffffffffffff8, @local, 0x10001}], 0x38) read(r2, &(0x7f0000000000)=""/105, 0x69) read(r0, &(0x7f0000000080)=""/150, 0x96) unshare(0x2000400) signalfd(r0, &(0x7f0000000040), 0x8) 14:46:56 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xf500000000000000, 0x1000000020000) [ 377.865537] binder: undelivered transaction 427, process died. [ 377.878462] binder: BC_ACQUIRE_RESULT not supported [ 377.882820] 9pnet: p9_fd_create_tcp (29683): problem connecting socket to [ 377.882820] 27.0.0.1 [ 377.890837] binder: 29679:29686 ioctl c0306201 20000040 returned -22 [ 377.900484] binder: undelivered TRANSACTION_COMPLETE [ 377.906930] binder_alloc: binder_alloc_mmap_handler: 29679 20001000-20004000 already mapped failed -16 [ 377.918368] binder: BINDER_SET_CONTEXT_MGR already set [ 377.924008] binder: 29679:29686 ioctl 40046207 0 returned -16 [ 377.930341] binder_alloc: 29679: binder_alloc_buf, no vma [ 377.936002] binder: 29679:29691 transaction failed 29189/-3, size 0-0 line 2969 [ 377.944164] binder: BC_ACQUIRE_RESULT not supported [ 377.944353] binder: undelivered TRANSACTION_ERROR: 29189 [ 377.949438] binder: 29679:29686 ioctl c0306201 20000040 returned -22 14:46:56 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6, 0x0, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:46:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x4008630a}], 0x1, 0x0, &(0x7f0000000140)="06"}) 14:46:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0xbb8]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x90000, 0x0) fadvise64(r0, 0x0, 0x5, 0x5) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x1000000, &(0x7f0000000400)="67400f35c74424009b000000c74424029dace042ff1c2466470f5b84b009f00000660f38827e062e67cd0066b81f010f00d0660fef9a0400000066b8f9008ed03636660f382a51f6c461a9fb91f3000000", 0x51}], 0x1, 0x0, &(0x7f0000000180), 0x0) [ 377.986050] binder: undelivered transaction 430, process died. [ 377.992747] binder: undelivered TRANSACTION_COMPLETE 14:46:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 378.029344] 9pnet: p9_fd_create_tcp (29683): problem connecting socket to [ 378.029344] 27.0.0.1 [ 378.046629] binder: BC_ATTEMPT_ACQUIRE not supported [ 378.057038] binder: 29713:29714 ioctl c0306201 20000040 returned -22 [ 378.068070] binder_alloc: binder_alloc_mmap_handler: 29713 20001000-20004000 already mapped failed -16 14:46:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x400c630e}], 0x1, 0x0, &(0x7f0000000140)="06"}) [ 378.078404] binder: BINDER_SET_CONTEXT_MGR already set [ 378.083879] binder_alloc: 29713: binder_alloc_buf, no vma [ 378.084008] binder: 29713:29714 ioctl 40046207 0 returned -16 [ 378.089553] binder: 29713:29721 transaction failed 29189/-3, size 0-0 line 2969 [ 378.104270] binder: undelivered TRANSACTION_ERROR: 29189 [ 378.110119] binder: undelivered transaction 433, process died. [ 378.112323] QAT: Invalid ioctl 14:46:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x400000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 378.125812] binder: undelivered TRANSACTION_COMPLETE [ 378.137657] 9pnet: p9_fd_create_tcp (29725): problem connecting socket to [ 378.137657] 27.0.0.1 [ 378.150317] QAT: Invalid ioctl [ 378.153867] QAT: Invalid ioctl [ 378.159751] binder: 29729:29731 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 378.163813] QAT: Invalid ioctl [ 378.170491] QAT: Invalid ioctl [ 378.173868] QAT: Invalid ioctl 14:46:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:46:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x58efff7f]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 378.177572] QAT: Invalid ioctl [ 378.184218] QAT: Invalid ioctl [ 378.192189] QAT: Invalid ioctl [ 378.195706] QAT: Invalid ioctl [ 378.201749] QAT: Invalid ioctl [ 378.209409] QAT: Invalid ioctl [ 378.216751] QAT: Invalid ioctl [ 378.220093] QAT: Invalid ioctl 14:46:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0xfc00]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="397010", 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 378.227677] QAT: Invalid ioctl [ 378.232281] 9pnet: p9_fd_create_tcp (29737): problem connecting socket to [ 378.232281] 27.0.0.1 [ 378.234388] QAT: Invalid ioctl [ 378.250526] QAT: Invalid ioctl [ 378.253961] QAT: Invalid ioctl [ 378.257372] QAT: Invalid ioctl [ 378.260691] QAT: Invalid ioctl [ 378.264557] QAT: Invalid ioctl [ 378.271266] QAT: Invalid ioctl [ 378.276635] QAT: Invalid ioctl 14:46:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0xff00]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 378.284348] QAT: Invalid ioctl [ 378.294137] QAT: Invalid ioctl [ 378.310146] QAT: Invalid ioctl [ 378.313401] QAT: Invalid ioctl [ 378.321397] QAT: Invalid ioctl [ 378.331640] QAT: Invalid ioctl 14:46:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0xe00]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000380)=""/4096) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [0x4b564d02, 0xfffffffffffffffe]}) 14:46:56 executing program 7: r0 = socket$inet(0x2, 0x80001, 0x0) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, 0x0) 14:46:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x2, 0x1000000020000) 14:46:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = memfd_create(&(0x7f00000000c0)='/dev/zero\x00', 0x6) fchmod(r1, 0x0) mq_notify(r0, &(0x7f0000000080)={0x0, 0x36, 0x0, @thr={&(0x7f0000000600)="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", &(0x7f0000000040)="72d2990fdc8d9f8397"}}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x101800, 0x0) 14:46:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\t', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:46:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x300000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r1 = dup2(r0, r0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000080)=""/9) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x400448cb, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000200)=""/161) syz_extract_tcp_res(&(0x7f0000000340), 0x8, 0x20000009fb) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f00000000c0)={0x9, 0x417, 0x800, 0x8, 0x40, 0x4}) 14:46:57 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6, 0x0, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) [ 378.955307] binder_alloc: binder_alloc_mmap_handler: 29729 20001000-20004000 already mapped failed -16 [ 378.966335] binder_alloc: 29729: binder_alloc_buf, no vma [ 378.966469] binder: BINDER_SET_CONTEXT_MGR already set [ 378.971947] binder: 29729:29798 transaction failed 29189/-3, size 0-0 line 2969 [ 378.977511] binder: 29729:29797 ioctl 40046207 0 returned -16 [ 378.985829] binder: undelivered TRANSACTION_ERROR: 29189 14:46:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f0000000140)="06"}) 14:46:57 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x3000000000000000, 0x1000000020000) 14:46:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0xa00000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:57 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f54fa8)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x375) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f00000000c0)=0x8) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)="1599d7c89341195bf8886a94ac65ec083d08fac15d2be896a077a0ab737bfe249cfd6c695d4b9a405950eef77f1a8c93fbba8ad8fa57e2e586729d8e32e003e151ce7ce3507b053afb84bbc5", 0x4c) sendmmsg$alg(r2, &(0x7f0000004bc0)=[{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000003b40)="db", 0x1}], 0x1}], 0x1, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000100)={0x30, 0x2, 0x1, 0x8, 0x8, 0x5, 0x401, 0x101}, 0x0) 14:46:57 executing program 4: r0 = inotify_init1(0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='vlan0\x00', 0x1}) r2 = fcntl$getown(r0, 0x9) fcntl$setown(r0, 0x8, r2) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = semget(0x2, 0x3, 0x40) semctl$GETALL(r5, 0x0, 0xd, &(0x7f00000001c0)=""/4096) r6 = syz_open_dev$usbmon(&(0x7f00000011c0)='/dev/usbmon#\x00', 0x4, 0x80) ioctl$ASHMEM_GET_PIN_STATUS(r6, 0x7709, 0x0) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) ptrace$setopts(0x4206, r3, 0x0, 0x0) waitid(0x2, r3, 0x0, 0x80000009, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000180)) [ 379.006733] binder: undelivered transaction 436, process died. [ 379.020913] binder: undelivered TRANSACTION_COMPLETE [ 379.034459] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 379.041643] FAT-fs (loop1): Filesystem has been set read-only [ 379.049340] binder: 29805:29808 got reply transaction with no transaction stack 14:46:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0xfffffffe]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:57 executing program 7: r0 = dup(0xffffffffffffff9c) accept4$packet(0xffffffffffffff9c, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xa, &(0x7f0000000140)=@raw=[@call={0x85, 0x0, 0x0, 0x1e}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, @map={0x18, 0x6, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}], &(0x7f0000000240)='GPL\x00', 0xffff000000000000, 0x45, &(0x7f0000000280)=""/69, 0x41f00, 0x1, [], r1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="7b04000000000000616100000000000061620000000000008510000001000000953800000000000000bf1000009d75bbea49c70000000055000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair(0xb, 0x80800, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f00000000c0), 0x4) 14:46:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x800, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2d, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) [ 379.056891] binder: 29805:29808 transaction failed 29201/-71, size 0-0 line 2761 [ 379.071227] binder_alloc: binder_alloc_mmap_handler: 29805 20001000-20004000 already mapped failed -16 [ 379.088546] binder: BINDER_SET_CONTEXT_MGR already set [ 379.094260] binder: 29805:29808 ioctl 40046207 0 returned -16 [ 379.100501] binder_alloc: 29805: binder_alloc_buf, no vma 14:46:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x40086303}], 0x1, 0x0, &(0x7f0000000140)="06"}) 14:46:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 379.106099] binder: 29805:29817 transaction failed 29189/-3, size 0-0 line 2969 [ 379.114058] binder: 29805:29808 got reply transaction with no transaction stack [ 379.114253] binder: undelivered transaction 439, process died. [ 379.121540] binder: 29805:29808 transaction failed 29201/-71, size 0-0 line 2761 [ 379.159460] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 379.169840] binder: 29821:29822 BC_FREE_BUFFER u0000000000000000 no match [ 379.189740] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000ff0) [ 379.201103] 9pnet: p9_fd_create_tcp (29825): problem connecting socket to [ 379.201103] 27.0.0.1 [ 379.211405] binder: undelivered TRANSACTION_ERROR: 29189 [ 379.216535] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000202) [ 379.241628] binder: undelivered TRANSACTION_COMPLETE 14:46:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000001cc0), 0x3, 0x0, &(0x7f0000001540)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000016060002000000ff0000fff600"], 0x14}}, 0x0) 14:46:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x4ec]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:46:57 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) flock(r0, 0xfffffffffffffffb) r2 = epoll_create1(0x0) flock(r2, 0x1) flock(r1, 0x5) flock(r1, 0x8) 14:46:57 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xe00, 0x1000000020000) [ 379.383095] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 379.391345] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 379.407250] FAT-fs (loop1): error, clusters badly computed (8 != 14) [ 379.414603] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 379.422887] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 379.472559] 9pnet: p9_fd_create_tcp (29850): problem connecting socket to [ 379.472559] 27.0.0.1 14:46:57 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x80000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) r4 = fcntl$getown(r3, 0x9) sched_getaffinity(r4, 0x8, &(0x7f00000000c0)) r5 = dup3(r0, r3, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000000)) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000100)=""/148, &(0x7f00000001c0)=0x94) dup3(r2, r1, 0x0) [ 379.631100] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 379.638282] FAT-fs (loop1): Filesystem has been set read-only [ 379.644616] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 379.658648] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 379.667224] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 14:46:57 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6, 0x0, 0x0, 0x0, 0xf}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) [ 379.753458] IPVS: length: 148 != 24 [ 379.759136] IPVS: length: 148 != 24 14:46:58 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x100000000000000, 0x1000000020000) 14:46:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0xfc]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:46:58 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xaf00, 0x1000000020000) 14:46:58 executing program 7: r0 = socket$inet(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000017fdc)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000080)="2400000002031f001cfffd946fa2830020200a000900020002e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) r2 = dup2(r1, r0) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/212, 0xd4}, {&(0x7f0000000380)=""/29, 0x1d}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x3, &(0x7f0000000400)=""/155, 0x9b, 0x1}, 0x5}], 0x1, 0x40010021, 0x0) r4 = geteuid() sendmsg$nl_xfrm(r2, &(0x7f0000001700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000500)=@report={0x17c, 0x20, 0x1, 0x70bd28, 0x25dfdbfe, {0x7e, {@in=@rand_addr=0x80000001, @in6=@mcast1, 0x4e23, 0x0, 0x4e20, 0x7, 0x0, 0x80, 0x20, 0xc, r3, r4}}, [@srcaddr={0x14, 0xd, @in=@local}, @algo_crypt={0x98, 0x2, {{'ctr-blowfish-asm\x00'}, 0x270, "ee5a8a8c622a490c170d303260a5d60510a90f067fe537887d0c513440953895242828f062804e1c07850fe12b00ea7a83a88afcd2340b7f4d8752cb496f2c67a9a7f6b0dc69e742c418cacb169b"}}, @tfcpad={0x8, 0x16, 0xff}, @sec_ctx={0x58, 0x8, {0x53, 0x8, 0x1, 0x9, 0x4b, "2126b18365533891c26cd321aea0a3ec3036e93eb31dfd7a1f028a8f31d1d4188e06adc2b5c193302558b3793530da32e31fa11501ad8b20e805e8fafae3b25bebfb564ee01d76b6334e45"}}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd28, 0x70bd26, 0x70bd29, 0x70bd26, 0x1f, [0x8, 0x81]}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x2000c045}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000000c0)={0x5, 0x1, 'client0\x00', 0xffffffff80000004, "157c09befe557daf", "a5826110406d60dffd39c2a4790c0f1fa88e16f99ab89ea140c36596171a3371", 0x1, 0x8001}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) 14:46:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x1fffff]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 379.851841] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 379.868052] 9pnet: p9_fd_create_tcp (29879): problem connecting socket to [ 379.868052] 27.0.0.1 [ 379.883176] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 14:46:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 379.919421] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 379.945253] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 379.962621] binder_alloc: binder_alloc_mmap_handler: 29821 20001000-20004000 already mapped failed -16 [ 379.972957] binder: BINDER_SET_CONTEXT_MGR already set [ 379.978662] binder: 29821:29903 ioctl 40046207 0 returned -16 [ 379.985974] binder_alloc: 29821: binder_alloc_buf, no vma [ 379.991596] binder: 29821:29904 transaction failed 29189/-3, size 0-0 line 2969 [ 379.998270] binder: undelivered TRANSACTION_COMPLETE [ 380.013988] binder: undelivered transaction 444, process died. 14:46:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x40086310}], 0x1, 0x0, &(0x7f0000000140)="06"}) 14:46:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x7ffffffff000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 380.015224] 9pnet: p9_fd_create_tcp (29907): problem connecting socket to [ 380.015224] 27.0.0.1 [ 380.037885] binder: undelivered TRANSACTION_ERROR: 29189 [ 380.045008] binder: 29909:29910 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 380.170550] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 380.177754] FAT-fs (loop1): Filesystem has been set read-only [ 380.184054] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 380.198653] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 380.207158] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 14:46:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:46:58 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfff, 0x801) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=0x0, &(0x7f0000000140)=0x4) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)={r2, 0x7, 0xe6, "951aaaa07f020eb75389cc0b064a2e1bf13e103b717b6993bc9915ad2f3b8ac0d53b489a8ea8bbfdfc1b4ee26af26db184a1dc367544fc9790eda3562fc3233def512d6c323193d21c8a8a88bc1f2b66cd9fcb31ff27d252ca4f3e96a7b74cd6bee04d49a997089cdebf892909addc8ae20abd1d2dc0b1dc44401c29cc73c0e8aed4e2d6dadbb33b43238d01f4ffe74dc56112f819a371c85486b3f5f020e0db4c4a6879e6212f0560a5dace87cba87396e3e13c282f16524ea264e8fcb252bc6aa0fbfe22533adbaa128e3e822c147de6aaa03d177df8af24b231fa0fbcc5dc63a73eb31747"}, 0xee) r3 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet_sctp(r3, &(0x7f0000001440)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000011c0)=[{&(0x7f0000001140)="7f", 0x1}], 0x1, &(0x7f0000001380)=[@dstaddrv6={0x20, 0x84, 0x8, @loopback}], 0x20}, 0x0) 14:46:58 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000040)=0xffff, 0x4) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x8, 0x80) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000200)="05ab883376bdee58d14843dd3993859b0944e713af14e434690108ac1265cc57685be97f4553663dc968d5a5f087580f0350b76d2c2ede728351ca8e252722b4ea85e1e0a8dab5d77d958c3697c0f425c104e4b02dfdc1987f1564aa56240aa637511749d3ffea996dd4022790196153e2c28dc9b6815c882f3b60e82b076feab299b351c9ec81c83a3739f6005e76d7be7466aaefef74a245b8dc1c2c25fdee24c08fdccef4b8f4f2b7dd67fe7ad0ddf8daa40b6b4a7b502064a3c1541a944f0d186698d18a22eacd39e9e9738bb319b15194d67e17d20b65b2c446af4575", 0xdf) accept4$unix(r1, &(0x7f00000000c0)=@abs, &(0x7f0000937000)=0x6e, 0x0) 14:46:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0xf401000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:58 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xa900000000000000, 0x1000000020000) [ 380.233126] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075d) [ 380.240361] FAT-fs (loop6): Filesystem has been set read-only [ 380.248418] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075d) [ 380.269795] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 380.299047] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000020) [ 380.303272] 9pnet: p9_fd_create_tcp (29932): problem connecting socket to [ 380.303272] 27.0.0.1 14:46:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6, 0x0, 0x0, 0x0, 0xa00000000000000}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:46:58 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/net/pfkey\x00', 0x40a7f9, 0x0) r0 = memfd_create(&(0x7f0000000780)='keyring\x00', 0xdae97868ddec1f28) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000007c0)=[@in6={0xa, 0x4e20, 0xa38, @mcast1, 0x3}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, @in6={0xa, 0x4e20, 0x24d, @mcast1, 0xfcad}, @in6={0xa, 0x4e22, 0x1d2, @remote, 0x7f}, @in6={0xa, 0x4e23, 0x7ff, @local, 0x7ff}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e22, 0x2, @loopback}, @in6={0xa, 0x4e20, 0x9, @mcast1, 0x3ff}, @in6={0xa, 0x4e22, 0x7fffffff, @dev={0xfe, 0x80, [], 0x1a}}, @in={0x2, 0x4e24, @loopback}], 0xf4) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote, 0x3}, 0x80, &(0x7f0000000100)}, 0x40) syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000100)="9b6aeb2729fe05e9cf6cd1c515705420de0a76cf090964044ed0713e", 0x1c, 0x9}, {&(0x7f0000000180)="074682d96b299c27ea82022e0f177e9596e73cca5cbc8a60b8a24970ee68a065680df6620ef362c37771b9caf74461215d68ea963e79ca6412df5f2cb7ee140a2cfd4edc398b53fed74e0b3db9a9c73c292cc614bed8a443ea04ba8d63d991ebba78437fc314a2ec41be5a8a019b708ff5cdd9d26e039c9bd72b883bfdead37e3e111f3712707a195ee4e724c7bcefd58894a50e8b3ccf", 0x97, 0x7}, {&(0x7f0000000240)="5c9807ff0f350c51561c24640677b867925082658b54a7f8a4c94dcece1182460efaf4c34085070fd007b8a44e3d7bcaa3ab090d418ca5e93f9f5db7848ce4443bf25844e3da2875f9af5ac1c87edbfc83fc281824a3cd3b8515608714b60df56d0221ccd95c7828c464f3f142592e3652bbc05d6cdd9662dd9c941798827bcc7e9c43a4a38805aa069f26ca97a8f5f921df5e53c1de3ea5eb2df649137bfeb20bf4760591d2eb9feb8b2f306948bb15363467716ac7b6b1de7cda56e7515bf526d5f61a9caf17df4dfecc659eef406f43826ba091f5d90bf9ab62e1667f5e6fb1c86e508d4dee37195ac0a57e", 0xed, 0x7}, {&(0x7f0000000340)="69d87ef43a3900947ab2c6aab19072703111c3e16f7368d652168840a43e268589c84a6c4547577b9b3cc4eb1e128140f607d00c8415d0ee4bbdf2d21122ddefadb8333ce577cf818982461720d50ff6855d61f149ab93b9f10791a54adc0c7c7b2fb014115e6d3b0ddb7ad070d20214fa238a569181345bd5faacdd6f1828a445af9578b40f2b81386da1e191e1e5414a95eb5810b5e441cc0c303f4a0b9c670c08c03b24bd2f8a02cd884711948cca867cbfe4277558ffbb5f84d01e90166b460e9a36f0edbbfc6ecbc2052a7bce3baef3", 0xd2, 0xbb}, {&(0x7f0000000440)="16607373bc6cdd57670cd469adb66eaf0fdda810a9eb7897f303cc6ebd23d49b3177a2d1d225d73a248b68027d6ca005ab1ac96751ead0b8b4b7808e37d8e286f07f5379cd9c9cf72681ba13b753db0da3ec1a352ae0fecc47", 0x59, 0x2}], 0x2040044, &(0x7f0000000540)='mime_type\x00') 14:46:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0xffff1f00]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = dup3(r1, r1, 0x80000) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000240)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = epoll_create1(0x0) r5 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x54db, 0xa00) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x488000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="140725bd7000fedbdf250300000044000300140002006272696467655f736c6176655f30000008000500ac1414aa14000604fe80000000000000000000000000001d080007004e20000008000500000000001c0001000800050000000000080001000a000000080004004e210000603c49e38deb8446c8752073130dfc48a458fb6519a98fe277141d19312ffd851efa4b2890ec0d4dfc83cea49b21c9d9e4aa7b0011188672f82aa81da8e68abf7f492b211ce2e9394a752c4af33a746c45e0d9632f7c3d12ab3360213a3bcbd2ecfdc696504561edbf81c890814648c1e6733ed4e2f26b88cee98b863a1ff27b5ec8b1"], 0x74}, 0x1, 0x0, 0x0, 0x20000005}, 0x90) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000cd8ff4)) epoll_wait(r4, &(0x7f0000000040)=[{}], 0x1, 0x0) splice(r2, &(0x7f00000002c0)=0xc, r3, &(0x7f0000000300), 0x3f, 0x8) epoll_wait(r4, &(0x7f00000000c0)=[{}], 0x15f60b4, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 14:46:58 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x2f00, 0x1000000020000) 14:46:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9pL', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:46:58 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xae000000, 0x1000000020000) [ 380.496089] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 380.503256] FAT-fs (loop1): Filesystem has been set read-only [ 380.509401] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 380.522551] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 380.530970] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 14:46:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x6]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe(&(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000580)="db7d9d98abdac050dbb165c5f892da0000000000000100a98ada3c2786d192e39a5bf4bdae2a301e1fed7c77c492d0ac6fd65eb69c8c51f4796c3bfd0f47f82066ba0db87499028de652e117b132f0a0799aeeeb3c20387db699ca4fb49c6300100000000000004d3fa158e46f7c6f4ecd0000000000000000000000000000006119ea2cbe9cbdd2f69c0eebf99b9cd6ff1f3593468f4cfe6671167451a961afb4dbac34c00694fc7a374ca1c29256b43c459e51", 0xb4) r2 = socket$inet6(0xa, 0x100000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendto$inet6(r2, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x0) write$P9_RREADLINK(r1, &(0x7f0000000480)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) getsockopt$inet6_udp_int(r0, 0x11, 0x6f, &(0x7f0000000080), &(0x7f0000000100)=0x4) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x8, 0x212200) r3 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0xa040) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f00000002c0)={[], 0x1, 0x1000, 0x10000, 0x0, 0x2, 0x1000, 0x6000, [], 0x9}) [ 380.805666] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075d) [ 380.812840] FAT-fs (loop6): Filesystem has been set read-only [ 380.818867] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075d) [ 380.832350] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 380.840817] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000020) 14:46:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x40106309}], 0x1, 0x0, &(0x7f0000000140)="06"}) 14:46:59 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x34000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:46:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="3970f6", 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:46:59 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x3, 0x1000000020000) 14:46:59 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000040)={0x101, 0x6, 0x7, 0x80}) write$P9_RSETATTR(r0, &(0x7f0000000080)={0x7, 0x1b, 0x2}, 0x7) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f00000000c0)={0x6, 0x9, 0x7, 0x3}) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000100)) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000180)={0x0, 0x800, 0x4, &(0x7f0000000140)=0x200}) ioctl$RTC_PIE_OFF(r0, 0x7006) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x9]}, 0x6) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f0000000300)=[r2]) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x4) bind$vsock_dgram(r3, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x40200, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000400)) sendto$inet(r4, &(0x7f0000000440)="0644f12bc2dad84abedb62f1b926d1df52c3a899c7d60da999348c8bf0c2117339932789a2671daccd48271b3482571a14a398def7a33062e49546806662df4be4c9069f59f5c2cae69c7b36ee4abc1c0e8bc3fb37808f2681e8a6b47235db0557f52015316ebfa7dd987a640b011f6509b2f7e512fab99f9fe542d49001cde2aec6c39d1e0f214ba9e80442abfb0f12fe6a82f8fe0d73ecdb9ace89", 0x9c, 0x24048804, &(0x7f0000000500)={0x2, 0x4e21}, 0x10) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000540)={'ah\x00'}, &(0x7f0000000580)=0x1e) getpeername$packet(r3, &(0x7f0000000700)={0x11, 0x0, 0x0}, &(0x7f0000000740)=0x14) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000780)={r5, 0x3, 0x5, 0xa5, 0x4, 0x8, 0xffffffffffff0ef1}) syz_mount_image$jfs(&(0x7f00000007c0)='jfs\x00', &(0x7f0000000800)='./file0\x00', 0x6, 0x5, &(0x7f0000000b40)=[{&(0x7f0000000840)="4cf67d4e25308cb69ba6dd71884d7656de3c15650b7b30f0db83014a36c782ff485824115638f3ee12ebe0cd55dfbae4541cecc15880edf9e1891f7fe249c0dbb243e07d2776efbad43d621d1df792ae0dd2b105762bb45cc1babd0d4fafeeb5b562ce19e55e2ca6188eb61ad731e4962258811ff4651448e259a1afa284fbe83aff5b40c530b2a35c0adb6726085f0c4cff385e39f74da081c87b2c7268e3a8a728eeeeeb00660ea514095172f25570d80476eddcb0c8d60e74933dd7316e3a4e72d4a0d846558f", 0xc8, 0x4}, {&(0x7f0000000940)="22058debd3122e2078d34330702c1f450eac8376e5e6ad42e44bfe4edd38bc577b9f4492a17eea64aee6950776ae18b265574217ff61893b1911d4b792dbca98d72ed2c0adcfe76784a91f7e7c7cf0578451eb19ca4af47e2e", 0x59, 0x2}, {&(0x7f00000009c0)="eb5cdd9bae64675797bf535aeb45e9a2a97f55", 0x13, 0x6}, {&(0x7f0000000a00)="42c8d12b48fbe2d303e6ad9296a426c13dc6c77ed796aaa9e754bf800b452d00cd1c796e8705356ae4710ccf7772b2c356cfd67a724c60579746756d3d4b2693be0a0aac3f3d2ad87345a4560de603c1683233838bc30edb7a94e852562e7e4f29bb5f29a614a7d674e4c70d32a1e5d11260c844b4ee944682563ebbb23cb079cfd8f8", 0x83, 0x378}, {&(0x7f0000000ac0)="703f22d1456302f31e2d92d69e069852c879020cf5a649994ef2da75d94840479e8b1b7bc835edab85eb66219dade1d5962bca7941b664f672153d2398649b9d1ece6a383a1c65bf3856446c7f054a7189bc8415f71967e146c297e075892d2a", 0x60, 0x70}], 0x4, &(0x7f0000000bc0)={[{@noquota='noquota'}, {@nodiscard='nodiscard'}, {@discard='discard'}, {@gid={'gid', 0x3d, r2}}, {@nointegrity='nointegrity'}, {@gid={'gid', 0x3d, r2}}]}) connect$pptp(r3, &(0x7f0000000c40)={0x18, 0x2, {0x1, @broadcast}}, 0x1e) getsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) syz_open_dev$sg(&(0x7f0000000d00)='/dev/sg#\x00', 0x0, 0x400000) finit_module(r1, &(0x7f0000000d40)='\x00', 0x2) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000d80)={0x0, 0x2}, &(0x7f0000000dc0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000e00)={0x5, 0x8000, 0x8001, 0x2, r6}, 0x10) 14:46:59 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x480, 0x1000000020000) [ 380.846225] binder_alloc: binder_alloc_mmap_handler: 29909 20001000-20004000 already mapped failed -16 [ 380.857611] binder: BINDER_SET_CONTEXT_MGR already set [ 380.862962] binder: 29909:29999 ioctl 40046207 0 returned -16 [ 380.862982] binder_alloc: 29909: binder_alloc_buf, no vma [ 380.874422] binder: 29909:30000 transaction failed 29189/-3, size 0-0 line 2969 [ 380.882082] binder: 29909:29999 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 380.896102] binder: undelivered TRANSACTION_ERROR: 29189 14:46:59 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0xf0ff7f00000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 380.925696] binder: undelivered transaction 447, process died. [ 380.932558] binder: 30009:30011 BC_ACQUIRE_DONE node 449 has no pending acquire request [ 380.961342] binder: undelivered TRANSACTION_COMPLETE [ 381.128525] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 381.135779] FAT-fs (loop1): Filesystem has been set read-only [ 381.142353] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 381.150183] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 381.157480] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 381.165077] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 381.172366] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075d) [ 381.206088] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 381.214303] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 381.232010] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 381.240256] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 16) [ 381.241686] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075d) [ 381.254678] FAT-fs (loop6): Filesystem has been set read-only [ 381.262656] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075d) 14:46:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:46:59 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000140)={0x2, 0x0, [{0x347, 0x0, 0x100}, {0x40000bff, 0x0, 0x100000001}]}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200040, 0x0) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000100)={0x0, 0xf000, 0x78ab, 0x101, 0x7}) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f00000000c0)={0x2, 0x0, [{}, {}]}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000400008fe7bb5cd4e344cd0002800000720a00ff"], &(0x7f0000000080)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0xffffffcd}]}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 14:46:59 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6, 0x0, 0x0, 0x0, 0x1100000000000000}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) [ 381.410787] 9pnet: p9_fd_create_tcp (30044): problem connecting socket to [ 381.410787] 27.0.0.1 [ 381.719596] binder_alloc: binder_alloc_mmap_handler: 30009 20001000-20004000 already mapped failed -16 [ 381.729187] binder: BINDER_SET_CONTEXT_MGR already set [ 381.734515] binder: 30009:30055 ioctl 40046207 0 returned -16 [ 381.734815] binder_alloc: 30009: binder_alloc_buf, no vma [ 381.745995] binder: 30009:30056 transaction failed 29189/-3, size 0-0 line 2969 [ 381.753816] binder: undelivered TRANSACTION_ERROR: 29189 [ 381.759316] binder: undelivered transaction 450, process died. [ 381.765348] binder: undelivered TRANSACTION_COMPLETE 14:47:01 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000bc2000)="81", 0x1, 0x0, &(0x7f0000606fe4)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 14:47:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x18000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:01 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xe, 0x1000000020000) 14:47:01 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x9000000, 0x1000000020000) 14:47:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:01 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x400000000000, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000400}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)={0x288, 0x9, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {0x7}, [@nested={0x128, 0xf, [@typed={0x8, 0x36, @ipv4}, @typed={0x8, 0x89, @u32=0x1}, @generic="03dd8592e0180edb5ecbdc260ff68ad161b72029fbf69ab943bb472c4b53a1f4490971de85cd264f2458fd226c61a80798f9bf09d9da56e24ea561cbbfe3b7be5312ec0b003961d0cc5e71d633997483a76d768ba5f8d807a725f9a16a20b186cb3d5cff2e519a0c0ba016d96d97cf", @generic="a3d01b5b9de251b2fde5913d6112d031639473ecab6c48aa497476642415a84747ae60c85a23c9367d26165c4d6e0a5fb99687c4d3a332d498cbe8dbe1eecd3f9e9e2c73857144b518533eea18c7addacd37af701f5a5d39ed679826fe92405fb0900bc7523380cab83501efd76b44e099477fdd1a72c4799eabb7c02df1a0152ad577e6a13491db70b606f869cc", @typed={0x14, 0x93, @ipv6=@loopback}]}, @generic="6939f0253142e26191e950d6273f839bb4da92daaf8c98dbfeae6e7326e7aaa7106c5367851ef088a0e3becfee9f10bcee24cbd4d1c9db8cb37f8cbf9e05ed29f7da20a321b54081d713c60165f78b945d1e4d9a0d2c41ace9987315783dc6a35b0aaa39ec6495295861fc848228d70c9d0323f9ea7cb5bbd02dd3c8d1d01189050a1a06c1900c093639ae5d9ee1b40976b4673b7f4de87e1e353cfc91a792c35c083f3873db0fbb07d7714a13f79a5927a6f9625f", @generic, @nested={0x94, 0x2a, [@generic="78049c3f1343c16f85556e38af4484e569b09ca7a6cb8f9593794e3ee46961e45c626452257cc655bd9d8604b35d4d25f1b3262292b33eabc7f8b3393020c46e020a51de85314255592712421a97dfb3b7f3e37279a8045b5606fc05f31ad500ea3a8661fe570b06cb0f088a5f78de3f46e03ecb1e90ebfb338108dc6517b9d0af006213f21e779814a0a6d89aa2"]}]}, 0x288}, 0x1, 0x0, 0x0, 0x8010}, 0x800) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) 14:47:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x40486312}], 0x1, 0x0, &(0x7f0000000140)="06"}) 14:47:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6, 0x0, 0x0, 0x0, 0xffffff7f}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:01 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(serpent-generic)\x00'}, 0x2e) setsockopt$ALG_SET_KEY(r1, 0x117, 0x5, &(0x7f0000000080), 0x0) 14:47:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 383.590010] binder: 30062:30065 got reply transaction with no transaction stack [ 383.597595] binder: 30062:30065 transaction failed 29201/-71, size 0-0 line 2761 [ 383.597604] 9pnet: p9_fd_create_tcp (30073): problem connecting socket to [ 383.597604] 27.0.0.1 [ 383.626447] binder_alloc: binder_alloc_mmap_handler: 30062 20001000-20004000 already mapped failed -16 14:47:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630d}], 0x1, 0x0, &(0x7f0000000140)="06"}) [ 383.642632] binder: BINDER_SET_CONTEXT_MGR already set [ 383.648020] binder: 30062:30065 ioctl 40046207 0 returned -16 [ 383.654545] binder_alloc: 30062: binder_alloc_buf, no vma [ 383.660467] binder: 30062:30080 transaction failed 29189/-3, size 0-0 line 2969 [ 383.668273] binder: undelivered transaction 453, process died. [ 383.676098] binder: undelivered TRANSACTION_ERROR: 29189 [ 383.688788] binder: undelivered TRANSACTION_COMPLETE 14:47:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getgid() ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000200007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 14:47:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x1800]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 383.721455] 9pnet: p9_fd_create_tcp (30097): problem connecting socket to [ 383.721455] 27.0.0.1 14:47:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xff000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 383.772758] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 14:47:02 executing program 4: syz_mount_image$f2fs(&(0x7f0000000100)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x8000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000400)="1020f5f20100070009000000030000000c0000000900000002000000010000000000000000480000000000000d00000024000000020000000200000002000000020000001a000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f69a9858f962610216e329cd06cbc6e64696e655f646174612c696e6c696e655f78617474725f73097abb10b8e7a3ea380fa9f5d98e76f63ce4228b49fce40e8e0b76d0da3cb93c97a8f05e04fd4c50545510128ac70da1e37cea29d107f1f749dff003cd9085c7914ea6b820444c920c4dc0dc98102cbeaf091acecae49cd35a2c2db15efc7001ef58cb109f659b32d76c4415f8eb17f820f92956696fe0944c1b658f51539517258361e04bf12349e77249cf41014ea48b9f8f478fab69192a20136884ee3accdc85260f3cfef4ca851ae08482063f19cad07f69bb"]) [ 383.859353] 9pnet: p9_fd_create_tcp (30114): problem connecting socket to [ 383.859353] 27.0.0.1 [ 383.903907] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 383.911191] FAT-fs (loop6): Filesystem has been set read-only [ 383.917620] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 383.935826] f2fs_msg: 6 callbacks suppressed [ 383.935847] F2FS-fs (loop4): Fix alignment : done, start(5120) end(19456) block(13312) [ 383.947256] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 383.948897] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 383.958240] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000020) [ 383.963545] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 383.969489] F2FS-fs (loop4): Unrecognized mount option "noi©…–&!n2œÐl¼ndine_data" or missing value [ 383.987626] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 383.994666] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 384.002139] F2FS-fs (loop4): Unrecognized mount option "noi©…–&!n2œÐl¼ndine_data" or missing value [ 384.026410] F2FS-fs (loop4): Fix alignment : done, start(5120) end(19456) block(13312) [ 384.041964] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 384.049120] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 384.489033] binder_alloc: binder_alloc_mmap_handler: 30092 20001000-20004000 already mapped failed -16 [ 384.498630] binder: BINDER_SET_CONTEXT_MGR already set [ 384.503950] binder: 30092:30138 ioctl 40046207 0 returned -16 [ 384.504307] binder_alloc: 30092: binder_alloc_buf, no vma [ 384.515436] binder: 30092:30139 transaction failed 29189/-3, size 0-0 line 2969 [ 384.523186] binder: undelivered TRANSACTION_ERROR: 29189 [ 384.528676] binder: undelivered transaction 457, process died. 14:47:02 executing program 7: dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x30, r0, 0x1000000000) 14:47:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x3e8]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9pl', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:02 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x2e000000, 0x1000000020000) 14:47:02 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x400) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x9, 0x400) read(r1, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5335, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc0105303, &(0x7f00000001c0)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) fchdir(r1) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000000480)) stat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)) fstat(0xffffffffffffffff, &(0x7f00000079c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000075c0), &(0x7f0000007540)=0xc) tkill(r2, 0x1000000000013) read(0xffffffffffffffff, &(0x7f0000000840)=""/253, 0xfd) 14:47:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6, 0x0, 0x0, 0x0, 0xa000000}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:02 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x3c0, 0x1000000020000) 14:47:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x6354}], 0x1, 0x0, &(0x7f0000000140)="06"}) [ 384.534751] binder: undelivered TRANSACTION_COMPLETE [ 384.578389] binder: 30142:30149 unknown command 25428 [ 384.583777] binder: 30142:30149 ioctl c0306201 20000040 returned -22 [ 384.592052] binder_alloc: binder_alloc_mmap_handler: 30142 20001000-20004000 already mapped failed -16 [ 384.602034] binder: BINDER_SET_CONTEXT_MGR already set [ 384.607472] binder: 30142:30149 ioctl 40046207 0 returned -16 [ 384.613574] binder_alloc: 30142: binder_alloc_buf, no vma [ 384.619184] binder: 30142:30160 transaction failed 29189/-3, size 0-0 line 2969 14:47:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x40046307}], 0x1, 0x0, &(0x7f0000000140)="06"}) [ 384.626802] binder: 30142:30149 unknown command 25428 [ 384.627039] binder: undelivered TRANSACTION_ERROR: 29189 [ 384.632211] binder: 30142:30149 ioctl c0306201 20000040 returned -22 [ 384.647828] binder: undelivered transaction 460, process died. 14:47:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xfc]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 384.668817] binder: 30174:30175 DecRefs 0 refcount change on invalid ref 0 ret -22 14:47:02 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000040)=0x10000) [ 384.725176] binder: undelivered TRANSACTION_COMPLETE 14:47:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x4]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 384.758508] 9pnet: p9_fd_create_tcp (30185): problem connecting socket to [ 384.758508] 27.0.0.1 14:47:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:03 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x5, 0x30, 0x224, 0xffff}, &(0x7f0000000200)=0x18) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000002c0)={r1, @in={{0x2, 0x4e23}}}, 0x84) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000180)={0x2}) r2 = socket$inet6(0xa, 0x80005, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$inet6(0xa, 0x805, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendto(r3, &(0x7f0000000500)='\\', 0x1, 0x0, &(0x7f00000000c0)=@generic={0xa, "ce52ad4548f98701e8b83e67eec675eb6449f442bcebff055db46786e6f45e02df804947ed942fddf5e334c1c05a832854edf4445d545ce8e51aa2389496131c0b9afbdd80c18512d377e01b68705784a7f4d886244bc9363ffedba8599ca553c3aa334f4b7caa1d2dfdf4813d6954b8ba620317cf2c77610015ceeee6a1"}, 0x80) creat(&(0x7f0000000000)='./file0\x00', 0x6) writev(r4, &(0x7f000051c000)=[{&(0x7f0000000040)="480000001400190d09004beafd0d8c560a843a0080ffe00600000000000000a2bc5603ca00000f7f89000000200012000101ff0000fa0209ff5bffff8ff600c7e5ed5e0000000009", 0x48}], 0x1) 14:47:03 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xe00000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:03 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xb800000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 384.872058] 9pnet: p9_fd_create_tcp (30196): problem connecting socket to [ 384.872058] 27.0.0.1 [ 384.910588] netlink: 48 bytes leftover after parsing attributes in process `syz-executor7'. 14:47:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:03 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = getpgid(0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x5e) read(r0, &(0x7f0000000040)=""/28, 0x161) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x3f, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000000)) r2 = dup3(r0, r0, 0x80000) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000340)={[], 0xb34c, 0x3, 0x2, 0x0, 0x5595, 0xf000, 0x2000, [], 0xa751}) [ 384.921805] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 384.928972] FAT-fs (loop6): Filesystem has been set read-only [ 384.936535] netlink: 48 bytes leftover after parsing attributes in process `syz-executor7'. [ 384.939091] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) 14:47:03 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xf0ff7f00000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 385.010135] 9pnet: p9_fd_create_tcp (30207): problem connecting socket to [ 385.010135] 27.0.0.1 [ 385.024200] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 385.037224] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000020) [ 385.090028] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) [ 385.097179] FAT-fs (loop1): Filesystem has been set read-only [ 385.103471] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) [ 385.158209] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 385.169329] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 14:47:03 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x3f00000000000000, 0x1000000020000) 14:47:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:03 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x7000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:03 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xc000000000000000, 0x1000000020000) [ 385.463776] 9pnet: p9_fd_create_tcp (30236): problem connecting socket to [ 385.463776] 27.0.0.1 [ 385.479807] binder_alloc: binder_alloc_mmap_handler: 30174 20001000-20004000 already mapped failed -16 [ 385.490678] binder: BINDER_SET_CONTEXT_MGR already set [ 385.496107] binder: 30174:30241 ioctl 40046207 0 returned -16 [ 385.502832] binder_alloc: 30174: binder_alloc_buf, no vma 14:47:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6, 0x0, 0x0, 0x0, 0x34000}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="6d6f756e74696e666f000ab987e08146733ee1641d6ec9605f374a34a2d1043aa039f301008aac00000038fe52ba127895946f88a7360fd5c352c3a978bc0908c8ed8cb8529d36d1f5ed013998e91802754bd622a2c26cdbe1f761bb8657f1f96534ef96f892ecd530b55f03317675d01f55817cc0e254de6fbc98c323c5cbbcbedc3d8e05db00") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x20000, &(0x7f0000000080)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0x4000000016, &(0x7f00000000c0)=0x5, 0x4) sendto$unix(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000000)=@abs, 0x6e) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000000900)="5d9d14a03eaa077504bc15c26513b2dcdf128511063af273b12c7c0723c32cc17264e931357f44553426a1606ea1da65837d65fdb1a89e727253735abcff91bb820c93dfa624ffc9e6fae56a7df9703334868e175c9784e117e33bf7255985d970a3189d09f11057f5455b766e9cf71ebc8da675c81d66a4ce031d8f926b8716cf686a87c7838369759d13b109670f4893fe912e6c46e18ddef4a2fe9ac8a398fe37") mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000440)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x5c, 0x0, &(0x7f00000002c0)=[@free_buffer={0x40086303, r3}, @exit_looper, @increfs, @reply={0x40406301, {0x2, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x30, 0x20, &(0x7f0000000100)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x1}, @fd={0x66642a85, 0x0, r2, 0x0, 0x3}], &(0x7f0000000140)=[0x48, 0x20, 0x78, 0x18]}}], 0xe6, 0x0, &(0x7f0000000340)="c38e752d22a05a5774639770a8f13e7f6f48d681821045131d6154d1ec4b1dacdac24c08abf617c288a704c6f35d8aab6650fe0673eab08121cacba2512208c9dde8e2285886bbfb4ecd34f535f5afe1916b7ac8580f2e65b08fe12ffdf6a0d7749127444679a0dc748cfb26a207828bdab328f0b1512c03e6ef06a3b315d1e5dde13554c4ce7afe95bb88aee217d5b17a79d829665355d85da3b57c2ad113b8cf53a4a5736f91200c4959b80afce5e21b2292dfa1a6042d5dc3caa1885fb9e7afe56a3d4393dfb198df593c0ff8ed973d0ff63c13f3192edfbfe21c124a1a2c442ead802baa"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000000)={0xbe2e, 0x2, 'client1\x00', 0x7, "c226e90bb422e82f", "487b6f0cf933a00a2665a5c2366e0a14f1345ba6be9dbd5890621eb741264e67", 0xffffffff, 0x2}) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$jfs(&(0x7f0000000480)='jfs\x00', &(0x7f00000004c0)='./file0\x00', 0x1f, 0x3, &(0x7f0000000800)=[{&(0x7f0000000500)="285f8e73cd6cc17b00b2180b87b6058fc4d1ad40ea9e030e0089d21151e8f437104d5e956c225a60499c7265fe305dc88b2176c6962c43684f535ddcdf1c1b06b0c53867862559d9a07134db456085d9402d55d30c4fa3dd4780fd711545994486b3152692b48e61564bc096dcc27de613553df13f56db067971078c94bfc29727a500f1edf122296fdccdf257b4141a4377aa7ca15af14e333a4302f80aa9ecf832ffc2c71f02b8bc6daf184fa37115cb8f7f24b3093bee6146537755ee145532eac70caaef9331d5b67993158d6d", 0xcf, 0x4}, {&(0x7f0000000600)="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", 0xfe, 0x8}, {&(0x7f0000000700)="ea875e71f7c3c247f610d28bb9f088e8bf795940443c4c45936c079fa7b2342a4d34daf4e7e6191f4ebe4a386ce40da644a9a2a62cdaa9179a7a0f35b4252ff1eae3e2c5b15de14365991b07113b984f5f8d21b59263026dc8ed139ef5c93a544a08b4aa10ae784a9cfbdc4f33bb59cf07613f4c5874f4a4ef9127db0c12eab6f29b1da4932cd7c3fd14fe319f8d0274224536d2a4629984a922724b4b7ee79d584a1065d5952c69242c654a9e5453fbc007679dcf6799a708cf032cbd50aaf556b4dbcf0eeb6e8e447adca66c915c36af6d2af65519d76bc89c3ff56f4cd6678199ff6b", 0xe4, 0xafd}], 0x200000, &(0x7f0000000880)={[{@grpquota='grpquota'}, {@usrquota='usrquota'}, {@errors_continue='errors=continue'}]}) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1000000000000205, 0x0) 14:47:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x400c630f}], 0x1, 0x0, &(0x7f0000000140)="06"}) 14:47:03 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xfffffffe]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 385.508442] binder: 30174:30242 transaction failed 29189/-3, size 0-0 line 2969 [ 385.516493] binder: undelivered transaction 463, process died. [ 385.522727] binder: undelivered TRANSACTION_ERROR: 29189 [ 385.528668] binder: undelivered TRANSACTION_COMPLETE 14:47:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="397004", 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:03 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xfbffffff00000000, 0x1000000020000) [ 385.559998] binder: 30250:30251 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 14:47:03 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x7]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:03 executing program 4: r0 = memfd_create(&(0x7f0000000180)='/dev/snapshot\x00', 0x2) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000001c0)=0x80000001, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000040c0), 0x1000) read$FUSE(r1, &(0x7f00000020c0), 0x1000) llistxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)=""/222, 0xde) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x280, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) sched_getscheduler(r2) tkill(r2, 0x15) read$FUSE(r1, &(0x7f0000000580), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, 0x1}, 0x50) write$FUSE_INTERRUPT(r1, &(0x7f00000000c0)={0x10, 0x0, 0x3}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x3, 0x11) 14:47:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:03 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x1fffff]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 385.732737] 9pnet: p9_fd_create_tcp (30285): problem connecting socket to [ 385.732737] 27.0.0.1 14:47:04 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = getpgid(0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x5e) read(r0, &(0x7f0000000040)=""/28, 0x161) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x3f, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000000)) r2 = dup3(r0, r0, 0x80000) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000340)={[], 0xb34c, 0x3, 0x2, 0x0, 0x5595, 0xf000, 0x2000, [], 0xa751}) 14:47:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 385.963703] 9pnet: p9_fd_create_tcp (30302): problem connecting socket to [ 385.963703] 27.0.0.1 14:47:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x7ffffffff000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:04 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x3000000, 0x1000000020000) 14:47:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x900000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 386.309008] 9pnet: p9_fd_create_tcp (30314): problem connecting socket to [ 386.309008] 27.0.0.1 [ 386.322148] 9pnet: p9_fd_create_tcp (30314): problem connecting socket to [ 386.322148] 27.0.0.1 [ 386.354077] binder_alloc: binder_alloc_mmap_handler: 30250 20001000-20004000 already mapped failed -16 [ 386.364199] binder_alloc: 30250: binder_alloc_buf, no vma [ 386.364292] binder: BINDER_SET_CONTEXT_MGR already set [ 386.369826] binder: 30250:30325 transaction failed 29189/-3, size 0-0 line 2969 [ 386.382699] binder: undelivered TRANSACTION_ERROR: 29189 [ 386.388167] binder: 30250:30324 ioctl 40046207 0 returned -16 [ 386.396451] binder: undelivered transaction 466, process died. 14:47:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6, 0x0, 0x0, 0x0, 0x11}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x40486311}], 0x1, 0x0, &(0x7f0000000140)="06"}) 14:47:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x400300]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 386.429799] binder: undelivered TRANSACTION_COMPLETE 14:47:04 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xa4000000, 0x1000000020000) [ 386.465195] binder: 30332:30340 got transaction to context manager from process owning it [ 386.473628] binder: 30332:30340 transaction failed 29201/-22, size 0-0 line 2845 [ 386.492317] binder_alloc: binder_alloc_mmap_handler: 30332 20001000-20004000 already mapped failed -16 [ 386.492464] 9pnet: p9_fd_create_tcp (30344): problem connecting socket to [ 386.492464] 27.0.0.1 14:47:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xb80b]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x40046304}], 0x1, 0x0, &(0x7f0000000140)="06"}) [ 386.515162] binder: BINDER_SET_CONTEXT_MGR already set [ 386.520889] binder: 30332:30340 ioctl 40046207 0 returned -16 [ 386.526978] binder_alloc: 30332: binder_alloc_buf, no vma [ 386.532616] binder: 30332:30346 transaction failed 29189/-3, size 0-0 line 2969 [ 386.537354] binder: undelivered transaction 469, process died. 14:47:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x400c630f}], 0x1, 0x0, &(0x7f0000000140)="06"}) [ 386.563179] binder: undelivered TRANSACTION_ERROR: 29189 [ 386.583348] binder: undelivered TRANSACTION_COMPLETE 14:47:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xf0ffffff7f0000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 386.641676] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 386.648876] FAT-fs (loop6): Filesystem has been set read-only [ 386.684862] binder: BINDER_SET_CONTEXT_MGR already set [ 386.694679] 9pnet: p9_fd_create_tcp (30368): problem connecting socket to [ 386.694679] 27.0.0.1 [ 386.704069] binder: 30361:30363 ioctl 40046207 0 returned -16 [ 386.707711] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 386.710716] binder: 30361:30369 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 14:47:04 executing program 7: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x3000000, 0x1000000020000) 14:47:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x58efff7f00000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:04 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x40000000, 0x1000000020000) [ 386.731819] 9pnet: p9_fd_create_tcp (30368): problem connecting socket to [ 386.731819] 27.0.0.1 [ 386.732505] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000ff0) [ 386.748691] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000020) [ 386.753930] binder: undelivered TRANSACTION_COMPLETE 14:47:05 executing program 4: pipe2$9p(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',noextenl,\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000800)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, r2}}, 0xa0) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80100) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f00000000c0)={@multicast2, @dev={0xac, 0x14, 0x14, 0x16}, @broadcast}, 0xc) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) 14:47:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x1800000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 386.869550] 9pnet: p9_fd_create_tcp (30383): problem connecting socket to [ 386.869550] 27.0.0.1 [ 387.020759] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) [ 387.027981] FAT-fs (loop1): Filesystem has been set read-only [ 387.034312] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) [ 387.050055] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000ff0) [ 387.057838] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 14:47:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xfe800000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="00000000000004000c"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x82000, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x8001}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000140)={r2, 0x2, 0x20, 0x2, 0x8}, &(0x7f0000000180)=0x18) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xffffffffffff7fff, 0x60080) ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f0000000040)={0x4eaa8870, 0x81, 0x2, 0x7, 0xe165, 0xfd, 0x81}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9f}, [@ldst={0x2000cfad, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 14:47:05 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xa003, 0x1000000020000) [ 387.296518] 9pnet: p9_fd_create_tcp (30410): problem connecting socket to [ 387.296518] 27.0.0.1 14:47:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x18000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 387.371836] binder_alloc: binder_alloc_mmap_handler: 30350 20001000-20004000 already mapped failed -16 [ 387.383365] binder: BINDER_SET_CONTEXT_MGR already set [ 387.389026] binder: 30350:30426 ioctl 40046207 0 returned -16 [ 387.395211] binder_alloc: 30350: binder_alloc_buf, no vma [ 387.400849] binder: 30350:30427 transaction failed 29189/-3, size 0-0 line 2969 [ 387.408835] binder: undelivered TRANSACTION_ERROR: 29189 [ 387.415297] binder: undelivered transaction 475, process died. 14:47:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x40406300}], 0x1, 0x0, &(0x7f0000000140)="06"}) 14:47:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000080)=""/233, &(0x7f0000000000)=0xe9) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x7, &(0x7f0000000040)={0x0, 'veth1_to_bond\x00'}, 0x18) r4 = dup3(r1, r2, 0x0) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000180)) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f00000001c0)="e923538761431f9a79a2bc5fe110b3b127ca2e18b4") ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000200)=0x3f) [ 387.421398] binder: undelivered transaction 473, process died. [ 387.444422] binder: undelivered TRANSACTION_COMPLETE [ 387.464028] binder: 30431:30433 got transaction to context manager from process owning it 14:47:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 387.465998] 9pnet: p9_fd_create_tcp (30437): problem connecting socket to [ 387.465998] 27.0.0.1 [ 387.472447] binder: 30431:30433 transaction failed 29201/-22, size 0-0 line 2845 [ 387.495241] binder_alloc: binder_alloc_mmap_handler: 30431 20001000-20004000 already mapped failed -16 [ 387.507573] binder: BINDER_SET_CONTEXT_MGR already set [ 387.513020] binder: 30431:30433 ioctl 40046207 0 returned -16 [ 387.519098] binder_alloc: 30431: binder_alloc_buf, no vma [ 387.524777] binder: 30431:30441 transaction failed 29189/-3, size 0-0 line 2969 [ 387.531299] binder: undelivered transaction 479, process died. [ 387.551421] binder: undelivered TRANSACTION_ERROR: 29189 [ 387.557532] binder: undelivered TRANSACTION_COMPLETE [ 387.558316] 9pnet: p9_fd_create_tcp (30444): problem connecting socket to [ 387.558316] 27.0.0.1 [ 387.643540] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) [ 387.650801] FAT-fs (loop1): Filesystem has been set read-only [ 387.671364] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) 14:47:05 executing program 7: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x3000000, 0x1000000020000) 14:47:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630c}], 0x1, 0x0, &(0x7f0000000140)="06"}) 14:47:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="397002", 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x6]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:05 executing program 4: mlock(&(0x7f0000250000/0x5000)=nil, 0x5000) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007f1000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) 14:47:05 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xf4ffffff, 0x1000000020000) [ 387.687144] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 387.700224] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 387.735166] binder_alloc: binder_alloc_mmap_handler: 30457 20001000-20004000 already mapped failed -16 [ 387.746331] binder: BINDER_SET_CONTEXT_MGR already set [ 387.751957] binder: 30457:30459 ioctl 40046207 0 returned -16 [ 387.758519] binder_alloc: 30457: binder_alloc_buf, no vma [ 387.764177] binder: 30457:30464 transaction failed 29189/-3, size 0-0 line 2969 [ 387.772264] binder: undelivered TRANSACTION_COMPLETE [ 387.777806] binder: undelivered TRANSACTION_ERROR: 29189 [ 387.969165] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 387.976342] FAT-fs (loop6): Filesystem has been set read-only [ 387.982440] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 387.994940] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 388.003146] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000020) 14:47:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6, 0x0, 0x0, 0x0, 0x1000000}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xd00, 0x1000000020000) 14:47:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x6312}], 0x1, 0x0, &(0x7f0000000140)="06"}) 14:47:06 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xfec0000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x1000000000) ioctl(r0, 0x8912, &(0x7f00000002c0)="5c947b254b415a1d539646db0a5e") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0xfffffeb1) close(r0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000200)='bcsh0\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000500000000000000000000611844000000000000f7ff00000080347577bf19e59caae0"], &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) io_setup(0x4, &(0x7f0000000040)=0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='wlan0proc[\x00', r1}, 0x10) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x9, r0, &(0x7f0000000080)="71951567bfc1045f33abc4", 0xb, 0xfdfb, 0x0, 0x1, r3}]) 14:47:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9pH', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025c3f0a00145f8f764070") syz_mount_image$f2fs(&(0x7f00000001c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000080)={[{@noinline_data='noinline_data'}, {@adaptive_mode='mode=adaptive'}]}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0xa000, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000002c0)=""/149) ioctl$KDMKTONE(r1, 0x4b30, 0x4) 14:47:06 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xf6, 0x1000000020000) [ 388.138960] binder: 30492:30497 unknown command 25362 [ 388.144348] binder: 30492:30497 ioctl c0306201 20000040 returned -22 [ 388.152098] binder_alloc: binder_alloc_mmap_handler: 30492 20001000-20004000 already mapped failed -16 [ 388.162043] binder: BINDER_SET_CONTEXT_MGR already set [ 388.167673] binder: 30492:30497 ioctl 40046207 0 returned -16 [ 388.173733] binder_alloc: 30492: binder_alloc_buf, no vma [ 388.174482] attempt to access beyond end of device 14:47:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x76748c59, 0x0, &(0x7f0000000140)="06"}) [ 388.179331] binder: 30492:30506 transaction failed 29189/-3, size 0-0 line 2969 [ 388.184262] loop4: rw=12288, want=8200, limit=20 [ 388.188244] binder: undelivered transaction 486, process died. [ 388.219234] binder: 30518:30520 ERROR: BC_REGISTER_LOOPER called without request [ 388.228714] binder_alloc: binder_alloc_mmap_handler: 30518 20001000-20004000 already mapped failed -16 14:47:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9ph', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 388.238865] binder: BINDER_SET_CONTEXT_MGR already set [ 388.244279] binder: 30518:30520 ioctl 40046207 0 returned -16 [ 388.250348] binder_alloc: 30518: binder_alloc_buf, no vma [ 388.255977] binder: 30518:30524 transaction failed 29189/-3, size 0-0 line 2969 [ 388.262280] attempt to access beyond end of device [ 388.268538] loop4: rw=12288, want=12296, limit=20 [ 388.274733] binder: undelivered TRANSACTION_ERROR: 29189 [ 388.280250] binder: undelivered TRANSACTION_COMPLETE 14:47:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x2, 0x0, &(0x7f0000000140)="06"}) [ 388.285706] binder: undelivered TRANSACTION_ERROR: 29189 [ 388.292487] attempt to access beyond end of device [ 388.297891] loop4: rw=12288, want=8200, limit=20 [ 388.304458] binder: undelivered TRANSACTION_COMPLETE [ 388.311573] binder: 30529:30531 ERROR: BC_REGISTER_LOOPER called without request [ 388.320559] binder_alloc: binder_alloc_mmap_handler: 30529 20001000-20004000 already mapped failed -16 [ 388.330176] binder: BINDER_SET_CONTEXT_MGR already set 14:47:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x4, 0x0, &(0x7f0000000140)="06"}) [ 388.335541] binder: 30529:30531 ioctl 40046207 0 returned -16 [ 388.341728] binder_alloc: 30529: binder_alloc_buf, no vma [ 388.347323] binder: 30529:30532 transaction failed 29189/-3, size 0-0 line 2969 [ 388.354871] binder: 30529:30531 ERROR: BC_REGISTER_LOOPER called without request [ 388.362788] binder: undelivered TRANSACTION_ERROR: 29189 [ 388.368567] binder: undelivered TRANSACTION_COMPLETE 14:47:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x243, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000040)) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a00000000000000000000000000005f00000000ff7f000000000000000000000005000900ff00e8ff0900000000000000fe8000000000000000000000000000ff00000000000000000200010000000000000009020000000005000500000000000a00000000000000ff0200000000000000000000000000e90000000000000000421f00f21a52caa84e9defe559cae3288fdedd093ad633ce4af1ace6323ec7a565303ece645292093310b99fd707f6ab94be3e59f3ea19fd2538f7d1a491b7cdce15063cf59a1edd97b58d45cae62985ac82e809add22648511856214049c5585eb4c59593dcf7ecad3d5626062d433e3548f9db94db7fead5685592048f596d717bdbd62a1544acc481ddb4f768cefbba02068f01d38be949ccd1f304b6979b3bb9604c52dfb7d34d17358aece4976e9321d83cdb083b8bf58fe53422b194f231a9e749f3a7b7f61a04b1b38bd659f02f78d40048103e03cee88fc8b36c145cea2d22dfe9329cd55fbb3ec0b1d1c9d99e934981b5818b2487b19e155dbefd3d80546ec5924704debdf8c1c148b02fd814eed8df750f4f1915899b01d9833d17"], 0x98}}, 0x0) [ 388.388140] binder: 30535:30537 ERROR: BC_REGISTER_LOOPER called without request [ 388.397081] binder_alloc: binder_alloc_mmap_handler: 30535 20001000-20004000 already mapped failed -16 [ 388.407091] binder: BINDER_SET_CONTEXT_MGR already set [ 388.409243] attempt to access beyond end of device [ 388.412672] binder: 30535:30537 ioctl 40046207 0 returned -16 [ 388.417372] loop4: rw=12288, want=12296, limit=20 [ 388.429562] binder_alloc: 30535: binder_alloc_buf, no vma 14:47:06 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xffff1f0000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1400, 0x0, &(0x7f0000000140)="06"}) [ 388.433251] binder: undelivered transaction 495, process died. [ 388.435190] binder: 30535:30539 transaction failed 29189/-3, size 0-0 line 2969 14:47:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 388.494187] binder: undelivered TRANSACTION_ERROR: 29189 [ 388.516003] binder: 30544:30545 ERROR: BC_REGISTER_LOOPER called without request [ 388.526199] binder_alloc: binder_alloc_mmap_handler: 30544 20001000-20004000 already mapped failed -16 [ 388.537409] binder: BINDER_SET_CONTEXT_MGR already set [ 388.542734] binder: 30544:30545 ioctl 40046207 0 returned -16 [ 388.550237] binder_alloc: 30544: binder_alloc_buf, no vma [ 388.555841] binder: 30544:30552 transaction failed 29189/-3, size 0-0 line 2969 [ 388.589034] binder: undelivered TRANSACTION_ERROR: 29189 [ 388.595203] binder: undelivered TRANSACTION_COMPLETE [ 388.597472] attempt to access beyond end of device [ 388.605307] loop4: rw=12288, want=8200, limit=20 [ 388.605356] binder: undelivered TRANSACTION_COMPLETE [ 388.614096] 9pnet: p9_fd_create_tcp (30557): problem connecting socket to [ 388.614096] 27.0.0.1 [ 388.665977] attempt to access beyond end of device [ 388.671023] loop4: rw=12288, want=12296, limit=20 [ 388.676441] attempt to access beyond end of device [ 388.681430] loop4: rw=12288, want=8200, limit=20 [ 388.688061] attempt to access beyond end of device [ 388.693028] loop4: rw=12288, want=12296, limit=20 [ 388.732525] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) [ 388.739666] FAT-fs (loop1): Filesystem has been set read-only [ 388.746215] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) [ 388.759746] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 388.770142] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 388.815981] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 388.823152] FAT-fs (loop6): Filesystem has been set read-only [ 388.830542] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 388.843797] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 388.851801] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000020) 14:47:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x5, 0x0, &(0x7f0000000140)="06"}) 14:47:07 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xe803000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:07 executing program 7: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000240), &(0x7f0000000280)=0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x46000, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000200)={0x0, 0x6, 0x41, &(0x7f0000000140)=0x20}) clock_gettime(0xfffffdfffffffff3, &(0x7f00000000c0)) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x410200) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000080)=0x20, 0x4) 14:47:07 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = signalfd(0xffffffffffffffff, &(0x7f00007b5000), 0x8) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x9417, {{0xa, 0x4e20, 0x6, @ipv4={[], [], @loopback}, 0xb8}}}, 0x88) mkdir(&(0x7f00007b7000)='./control\x00', 0x0) r2 = signalfd(r1, &(0x7f00007b6ff8)={0x4}, 0x8) r3 = inotify_init1(0x0) fcntl$setstatus(r3, 0x4, 0x72109c5fef5d34d3) r4 = gettid() fcntl$setown(r3, 0x8, r4) readv(r1, &(0x7f000008bfe0)=[{&(0x7f0000525000)=""/216, 0xd8}], 0x1) fstatfs(r2, &(0x7f00000052c0)=""/4096) r5 = dup2(r3, r1) fcntl$setsig(r5, 0xa, 0x15) r6 = inotify_add_watch(r5, &(0x7f00007b4ff6)='./control\x00', 0x2000003) inotify_rm_watch(r5, r6) sched_getscheduler(r4) 14:47:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xb000, 0x1000000020000) 14:47:07 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x600000000000000, 0x1000000020000) 14:47:07 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6, 0x0, 0x0, 0x0, 0xf00}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) [ 389.056572] binder: 30568:30580 ERROR: BC_REGISTER_LOOPER called without request [ 389.064890] binder_alloc: binder_alloc_mmap_handler: 30568 20001000-20004000 already mapped failed -16 [ 389.074654] binder: BINDER_SET_CONTEXT_MGR already set [ 389.080030] binder: 30568:30580 ioctl 40046207 0 returned -16 [ 389.087663] binder_alloc: 30568: binder_alloc_buf, no vma [ 389.090230] 9pnet: p9_fd_create_tcp (30590): problem connecting socket to [ 389.090230] 27.0.0.1 14:47:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x3d1, 0x0, &(0x7f0000000140)="06"}) [ 389.093269] binder: 30568:30586 transaction failed 29189/-3, size 0-0 line 2969 [ 389.111364] binder: undelivered TRANSACTION_ERROR: 29189 [ 389.120392] binder: undelivered transaction 501, process died. [ 389.133837] binder: undelivered TRANSACTION_COMPLETE [ 389.146191] binder: 30596:30598 ERROR: BC_REGISTER_LOOPER called without request 14:47:07 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="0000efed00") readv(r0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/239, 0xef}], 0x1) getdents(r0, &(0x7f0000000200)=""/143, 0x29) getdents(r0, &(0x7f00000003c0)=""/182, 0xb6) [ 389.154855] binder_alloc: binder_alloc_mmap_handler: 30596 20001000-20004000 already mapped failed -16 [ 389.173367] binder: BINDER_SET_CONTEXT_MGR already set [ 389.178700] binder: 30596:30598 ioctl 40046207 0 returned -16 [ 389.185610] binder_alloc: 30596: binder_alloc_buf, no vma [ 389.191239] binder: 30596:30600 transaction failed 29189/-3, size 0-0 line 2969 [ 389.199486] binder: undelivered TRANSACTION_COMPLETE 14:47:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x76748c5f, 0x0, &(0x7f0000000140)="06"}) 14:47:07 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x3100, 0x1000000020000) 14:47:07 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xfcff0000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 389.215335] binder: undelivered TRANSACTION_ERROR: 29189 [ 389.227968] binder: 30603:30604 ERROR: BC_REGISTER_LOOPER called without request 14:47:07 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) capset(&(0x7f000043fff8)={0x19980330}, &(0x7f0000092000)) connect(r0, &(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'veth1_to_team\x00'}}, 0x80) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000001000000b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) connect$can_bcm(r0, &(0x7f0000002ff0), 0x10) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x40) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3f, 0x0, 0x0, 0x3, 0x0, 0x3ff}, &(0x7f00000000c0)=0x20) sendto$llc(r2, &(0x7f0000000240)="650b082abd066291733aa0b0c67b92b039", 0x11, 0x4000004, &(0x7f00000002c0)={0x1a, 0x30f, 0x0, 0xdff, 0x2, 0x1ff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4}, @sadb_lifetime={0x4, 0x0, 0x4}, @sadb_x_nat_t_port={0x1}, @sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x88}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 14:47:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x25, 0x0, &(0x7f0000000140)="06"}) [ 389.261306] binder_alloc: binder_alloc_mmap_handler: 30603 20001000-20004000 already mapped failed -16 [ 389.272296] binder: BINDER_SET_CONTEXT_MGR already set [ 389.277633] binder: 30603:30604 ioctl 40046207 0 returned -16 [ 389.280990] binder_alloc: 30603: binder_alloc_buf, no vma [ 389.289135] binder: 30603:30610 transaction failed 29189/-3, size 0-0 line 2969 [ 389.301048] binder: 30603:30604 ERROR: BC_REGISTER_LOOPER called without request 14:47:07 executing program 7: ioctl$sock_proto_private(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)) 14:47:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p ', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:07 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x20000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 389.337354] binder: BINDER_SET_CONTEXT_MGR already set [ 389.342814] binder: 30617:30619 ioctl 40046207 0 returned -16 [ 389.356222] binder_alloc: 30603: binder_alloc_buf, no vma [ 389.361876] binder: 30617:30619 transaction failed 29189/-3, size 0-0 line 2969 [ 389.372712] binder: 30617:30619 ERROR: BC_REGISTER_LOOPER called without request [ 389.383533] binder: undelivered TRANSACTION_ERROR: 29189 14:47:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 389.408752] binder: undelivered TRANSACTION_COMPLETE [ 389.476221] 9pnet: p9_fd_create_tcp (30638): problem connecting socket to [ 389.476221] 27.0.0.1 [ 389.506246] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) [ 389.513441] FAT-fs (loop1): Filesystem has been set read-only [ 389.526695] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) [ 389.545119] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 389.553742] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 389.624794] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 389.631968] FAT-fs (loop6): Filesystem has been set read-only [ 389.638012] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 389.652676] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 389.660890] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000020) [ 390.136188] binder_alloc: binder_alloc_mmap_handler: 30617 20001000-20004000 already mapped failed -16 [ 390.145832] binder_alloc: 30617: binder_alloc_buf, no vma [ 390.151407] binder: 30617:30654 transaction failed 29189/-3, size 0-0 line 2969 [ 390.158961] binder: 30617:30653 ERROR: BC_REGISTER_LOOPER called without request [ 390.166530] binder: undelivered TRANSACTION_ERROR: 29189 [ 390.172291] binder: undelivered TRANSACTION_ERROR: 29189 14:47:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0xc, &(0x7f0000000200), 0x8) close(r2) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="c1000000515c693140a0f00d5f0b44c9ec979e53dfbce4294b7836702622028c840f9e8bdba1b895362b78cf8bbed10055386a1b9069e088bd510cc56e6c8537870a9e062e5ad2c8e5e4db7dbafe9eab463585a45546f31d1053dd5bea7717e4d985ba7359886b4ad03e244611ce6cb4a3fffe7042c98cc7e989ec9af4e137f9c86f2bd9a91443c06ea41676e028684f81e238afb1e551e963fd8fa899ffb0bfd32ae173eda9a69b370600abee566f38f98bea9767788be4ebd9bc6ca2ae9528c1c714ae39"], &(0x7f0000000100)=0xc9) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0xe1b, 0x8b8d, 0x8001, 0xfffffffffffffff9, 0x1, 0x6, 0x10000, 0x5c7, r3}, 0x20) close(r1) 14:47:10 executing program 7: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9}, 0xb) sendto$inet(r0, &(0x7f0000000240)="f2", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000002c0)=0x4, 0x4) recvfrom$inet(r0, &(0x7f0000000100), 0xffffffffffffffe8, 0x2, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x709000) 14:47:10 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xff00000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:10 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xb400, 0x1000000020000) 14:47:10 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x500, 0x1000000020000) 14:47:10 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x200013c0, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x54, 0x0, &(0x7f0000000140)="06"}) [ 392.073329] binder: 30656:30658 ERROR: BC_REGISTER_LOOPER called without request [ 392.080638] 9pnet: p9_fd_create_tcp (30665): problem connecting socket to [ 392.080638] 27.0.0.1 [ 392.098662] binder_alloc: binder_alloc_mmap_handler: 30656 20001000-20004000 already mapped failed -16 [ 392.108359] binder: BINDER_SET_CONTEXT_MGR already set [ 392.113853] binder: 30656:30658 ioctl 40046207 0 returned -16 14:47:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x3, 0x0, &(0x7f0000000140)="06"}) [ 392.119222] binder_alloc: 30656: binder_alloc_buf, no vma [ 392.125331] binder: 30656:30673 transaction failed 29189/-3, size 0-0 line 2969 [ 392.134057] binder: 30656:30658 ERROR: BC_REGISTER_LOOPER called without request [ 392.153710] binder: undelivered TRANSACTION_ERROR: 29189 [ 392.160636] binder: undelivered TRANSACTION_COMPLETE 14:47:10 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) pipe2(&(0x7f0000000200), 0x4800) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x390, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x341, 0x80) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000240)=""/168) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000180)={0xfd, 0x0, [0x4e4, 0x8, 0xd90b, 0x4]}) recvmmsg(r1, &(0x7f00000071c0)=[{{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000006000)=""/103, 0x67}, {&(0x7f0000006080)=""/160, 0xa0}], 0x2, &(0x7f00000061c0)=""/4096, 0x1000}}], 0x1500, 0x0, &(0x7f0000007380)={0x0, 0x1c9c380}) socketpair(0x1, 0x4, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000040)=0xffffffffffffff95) [ 392.172617] binder: 30683:30685 ERROR: BC_REGISTER_LOOPER called without request [ 392.186880] binder_alloc: binder_alloc_mmap_handler: 30683 20001000-20004000 already mapped failed -16 [ 392.197680] binder: BINDER_SET_CONTEXT_MGR already set [ 392.203279] binder: 30683:30685 ioctl 40046207 0 returned -16 [ 392.209399] binder_alloc: 30683: binder_alloc_buf, no vma [ 392.215015] binder: 30683:30688 transaction failed 29189/-3, size 0-0 line 2969 14:47:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x7, 0x0, &(0x7f0000000140)="06"}) 14:47:10 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x600000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 392.222624] binder: 30683:30685 ERROR: BC_REGISTER_LOOPER called without request [ 392.234409] binder: undelivered TRANSACTION_ERROR: 29189 [ 392.261729] binder: BINDER_SET_CONTEXT_MGR already set [ 392.267398] binder: 30694:30695 ioctl 40046207 0 returned -16 14:47:10 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x58efff7f]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000050000000000000012f40000000000"], &(0x7f00000001c0)=0x24) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0xffff, @dev}], 0x1c) setsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f00000000c0), 0x0) fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f0000000080)=[0x0, 0xee01, 0x0, 0xee00, 0xee00, 0xee00, 0xee00, 0x0]) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000200)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$vsock_dgram(0x28, 0x2, 0x0) ftruncate(r8, 0x5) r9 = getegid() getgroups(0x8, &(0x7f0000000500)=[r1, r2, r3, r4, r5, r6, r7, r9]) [ 392.273818] binder: 30694:30695 transaction failed 29189/-22, size 0-0 line 2854 [ 392.278042] binder: undelivered TRANSACTION_COMPLETE [ 392.287224] binder: 30694:30695 ERROR: BC_REGISTER_LOOPER called without request 14:47:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="3970ff", 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fchmod(r0, 0xa8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0xcf63, 0x8000, 0x0, 0x800, 0x0}, &(0x7f0000000400)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000480)={r1, 0x7}, 0x8) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x6, 0x20000) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=0x0, &(0x7f0000000200)=0x4) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000240)={r3}, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)={0x0, 0x8000, [0x0, 0xffffffffffffffff]}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{}]}) bind$netlink(r4, &(0x7f00000004c0)={0x10, 0x0, 0x25dfdbfc, 0x4001}, 0xc) 14:47:10 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x3000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") syz_init_net_socket$llc(0x1a, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f00000001c0)=0x0) io_getevents(r2, 0x0, 0x526, &(0x7f0000000240), &(0x7f0000000400)={0x0, 0x1c9c380}) close(r1) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000000040)=""/98, &(0x7f00000000c0)=0x62) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x200000000000, 0x101000) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x6, 0x0, 0x0, 0x0, r4}]) 14:47:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:10 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) ppoll(&(0x7f0000000180)=[{r2}], 0x1, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200), 0x8) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) write$P9_RREADLINK(r3, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) write$eventfd(r2, &(0x7f0000000040), 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x8802, 0x0) [ 392.469068] 9pnet: p9_fd_create_tcp (30727): problem connecting socket to [ 392.469068] 27.0.0.1 [ 392.508664] 9pnet: p9_fd_create_tcp (30727): problem connecting socket to [ 392.508664] 27.0.0.1 [ 392.521418] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 392.528644] FAT-fs (loop6): Filesystem has been set read-only [ 392.542213] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) 14:47:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:11 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xfec00000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:11 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x566, 0x0, 0x3, 0x5, 0x0, 0x8, 0x40000, 0x1, 0x200, 0x918, 0x80, 0x8000, 0xffffffffffffffc1, 0x9, 0x8, 0xf5, 0x20, 0x100, 0xfffffffffffffff7, 0x5, 0x9, 0x1000, 0x185, 0x3, 0x3f, 0x2, 0x2, 0x6f, 0xcb, 0xf, 0x5, 0x3, 0x4, 0x6, 0x9, 0x10000, 0x0, 0x10001, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x200, 0x2, 0x0, 0x0, 0x7, 0x8, 0x10000}, 0x0, 0xc, 0xffffffffffffff9c, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000540), &(0x7f0000000580)=0x1) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000380)={@mcast2, @dev, @dev}) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) 14:47:11 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xfffffff4, 0x1000000020000) 14:47:11 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x200017c0, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:11 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xd, 0x1000000020000) [ 392.920654] 9pnet: p9_fd_create_tcp (30753): problem connecting socket to [ 392.920654] 27.0.0.1 14:47:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x6c000000, &(0x7f0000000140)="06"}) 14:47:11 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x400000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x4000, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x2, 0x440000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x60000, 0x0) times(&(0x7f0000000100)) renameat(r0, &(0x7f0000000180)="2e2f66692e65318c00", r1, &(0x7f0000000040)="2e2f66692e65318c00") r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) syz_mount_image$gfs2(&(0x7f0000000380)='gfs2\x00', &(0x7f0000000680)='./file0\x00', 0x0, 0x1, &(0x7f0000000800)=[{&(0x7f00000006c0)='c', 0x1, 0xfffffffffffffe01}], 0x0, &(0x7f0000000840)) 14:47:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 393.050316] binder_alloc: binder_alloc_mmap_handler: 30694 20001000-20004000 already mapped failed -16 [ 393.060233] binder_alloc: 30694: binder_alloc_buf, no vma [ 393.065841] binder: 30694:30774 transaction failed 29189/-3, size 0-0 line 2969 [ 393.073406] binder: 30694:30773 ERROR: BC_REGISTER_LOOPER called without request [ 393.081834] binder: undelivered TRANSACTION_ERROR: 29189 [ 393.087820] binder: undelivered TRANSACTION_ERROR: 29189 14:47:11 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xb8000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 393.114149] binder: 30777:30780 ERROR: BC_REGISTER_LOOPER called without request [ 393.122249] binder: undelivered transaction 522, put_user failed [ 393.126069] FAT-fs (loop4): bogus number of reserved sectors [ 393.128669] binder: 30777:30780 ioctl c0306201 20000040 returned -14 [ 393.134330] FAT-fs (loop4): Can't find a valid FAT filesystem [ 393.148541] binder_alloc: binder_alloc_mmap_handler: 30777 20001000-20004000 already mapped failed -16 14:47:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0xfeffffff, &(0x7f0000000140)="06"}) [ 393.159464] binder: BINDER_SET_CONTEXT_MGR already set [ 393.165515] binder: 30777:30780 ioctl 40046207 0 returned -16 [ 393.172204] binder_alloc: 30777: binder_alloc_buf, no vma [ 393.177844] binder: 30777:30787 transaction failed 29189/-3, size 0-0 line 2969 [ 393.185328] binder: undelivered TRANSACTION_COMPLETE [ 393.191020] binder: undelivered TRANSACTION_ERROR: 29189 [ 393.198244] gfs2: not a GFS2 filesystem [ 393.205876] 9pnet: p9_fd_create_tcp (30793): problem connecting socket to 14:47:11 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xe8030000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:11 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x100, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001280)={&(0x7f0000000280), 0xc, &(0x7f0000001240)={&(0x7f00000002c0)=@newtaction={0xf50, 0x30, 0xb00, 0x70bd2d, 0x25dfdbfc, {0x0, 0x55, 0xa98f}, [{0xf3c, 0x1, @m_pedit={0xf38, 0x6, {{0xc, 0x1, 'pedit\x00'}, {0xeec, 0x2, [@TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x6, 0xffffffff, 0xffffffffffffffff, 0x681, 0x9}, 0x2af, 0x0, [{0x2, 0x0, 0x5, 0x8001, 0x8, 0x41ad}, {0x0, 0x3f, 0x6c, 0xe3c1, 0x400, 0x6926}, {0x5, 0x16, 0x1, 0xeac, 0x0, 0x6}, {0x6, 0x2, 0x3ff, 0x4, 0x2, 0x8}, {0x1ff, 0x2, 0x8, 0x9, 0x2, 0x7}, {0x6c, 0xf199, 0x3f, 0x57f5, 0x9, 0x401}, {0x2, 0x8, 0x6940, 0xe58, 0x10001, 0xb20}]}, [{0x5, 0x5, 0x2, 0x2f7, 0x6}, {0x3, 0x8, 0x100000000, 0x20, 0x10001, 0xa0a}, {0xffffffffffffff00, 0xbd, 0xffffffffffffff01, 0x40, 0x3863, 0x80}, {0x2, 0xfa, 0x8, 0x629, 0x1000, 0xa2d0}, {0x1, 0x0, 0x3, 0x7f, 0x8, 0x6c}, {0x60000000000, 0x3, 0xffffffff, 0x800, 0x7, 0xfffffffffffffffc}, {0x800, 0x10001, 0x9, 0x79b6, 0x5, 0x2}, {0x66, 0x200, 0x7f, 0xff, 0x146, 0xc00}, {0xfffffffffffffffe, 0x6, 0x2, 0x4, 0x9, 0x7fe00000000}, {0x9, 0xffffffffffffffe1, 0x101, 0x4, 0x6a0, 0x1f}, {0x6, 0x1, 0x1, 0xffff, 0x3ff, 0x9c6b}, {0xdc2, 0x8000, 0x9, 0x4, 0x9682, 0x3}, {0x2, 0x7, 0x8000, 0x3b9f233f, 0x3, 0x1}, {0x2, 0x67fd, 0xfffffffffffffff8, 0x100, 0x9, 0xbc}, {0x1ff, 0x8, 0x8, 0x401, 0x84, 0x80}, {0x2, 0x2, 0x0, 0x20, 0x6, 0x1ff}, {0x0, 0x800, 0xfffffffffffff001, 0x2, 0x7fffffff, 0x80000001}, {0x20, 0x7, 0xfffffffffffffffd, 0x74b1, 0xac, 0x100000001}, {0xff, 0x5, 0x3, 0xfff, 0x6, 0x200}, {0x979, 0x6, 0x6, 0xfffffffffffffffd, 0x3, 0x9}, {0x2, 0x5, 0x8, 0x80000001, 0xffffffff, 0x3747}, {0xffff, 0x0, 0x60, 0x9, 0x6, 0xcb}, {0x5, 0x7ff, 0x1000, 0xad58, 0xffff, 0x9}, {0x20, 0x7fffffff, 0x0, 0x1ff, 0x80, 0x9}, {0x3, 0x5, 0x9f7, 0x0, 0x1, 0x8}, {0x0, 0x1, 0x4000000000000000, 0x8000, 0x6, 0x100000001}, {0x9, 0x0, 0x7fffffff, 0x1000, 0x542c, 0x8}, {0x60, 0x7ff, 0x46, 0x2de, 0xfffffffffffffffc, 0x3}, {0x80, 0x6, 0xc7d0, 0x7, 0xffffffffffff7f06, 0x1}, {0x4, 0x5, 0xe8, 0x6, 0x5, 0x200}, {0x0, 0x1ff, 0x5, 0x3, 0x328, 0x24}, {0x7, 0x7fff, 0x6, 0x7b800000, 0x9, 0x7}, {0x5, 0x8, 0xfff, 0x800, 0x4, 0x2}, {0xe610, 0x80000001, 0xd6bf, 0x4, 0x9883, 0x4}, {0x80000000, 0x3, 0xfffffffffffff800, 0x1, 0x1ff}, {0x312, 0x7f, 0x5, 0x3, 0x8, 0x4}, {0x9, 0x1, 0x9, 0x7, 0x7, 0x81}, {0x9, 0x2, 0x4, 0x9, 0x76d7, 0x1ff}, {0x6, 0x8, 0xb9fd, 0x8001, 0x8bb2, 0xffffffffffffff9f}, {0x8001, 0x0, 0x4, 0x800, 0x8d, 0xfffffffffffff15e}, {0x74d, 0xff, 0x84c, 0x0, 0x5, 0xf05e}, {0x184, 0x5, 0x3, 0x2, 0x9, 0x7}, {0x80000000, 0x7, 0x7, 0x8, 0xd2ee, 0x8000}, {0xfffffffffffffffe, 0x4, 0xb0, 0x9, 0x2, 0x1f}, {0x2, 0x0, 0xffffffff, 0xdd1e, 0x9, 0x8}, {0x100000001, 0x3, 0x7, 0x6, 0x7fff, 0x6}, {0xa0, 0x4, 0x5, 0x9, 0x4, 0x1}, {0x9, 0x6bb7ff16, 0x1, 0x9, 0x9, 0xffffffff}, {0x2000000000000, 0x5, 0x9, 0x1, 0x9, 0x6ce}, {0x33, 0x7fffffff, 0x6, 0x7, 0xffffffff, 0x4}, {0x0, 0x400, 0x1, 0xd8b, 0x1, 0x1}, {0x0, 0x4000000, 0x7, 0x9, 0x101, 0x7}, {0xfff, 0x7, 0x200, 0x4, 0x7fffffff, 0x9}, {0x7, 0x4, 0x11, 0x625, 0x384, 0x4}, {0x7, 0x500, 0xcf, 0x3, 0x2fa, 0x7f}, {0xaca0, 0x400, 0x80000001, 0x8, 0xffffffff9ee6563c, 0x1}, {0x8001, 0x80000000, 0x1ff, 0xfff, 0x0, 0x9}, {0x8001, 0x81, 0x8000, 0x9, 0x0, 0xf3de}, {0x53, 0x3, 0x0, 0xb3, 0x3, 0x9}, {0x0, 0x3ff, 0x81, 0x4, 0xffffffffffffff80, 0x100}, {0x40, 0x7, 0xfffffffffffffffa, 0x5, 0x40, 0x4}, {0x1, 0x3, 0x9, 0x7, 0x8, 0x5}, {0x1, 0x810000, 0x1, 0x1000, 0x3ff, 0x3120}, {0xf1, 0xffffffff, 0x3, 0x3f, 0x6, 0x6}, {0x35e, 0x80000000, 0x8, 0x4, 0x1}, {0x80, 0xfffffffffffffffa, 0x0, 0x100000001, 0x7, 0xfffffffffffffff8}, {0x1, 0x3f, 0x5, 0x9, 0xa22, 0x40}, {0x800, 0x3, 0x101, 0x0, 0x3}, {0xfffffffffffffffa, 0x3f, 0x8000, 0x7, 0x9, 0x20}, {0x9, 0x7fffffff, 0xffffffff80000001, 0x5, 0xfffffffffffffeff, 0x7}, {0x100000001, 0x8, 0x9, 0x2, 0x5, 0x5}, {0x8, 0xfff, 0x401, 0x5, 0x9, 0x89c}, {0x10000, 0x0, 0x5, 0x6, 0x7, 0x3}, {0x0, 0x1, 0x5daf, 0x3, 0x1000, 0x81}, {0x3, 0x9, 0x7ff, 0x7, 0x10001, 0x7}, {0x8, 0x0, 0xb6, 0x919, 0x5}, {0x7, 0x10001, 0xfffffffffffffd3d, 0x7ff, 0x8000, 0x9}, {0x367, 0x3, 0x2, 0x7, 0x4, 0x7}, {0x4, 0x37, 0x10001, 0x1, 0x101, 0x1}, {0x3, 0x6, 0x4, 0xe55, 0x15, 0xfffffffffffffffa}, {0x9b6, 0x6, 0x4, 0x8001, 0x7ff, 0x3ca4}, {0x1, 0x101, 0x7ff, 0xfff, 0x6, 0x6}, {0xffffffffffffffbc, 0x6, 0x6, 0x8, 0xffffffff, 0x7}, {0x100, 0x6, 0x7fff, 0x95e, 0xcbdc, 0x3ff}, {0xf9, 0xfff, 0x80000000, 0x4ce, 0x86c, 0xff}, {0xc, 0xfff, 0x37f, 0x8, 0x800}, {0xc1, 0x0, 0x5, 0x8000, 0xaf, 0x7}, {0x8001, 0x0, 0x6, 0x1ff, 0xc36, 0x80000000}, {0x3ff, 0x2, 0x81, 0x3a, 0x1, 0x7}, {0x3d4, 0x15dc, 0x20, 0x3, 0x100, 0x6}, {0xfffffffffffffffa, 0x4, 0x1, 0x7, 0x1, 0x9}, {0x6, 0x7, 0x0, 0x9, 0x4, 0x6}, {0x10000, 0x4, 0x80000000, 0x4, 0x6, 0x1}, {0xffffffff00000000, 0x4, 0x41, 0x1f, 0x400, 0x6}, {0x80000000, 0x8, 0x1, 0x2, 0x444, 0x79000000000}, {0x46, 0x7, 0x515, 0x0, 0x5, 0x2}, {0x80000000, 0x0, 0x1, 0x1, 0x9, 0x8}, {0x6, 0x10001, 0x2, 0x6, 0x20, 0x447b09e4}, {0xffffffff, 0x4, 0x7af, 0x6, 0x2, 0x4}, {0xfffffffffffff3a3, 0x9, 0xfffffffffffffff7, 0x1426, 0xfff, 0x7ff}, {0x6, 0x5, 0x6, 0x5, 0x800, 0x2}, {0x800, 0x1f, 0x47b, 0x8000, 0x1f, 0x1}, {0xfffffffffffff0b6, 0x90e, 0x4f0, 0x922, 0x800, 0x7ff}, {0x3f, 0x2f, 0x3ff, 0x4}, {0x5, 0xff, 0x10001, 0x1, 0xffffffff, 0x7}, {0x0, 0x2, 0x10000000, 0x2, 0xfff, 0x7ff}, {0x3, 0xff, 0xfffffffffffffff8, 0x80, 0x805, 0x1a}, {0x2, 0xee9, 0x100, 0x100000000, 0x5, 0xfffffffffffffc00}, {0x9, 0x21, 0x6, 0x628ba9ee, 0xffffffffffffff7f, 0x9}, {0xfffffffffffffffa, 0x101, 0x4, 0x3, 0x101, 0x5}, {0x1, 0x9, 0x400, 0x100000001, 0x0, 0x9}, {0x5, 0x81b7, 0x8, 0x101, 0x8}, {0x9c9b, 0xfffffffffffffeff, 0x1, 0xcb0, 0x8, 0x1}, {0x800, 0x1, 0x1ffc000, 0x400000000, 0x7fff}, {0x9, 0x6, 0x101, 0xffffffffffffffff, 0x7, 0x2}, {0x9, 0xdd, 0x1ff, 0xffffffffffffffff, 0x2, 0x7ff}, {0x1, 0x9, 0x5, 0x1, 0x5, 0x6a55b07c}, {0xffffffffffffffff, 0xe49, 0xffffffffffffffe0, 0x1ff, 0x3, 0x2}, {0x258, 0x9000, 0x1, 0x401, 0x40, 0x5}, {0x401, 0x4, 0x22b, 0x43, 0x1450, 0x81}, {0x9, 0x6, 0xfff, 0x1, 0x8, 0x1}, {0x45, 0x7ff, 0x2, 0x20, 0x0, 0x9}, {0xffffffffffffffff, 0x8, 0x7f, 0x1000, 0x101, 0x8000}, {0xffffffff, 0xe7, 0x1, 0x80000001, 0xffff, 0x9ea}, {0xfffffffffffff800, 0x1, 0x2, 0x5, 0x1, 0x8001}, {0x3, 0x9, 0x2, 0xb, 0x80000000000, 0x5}, {0x7fa9fa5a, 0x7f, 0x1000, 0x9, 0x2, 0x3}, {0x7, 0x3, 0x1, 0x6, 0x80000000, 0x401}], [{}, {0x7}, {}, {0x3}, {0x5, 0x1}, {0x7, 0x1}, {0x7, 0x1}, {}, {0x7, 0x1}, {0x4}, {0x5, 0x1}, {}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x7}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x6}, {0x1, 0x1}, {0x7}, {0x7, 0x1}, {0x3, 0x1}, {0x3, 0x866dd0f44f608768}, {0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x1}, {0x7, 0x1}, {0x2}, {0x5}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x7, 0x137aa741b107fce}, {0x7, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x7, 0x1}, {0x7}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x7}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x7, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x7, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x4, 0xf29aabacbb5b6be9}, {0x7}, {0x5, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x7}, {0x4}, {0x7, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x7}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x4}, {}, {0x7, 0x1}, {0x5, 0x1}, {}, {0x7, 0x1}, {0x7}, {0x7, 0x1}, {0x5}, {0x3, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x20, 0x5, [@TCA_PEDIT_KEY_EX={0x1c, 0x6, [@TCA_PEDIT_KEY_EX_HTYPE={0x8}, @TCA_PEDIT_KEY_EX_CMD={0x8}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x3}]}]}]}, {0x38, 0x6, "b67da66d14912931035a47332194e11a4fc4d19700bb7fb4b9afad397d5483d1a7474b1102694c0f08c90542c06f29a23f1b"}}}}]}, 0xf50}, 0x1, 0x0, 0x0, 0xc080}, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000001340)={0x8, 0x2, 0x7, 'queue1\x00', 0xfffffffffffffff2}) write$FUSE_WRITE(r0, &(0x7f0000000140)={0x18, 0xfffffffffffffff5, 0x1, {0x7}}, 0x18) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001440)='IPVS\x00') ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000012c0)={{0x4, 0x80000000}, {0x5, 0x7}, 0x2, 0x1, 0xfffffffffffffc00}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2300, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x7ff}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000200)={r4, 0x4}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) unshare(0x0) ioctl(r3, 0x6a98, &(0x7f0000001a00)="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") sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0xfffffffffffffffc}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r1, 0x201, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, '\nvf\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}]}]}, 0x4c}}, 0x0) [ 393.205876] 27.0.0.1 [ 393.221430] binder: 30794:30795 ERROR: BC_REGISTER_LOOPER called without request [ 393.229716] binder: undelivered transaction 525, put_user failed [ 393.236465] binder: 30794:30795 ioctl c0306201 20000040 returned -14 [ 393.244019] binder_alloc: binder_alloc_mmap_handler: 30794 20001000-20004000 already mapped failed -16 [ 393.259660] binder: BINDER_SET_CONTEXT_MGR already set 14:47:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 393.265185] binder: 30794:30795 ioctl 40046207 0 returned -16 [ 393.272122] binder_alloc: 30794: binder_alloc_buf, no vma [ 393.277846] binder: 30794:30797 transaction failed 29189/-3, size 0-0 line 2969 [ 393.285326] binder: undelivered TRANSACTION_COMPLETE [ 393.291282] binder: undelivered TRANSACTION_ERROR: 29189 14:47:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x7a00, &(0x7f0000000140)="06"}) 14:47:11 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xf0ff7f]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x6}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r1, 0x2}, 0x8) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) r2 = inotify_init1(0x0) fcntl$setstatus(r2, 0x4, 0x72109c5fef5d34d3) r3 = gettid() rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setownex(r2, 0xf, &(0x7f0000fa4000)={0x0, r3}) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) removexattr(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)=@known='system.posix_acl_default\x00') 14:47:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) r0 = open(&(0x7f0000000040)='./file0\x00', 0x448001, 0x40) accept$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000200)=0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000440)='./file1\x00') [ 393.332995] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 393.348191] IPVS: Scheduler module ip_vs_ [ 393.348191] vf not found [ 393.356038] 9pnet: p9_fd_create_tcp (30808): problem connecting socket to [ 393.356038] 27.0.0.1 [ 393.415323] binder: 30816:30818 ERROR: BC_REGISTER_LOOPER called without request [ 393.425687] binder_alloc: binder_alloc_mmap_handler: 30816 20001000-20004000 already mapped failed -16 [ 393.436325] binder: BINDER_SET_CONTEXT_MGR already set [ 393.442154] binder: 30816:30818 ioctl 40046207 0 returned -16 [ 393.448199] binder_alloc: 30816: binder_alloc_buf, no vma [ 393.448225] binder: 30816:30821 transaction failed 29189/-3, size 0-0 line 2969 [ 393.462536] binder: undelivered TRANSACTION_COMPLETE [ 393.479246] binder: undelivered TRANSACTION_ERROR: 29189 14:47:11 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x60000, 0x1000000020000) 14:47:11 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:11 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xab00000000000000, 0x1000000020000) 14:47:11 executing program 4: r0 = socket(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x1e, 0x4) r1 = socket$inet6(0xa, 0x3, 0x20) ioctl(r1, 0x8912, &(0x7f0000000000)="0a5cc80700315f85714070") r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58) close(r2) fgetxattr(r2, &(0x7f0000000280)=@random={'system.', '\x00'}, &(0x7f00000002c0)=""/243, 0xf3) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xfeffff0700000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000300], 0x0, &(0x7f0000000000), &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x268) 14:47:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x7, &(0x7f0000000140)="06"}) 14:47:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9pt', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r2, 0x0) seccomp(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x6, 0x1, 0x80, 0x6}, {0x80, 0x3, 0x1f, 0x604}]}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) 14:47:11 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xb80b0000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 393.797292] binder: 30842:30843 ERROR: BC_REGISTER_LOOPER called without request [ 393.807008] binder_alloc: binder_alloc_mmap_handler: 30842 20001000-20004000 already mapped failed -16 [ 393.816624] binder: BINDER_SET_CONTEXT_MGR already set [ 393.822199] binder: 30842:30843 ioctl 40046207 0 returned -16 [ 393.828218] binder_alloc: 30842: binder_alloc_buf, no vma [ 393.833844] binder: 30842:30859 transaction failed 29189/-3, size 0-0 line 2969 14:47:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0xecffffffffffffff, &(0x7f0000000140)="06"}) [ 393.842012] binder: 30842:30843 ERROR: BC_REGISTER_LOOPER called without request [ 393.854252] kernel msg: ebtables bug: please report to author: Wrong len argument [ 393.878784] binder: undelivered TRANSACTION_ERROR: 29189 [ 393.884388] binder: BINDER_SET_CONTEXT_MGR already set [ 393.889755] binder: 30871:30875 ioctl 40046207 0 returned -16 14:47:12 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x900]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\n', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:12 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x101000, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000080)=""/91) [ 393.896688] binder_alloc: 30842: binder_alloc_buf, no vma [ 393.902514] binder: 30871:30875 transaction failed 29189/-3, size 0-0 line 2969 [ 393.910487] binder: 30871:30875 ERROR: BC_REGISTER_LOOPER called without request [ 393.942656] binder: undelivered TRANSACTION_COMPLETE 14:47:12 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xb0000000, 0x1000000020000) 14:47:12 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x2d00, 0x1000000020000) 14:47:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p`', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 393.988320] kernel msg: ebtables bug: please report to author: Wrong len argument 14:47:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x3, 0x0, @broadcast}}}, 0x108) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x1, 0x4) socketpair$inet(0x2, 0xb, 0x101, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180)=0x9, 0x4) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000f259e91f4e80132ee889cf617c5197610000006b006b23c9b1a6a96831208addc018113a78252da42c81579eea6c25fb324203ce0c86a882260d35467aa8c428a9717258d9c7dfbb4c544c839b9cb0f34038132fd63a87f9d24caff3c06843b01c2a028d2085a4d797d22fcc489cd040842b"], &(0x7f0000000100)=0x8f) 14:47:12 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x4ec]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 394.290221] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) [ 394.297379] FAT-fs (loop1): Filesystem has been set read-only [ 394.304043] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) [ 394.318230] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 394.327273] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 394.347462] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 394.354662] FAT-fs (loop6): Filesystem has been set read-only [ 394.360822] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) 14:47:12 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:12 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x8) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 14:47:12 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x80fe]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:12 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r1, 0x30b, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080), 0x10}]) r2 = gettid() clock_gettime(0x0, &(0x7f0000000300)={0x0}) clock_nanosleep(0x9, 0x0, &(0x7f00000001c0)={r3}, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) tkill(r2, 0x1000000000014) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x2, 0x5, 0x0, 0xeff, r2}) process_vm_writev(0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140), 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) tee(r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 14:47:12 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xb100, 0x1000000020000) 14:47:12 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xffffffffffff0700, 0x1000000020000) [ 394.657205] 9pnet: p9_fd_create_tcp (30949): problem connecting socket to [ 394.657205] 27.0.0.1 [ 394.675803] binder_alloc: binder_alloc_mmap_handler: 30871 20001000-20004000 already mapped failed -16 [ 394.686470] binder: 30871:30961 transaction failed 29189/-22, size 0-0 line 2854 [ 394.696727] binder: undelivered TRANSACTION_ERROR: 29189 14:47:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x600000000000000, &(0x7f0000000140)="06"}) 14:47:12 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xbb8]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 394.702733] binder: undelivered TRANSACTION_ERROR: 29189 [ 394.736534] binder: 30966:30967 ERROR: BC_REGISTER_LOOPER called without request [ 394.744486] binder: undelivered transaction 537, put_user failed [ 394.751102] binder: 30966:30967 ioctl c0306201 20000040 returned -14 [ 394.761587] binder_alloc: binder_alloc_mmap_handler: 30966 20001000-20004000 already mapped failed -16 [ 394.772642] binder: BINDER_SET_CONTEXT_MGR already set [ 394.778044] binder: 30966:30967 ioctl 40046207 0 returned -16 14:47:12 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xc0fe]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x2000000, &(0x7f0000000140)="06"}) 14:47:13 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x600000000000000, &(0x7f0000000140)="06"}) [ 394.784313] binder_alloc: 30966: binder_alloc_buf, no vma [ 394.789938] binder: 30966:30971 transaction failed 29189/-3, size 0-0 line 2969 [ 394.798517] binder: undelivered TRANSACTION_COMPLETE [ 394.803966] binder: undelivered TRANSACTION_ERROR: 29189 14:47:13 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f00000002c0)=@ethtool_dump={0x3b, 0x2, 0xff0f0000, 0x80000}}) close(0xffffffffffffffff) getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) [ 394.837866] binder: 30975:30979 ERROR: BC_REGISTER_LOOPER called without request [ 394.850683] binder: undelivered transaction 540, put_user failed [ 394.857075] binder: 30975:30979 ioctl c0306201 20000040 returned -14 [ 394.866092] binder_alloc: binder_alloc_mmap_handler: 30975 20001000-20004000 already mapped failed -16 [ 394.875741] binder: BINDER_SET_CONTEXT_MGR already set [ 394.881164] binder: 30975:30979 ioctl 40046207 0 returned -16 14:47:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x3000000, &(0x7f0000000140)="06"}) [ 394.881311] binder: BINDER_SET_CONTEXT_MGR already set [ 394.892469] binder_alloc: 30975: binder_alloc_buf, no vma [ 394.898092] binder: 30975:30981 transaction failed 29189/-3, size 0-0 line 2969 [ 394.910649] binder_alloc: 30975: binder_alloc_buf, no vma [ 394.916264] binder: 30978:30986 transaction failed 29189/-3, size 0-0 line 2969 [ 394.928838] binder: BINDER_SET_CONTEXT_MGR already set 14:47:13 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000200)={r2, r3+30000000}, 0x8) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="c4c2290c670866bad004b00feef2afc744240049e3aaf0c7442402910d1643c7442406000000000f011c24c4e1dc5c6f290f05c4e1fd593488d070a76666f2f20f20540f30", 0x45}], 0x1, 0x0, &(0x7f0000000180), 0x0) 14:47:13 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x34000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 394.934284] binder: 30987:30988 ioctl 40046207 0 returned -16 [ 394.937615] binder: 30978:30989 ERROR: BC_REGISTER_LOOPER called without request [ 394.940322] binder: undelivered TRANSACTION_ERROR: 29189 [ 394.953368] binder_alloc: 30975: binder_alloc_buf, no vma [ 394.953945] binder: 30978:30982 ioctl 40046207 0 returned -16 [ 394.958961] binder: 30987:30988 transaction failed 29189/-3, size 0-0 line 2969 [ 394.959039] binder: undelivered TRANSACTION_COMPLETE [ 394.977472] binder: 30987:30988 ERROR: BC_REGISTER_LOOPER called without request [ 395.052499] binder: undelivered TRANSACTION_ERROR: 29189 [ 395.070481] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 395.077672] FAT-fs (loop6): Filesystem has been set read-only [ 395.093131] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 395.122120] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 395.130360] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000020) [ 395.146772] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) [ 395.153932] FAT-fs (loop1): Filesystem has been set read-only [ 395.159961] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) [ 395.181125] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 395.189574] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 14:47:13 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xec04000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:13 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)="8a343315dd1f800a14b2b0f9e163924ba6be2eda770c771410450790a89ac60b0755a7609964d69f6d81b575f34bce7ab1632f922a", 0x35, 0xffffffffffffffff) fstatfs(r0, &(0x7f00000000c0)=""/136) keyctl$clear(0x7, r1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000040)}, 0x10) 14:47:13 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x4000, 0x1000000020000) 14:47:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:13 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xb1000000, 0x1000000020000) [ 395.475017] 9pnet: p9_fd_create_tcp (31015): problem connecting socket to [ 395.475017] 27.0.0.1 14:47:13 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xfcff]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:13 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000040)=0x2) getsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f00000000c0), &(0x7f0000000000)=0x32c) 14:47:13 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xe803]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 395.587501] 9pnet: p9_fd_create_tcp (31038): problem connecting socket to [ 395.587501] 27.0.0.1 14:47:13 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0xfffffffffffffffc) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x20081, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000012c0)={r1, &(0x7f0000000240)="807fe510ee08e9c3e8e069778c101aa73200dd09a0296b39e81e9101e8d01e0bc4caf0d29bc7692db3e90d9b85d71a1af6ff15a3274951ea97f6a876a72af522361ccfb028f3bd8c7e6c479ec246b0a69c41a2c7c9928e9fd387f7bad9bdba12ea2a7b0ef6db811cec997a3692cac21ec14e6dea6b0c5ae4a3515b9f784979", &(0x7f00000002c0)=""/4096}, 0x18) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x1, 0x200400) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f00000001c0)) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x60000, 0x100) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000140)={0x7}, 0x4) mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0x81) 14:47:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:13 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xb8]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 395.705884] 9pnet: p9_fd_create_tcp (31051): problem connecting socket to [ 395.705884] 27.0.0.1 [ 395.737814] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) [ 395.745022] FAT-fs (loop1): Filesystem has been set read-only 14:47:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0xfffffffe, &(0x7f0000000140)="06"}) [ 395.754814] binder_alloc: binder_alloc_mmap_handler: 30987 20001000-20004000 already mapped failed -16 [ 395.766169] binder_alloc: 30987: binder_alloc_buf, no vma [ 395.771802] binder: 30987:31059 transaction failed 29189/-3, size 0-0 line 2969 [ 395.779688] binder: 30987:31054 ERROR: BC_REGISTER_LOOPER called without request [ 395.791251] binder: undelivered TRANSACTION_ERROR: 29189 [ 395.809144] binder: 31063:31064 ERROR: BC_REGISTER_LOOPER called without request [ 395.816839] binder: undelivered transaction 547, put_user failed [ 395.823099] binder: 31063:31064 ioctl c0306201 20000040 returned -14 [ 395.830864] binder_alloc: binder_alloc_mmap_handler: 31063 20001000-20004000 already mapped failed -16 [ 395.840570] binder: BINDER_SET_CONTEXT_MGR already set [ 395.846004] binder: 31063:31064 ioctl 40046207 0 returned -16 [ 395.852066] binder_alloc: 31063: binder_alloc_buf, no vma [ 395.857675] binder: 31063:31065 transaction failed 29189/-3, size 0-0 line 2969 [ 395.868035] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 395.875247] FAT-fs (loop6): Filesystem has been set read-only [ 395.885851] binder: undelivered TRANSACTION_ERROR: 29189 [ 395.898214] binder: undelivered TRANSACTION_COMPLETE 14:47:14 executing program 4: pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) clock_nanosleep(0x3, 0x0, &(0x7f0000000000)={0x77359400}, 0x0) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) r2 = memfd_create(&(0x7f0000000100)='vmnet1eth1keyringvboxnet1cgroup,\x00', 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x74, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {{0x3, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x30]}, 0xa0}}, @clear_death={0x400c630f, 0x4}, @acquire={0x40046305, 0x4}, @release, @increfs={0x40046304, 0x1}], 0xbf, 0x0, &(0x7f0000000240)="9f13a3153e260ba434f37e4a8839bff68bce16b1578e2c328784b07334a91942dc8e25c3e6a485e0c82053819a31cfe0b40f02e16020ec543cdafa74814d2838f5014efa9e833dd558d9c00b1cd2864902fb82984c90e37bbd11b578bee74234b90b8a1f872e082b391480bbb7c7ab76109c993d2ba24acba6b5fb08065c715d0c5ec8eaf093d2843ea55aa3b1d87d954f9b40ee4b29367346e04a26d85be36bc43a09abdbfbb2c77a91a08e573f56c7ab80942fe5dd1d6d14f7e7977288f7"}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r1, 0x0, 0xffffffffffffffc1, 0x4, 0xee1}) 14:47:14 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000840)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000004ef479fa136e2554bcd4d319cd523f27b49e2f652ab3277764d540f73b8706bdd302ea8d8464214ec87f262f4d2dbc8f5fc600b26755663a422a5bcd196d51ec4dd26a32adb145e217fab0dadade3c60dc2ccc7a7562aee9a2f6bd883681d4fe00b74e84655c87bf65eb8674d9d22869fbf25089164bd60b8ee02df9a964d03b0307962f09005955f1066337c31d0d5efaf4ae1b1e66a44cda0209c292bacd838b"], &(0x7f0000000180)=0x8) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x2002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r3 = gettid() fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(r1, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0400000c06000c01000000fbdbdf250700000a08006800", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="b4000f00888c540755304f93b8c7f07c8680117b72d6295c7c8cce7085c506bfda431cd137f6ac4819c02b34b45de0c42deefe921584c05899c5606d75197bd93efb1a7c4381216af7279a5e34261044226c1909c3738520267be2fb892a009d600d264c5f6df4f506cc100b1b971b0459955bdc9f5fa3057f00402150f15ad686f51cce4a15463c6245826e6910d51dfa49dc12e674d8a6a7dcc0b71028e1999347fedb1651e3517dda9b3dddbe472ef4802e0000"], 0x41c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000780)="399b2876e96b9eaa43e0288947a228130e8ee6a8e03b324dc3ed974ba68aa17b2b2679b372f1aa656188876cc5fb1fadc676c5d535c75cba118bbcc61efbfe93e10e50cd93b9702e032c96a6328a566b523eaec6629c533bae5b25ba1fa7abbe4b6ebd875d2217b4fe0e0d95b9351234d6224c392cbca6fa589675fcb2c0a5de496d9a8ae942c9c6a34f043b3e6a569ac723c8b7dc3d9af7a420c7c5", 0x9c) rt_tgsigqueueinfo(r3, r2, 0x31, &(0x7f0000000740)={0x1b, 0x8, 0x401, 0x5}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000000)=0x17, 0x4) 14:47:14 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x7ffff000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x68, &(0x7f0000000140)="06"}) 14:47:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 395.903858] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) [ 395.907825] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 395.921733] binder: undelivered TRANSACTION_ERROR: 29189 [ 395.940207] binder: 31069:31073 ERROR: BC_REGISTER_LOOPER called without request [ 395.941712] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 395.956426] binder_alloc: binder_alloc_mmap_handler: 31069 20001000-20004000 already mapped failed -16 [ 395.966196] binder: BINDER_SET_CONTEXT_MGR already set [ 395.971743] binder: 31069:31073 ioctl 40046207 0 returned -16 [ 395.972947] 9pnet: p9_fd_create_tcp (31083): problem connecting socket to [ 395.972947] 27.0.0.1 [ 395.978669] binder_alloc: 31069: binder_alloc_buf, no vma [ 395.992476] binder: 31069:31079 transaction failed 29189/-3, size 0-0 line 2969 [ 395.997063] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) 14:47:14 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x8000000000000000, 0x1000000020000) [ 396.022264] binder: undelivered TRANSACTION_ERROR: 29189 [ 396.033540] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000020) [ 396.046714] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 396.049172] binder: undelivered TRANSACTION_COMPLETE [ 396.241213] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 396.248352] FAT-fs (loop6): Filesystem has been set read-only [ 396.254353] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) 14:47:14 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x7a00000000000000, &(0x7f0000000140)="06"}) 14:47:14 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x3]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000300)='/dev/dmmidi#\x00', 0x3, 0x2) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000340)=""/194) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, &(0x7f00000002c0)=0x1) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000), &(0x7f0000000040)=0xfffffffffffffee6) umount2(&(0x7f0000000440)='./file0\x00', 0x1) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='hpfs\x00', 0x20, &(0x7f0000000500)="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") 14:47:14 executing program 4: r0 = memfd_create(&(0x7f00000001c0)="766d6e6565310034f2a7650ab6a98da7d84f4ad5b4b5b1f4d57512c0fdb3b7564c1184bf877fc0e6afebef11f70678bd284e7f9143581162f5405e69a03658e84f2665c85ad38d0373aefa3b017fd9c848df0929d23cd0cc6d7ba6bf14ceebeaa098e185216f18b3e8061de7bad7b51fee44527c2c8cce06cb6e96e6f8902fb88b4b2c25db1dc29d", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") write$sndseq(r0, &(0x7f0000000000)=[{0x5, 0x22, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:47:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="39707f", 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:14 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x1000000, 0x1000000020000) 14:47:14 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x6000000, 0x1000000020000) [ 396.325772] binder: 31108:31116 ERROR: BC_REGISTER_LOOPER called without request [ 396.333484] binder: undelivered transaction 553, put_user failed [ 396.339860] binder: 31108:31116 ioctl c0306201 20000040 returned -14 [ 396.347346] binder_alloc: binder_alloc_mmap_handler: 31108 20001000-20004000 already mapped failed -16 [ 396.361874] binder: BINDER_SET_CONTEXT_MGR already set [ 396.367927] binder_alloc: 31108: binder_alloc_buf, no vma 14:47:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0xfeffffff00000000, &(0x7f0000000140)="06"}) [ 396.368277] binder: 31108:31116 ioctl 40046207 0 returned -16 [ 396.373559] binder: 31108:31127 transaction failed 29189/-3, size 0-0 line 2969 [ 396.387061] binder: 31108:31116 ERROR: BC_REGISTER_LOOPER called without request [ 396.406007] binder: undelivered TRANSACTION_ERROR: 29189 [ 396.420586] binder: undelivered TRANSACTION_COMPLETE 14:47:14 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='veth1_to_team\x00') getsockopt$sock_int(r0, 0x1, 0x37, &(0x7f000059dffc), &(0x7f0000d8cffc)=0x4) 14:47:14 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x2]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:14 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/uinput\x00', 0x88000, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001500)={0x0, 0x80000001}, &(0x7f0000001540)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000001580)={r3, @in6={{0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, [], 0x21}, 0xbee}}}, 0x84) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0xfcc8) dup2(r0, r1) [ 396.432265] binder: 31140:31141 ERROR: BC_REGISTER_LOOPER called without request [ 396.445683] binder: undelivered transaction 556, put_user failed [ 396.455326] binder: 31140:31141 ioctl c0306201 20000040 returned -14 14:47:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 396.482074] binder_alloc: binder_alloc_mmap_handler: 31140 20001000-20004000 already mapped failed -16 [ 396.492207] binder: BINDER_SET_CONTEXT_MGR already set [ 396.497643] binder_alloc: 31140: binder_alloc_buf, no vma [ 396.503249] binder: 31140:31146 transaction failed 29189/-3, size 0-0 line 2969 [ 396.505240] binder: 31140:31141 ioctl 40046207 0 returned -16 [ 396.514524] binder: undelivered TRANSACTION_ERROR: 29189 14:47:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0xffffffec, &(0x7f0000000140)="06"}) 14:47:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000000)=ANY=[@ANYBLOB="7d15c470fd4f987fb913838dc671b3581e0000ff96"], &(0x7f0000000340)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000080)={0x7, 0x7f}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x103000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 396.531159] 9pnet: p9_fd_create_tcp (31152): problem connecting socket to [ 396.531159] 27.0.0.1 [ 396.540453] binder: undelivered TRANSACTION_COMPLETE [ 396.564752] binder: 31157:31158 ERROR: BC_REGISTER_LOOPER called without request [ 396.572495] binder: undelivered transaction 559, put_user failed 14:47:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x800008912, &(0x7f0000000080)="025cc80700045f8f764070") r1 = socket$netlink(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x4000, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[]}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c00ebff1f000d0800000000000000000a30140000000000000000001500010014000100fe80000000000000000000000000000014000100ff01000000000000000000000000000114000200fe80000000000000000000000000f5ff"], 0x5c}}, 0x0) getresgid(&(0x7f0000000000), &(0x7f00000002c0), &(0x7f0000000300)) [ 396.579704] binder: 31157:31158 ioctl c0306201 20000040 returned -14 [ 396.588058] binder_alloc: binder_alloc_mmap_handler: 31157 20001000-20004000 already mapped failed -16 [ 396.598641] binder: BINDER_SET_CONTEXT_MGR already set [ 396.604201] binder: 31157:31158 ioctl 40046207 0 returned -16 [ 396.611313] binder_alloc: 31157: binder_alloc_buf, no vma [ 396.616960] binder: 31157:31164 transaction failed 29189/-3, size 0-0 line 2969 [ 396.624447] binder: undelivered TRANSACTION_COMPLETE [ 396.630715] binder: undelivered TRANSACTION_ERROR: 29189 14:47:15 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:15 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x40030000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x10040000, &(0x7f0000000140)="06"}) 14:47:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="39708c", 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:15 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffffffffffffff0800450000300000000000010000001414bbac1414000808907800000000450000000000000000000000ac70141400719c8f9e7ce49b539fa4fcac1042622b63107a3dde5fc25ec88952b0fcca280000000000000000000000000000"], &(0x7f0000000000)) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$KDENABIO(r0, 0x4b36) 14:47:15 executing program 7: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000000)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f00000000c0), &(0x7f0000000100)=0x18) 14:47:15 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xfffffff4, 0x1000000020000) 14:47:15 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xc0000000, 0x1000000020000) [ 397.194313] binder: 31181:31183 ERROR: BC_REGISTER_LOOPER called without request [ 397.201981] binder: undelivered transaction 562, put_user failed [ 397.208572] binder: 31181:31183 ioctl c0306201 20000040 returned -14 [ 397.222791] binder_alloc: binder_alloc_mmap_handler: 31181 20001000-20004000 already mapped failed -16 [ 397.233451] binder: BINDER_SET_CONTEXT_MGR already set [ 397.238799] binder: 31181:31183 ioctl 40046207 0 returned -16 14:47:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x442, 0x0) r1 = userfaultfd(0x80800) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1000, &(0x7f0000000280)=ANY=[@ANYBLOB="746b0b20b7af497acbabdf7f9672614348ada64f3df1d1006377f40e2581b4d41822241d72da6a94f8e3c6f9f5f4aa3fc495dc04872ef9522b7be9ee67445db7c41e2ad04cc549283b0a538f9fef90", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',afid=0x000000000000000S,\x00']) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup2(r3, r2) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x80000001, 0x3, &(0x7f0000000480)=[{&(0x7f0000000340)="ff11cb84d449485b0be7e11783c6072b58b1c11d467c423b95fe3a160cf4da801af23d517842b30b8449135957dc08f692499048c13ac0707e227fbf684058b4670074d32a36a6dd1c032028cb16a0e2306ac720862a7df5f491beb754add982050a9857a83802a6a15e8adce1171fc63344103f85c99828021cdf37bd581f5aa253e4859b1bc7033fb1ade711171899b72554214d8a729ebc4df7beafe47c06dcc1d1ce6e54db6a", 0xa8, 0xba6f}, {&(0x7f0000000240)="5b5c7736c664a74f829fa9e4840359eb0a5a33540d46631aaeb82913bd43b827803e9074f9c3a4f802d981b244f22c067b24937b45fcef1612128dd257", 0x3d, 0x6}, {&(0x7f0000000400)="e316a2e5288032d3ddf25f8e585a832d488fb8e07d318e7de6e4f487c5f4fef340120b7ec6fb03bfde33f3481cb67920915ea6d12c6fd7a6ab70bf15342c6644e6f54e5e24ed0f05671f6b2208", 0x4d, 0x1000}], 0x800, &(0x7f0000000500)={[{@nodelalloc='nodelalloc'}]}) ioctl$KVM_IRQ_LINE(r3, 0x4010ae67, &(0x7f0000000100)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000140)={0x0, 0x100000}) 14:47:15 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xfc00000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x48, &(0x7f0000000140)="06"}) [ 397.244784] binder_alloc: 31181: binder_alloc_buf, no vma [ 397.250378] binder: 31181:31198 transaction failed 29189/-3, size 0-0 line 2969 [ 397.258407] binder: 31181:31183 ERROR: BC_REGISTER_LOOPER called without request 14:47:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 397.287348] binder: undelivered TRANSACTION_ERROR: 29189 [ 397.297323] binder: BINDER_SET_CONTEXT_MGR already set [ 397.302988] binder: 31208:31212 ioctl 40046207 0 returned -16 [ 397.311699] binder_alloc: 31181: binder_alloc_buf, no vma [ 397.317307] binder: 31208:31212 transaction failed 29189/-3, size 0-0 line 2969 [ 397.326228] binder: 31208:31212 ERROR: BC_REGISTER_LOOPER called without request 14:47:15 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x6000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 397.346706] 9pnet: p9_fd_create_tcp (31218): problem connecting socket to [ 397.346706] 27.0.0.1 [ 397.359654] binder: undelivered TRANSACTION_COMPLETE 14:47:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:15 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xec04]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025c3f0a00145f8f764070") r1 = msgget$private(0x0, 0x0) msgrcv(r1, &(0x7f00000000c0)={0x0, ""/118}, 0x7e, 0x3, 0x2000) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) r2 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x6, 0x80800) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) msgrcv(r1, &(0x7f0000000000)={0x0, ""/35}, 0x2b, 0x0, 0x0) msgctl$IPC_RMID(r1, 0x0) [ 397.388829] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 397.472979] 9pnet: p9_fd_create_tcp (31239): problem connecting socket to [ 397.472979] 27.0.0.1 14:47:16 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:16 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xe00]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x9, 0x4000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580)={0xffffffffffffffff}, 0x13f}}, 0x20) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000002c0)={'veth1_to_bond\x00', {0x2, 0x4e25}}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f0000000080)=""/206, &(0x7f0000000200)=0xce) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000005c0), r3, 0x3}}, 0x18) 14:47:16 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xfec0]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x8, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) [ 398.039957] 9pnet: p9_fd_create_tcp (31260): problem connecting socket to [ 398.039957] 27.0.0.1 [ 398.104074] binder_alloc: binder_alloc_mmap_handler: 31208 20001000-20004000 already mapped failed -16 [ 398.115800] binder_alloc: 31208: binder_alloc_buf, no vma [ 398.121444] binder: 31208:31276 transaction failed 29189/-3, size 0-0 line 2969 [ 398.129463] binder: 31208:31274 ERROR: BC_REGISTER_LOOPER called without request [ 398.154676] binder: undelivered TRANSACTION_ERROR: 29189 14:47:16 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xb2, 0x1000000020000) 14:47:16 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) open_by_handle_at(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) 14:47:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="3970ff", 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x7a, &(0x7f0000000140)="06"}) 14:47:16 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x2e00, 0x1000000020000) 14:47:16 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xfc00]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:16 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$int_out(r0, 0x2, &(0x7f0000000180)) r1 = socket(0x11, 0x80002, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x30, &(0x7f0000000000), &(0x7f0000000040)=0x8) r2 = fcntl$getown(r0, 0x9) sched_setscheduler(r2, 0x3, &(0x7f00000001c0)=0x4) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000200)='team_slave_0\x00'}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f00000000c0)={{0x6, 0x3}, 'port1\x00', 0x2, 0x120c65, 0xfff7ffffffff0001, 0x85, 0x9b, 0x7fffffff, 0x212, 0x0, 0x4}) [ 398.200339] binder: undelivered TRANSACTION_ERROR: 29189 [ 398.236797] binder: 31288:31293 ERROR: BC_REGISTER_LOOPER called without request 14:47:16 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xa00]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x6000000000000000, &(0x7f0000000140)="06"}) [ 398.249134] binder_alloc: binder_alloc_mmap_handler: 31288 20001000-20004000 already mapped failed -16 [ 398.260032] binder: BINDER_SET_CONTEXT_MGR already set [ 398.265502] binder: 31288:31293 ioctl 40046207 0 returned -16 [ 398.271938] binder_alloc: 31288: binder_alloc_buf, no vma [ 398.277561] binder: 31288:31300 transaction failed 29189/-3, size 0-0 line 2969 [ 398.286000] binder: 31288:31293 ERROR: BC_REGISTER_LOOPER called without request [ 398.316832] binder: BINDER_SET_CONTEXT_MGR already set [ 398.322238] binder: 31309:31311 ioctl 40046207 0 returned -16 [ 398.322242] binder: undelivered TRANSACTION_ERROR: 29189 [ 398.334529] binder: 31309:31311 transaction failed 29189/-22, size 0-0 line 2854 [ 398.342566] binder: 31309:31311 ERROR: BC_REGISTER_LOOPER called without request [ 398.344420] binder: undelivered TRANSACTION_COMPLETE 14:47:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8001, 0x8100) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mmap(&(0x7f00005a1000/0x200000)=nil, 0x200000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000100)) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x0, {{0xa, 0x4e22, 0x1000, @loopback, 0x6}}}, 0x88) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x41032, 0xffffffffffffffff, 0x0) [ 398.557264] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) [ 398.564412] FAT-fs (loop1): Filesystem has been set read-only [ 398.570468] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) [ 398.584814] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 398.597054] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 14:47:17 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xf5, 0x1000000020000) 14:47:17 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000004c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000480), r1, 0x0, 0x1, 0x400000}}, 0x20) rt_sigprocmask(0x0, &(0x7f00000000c0)={0xc09}, &(0x7f0000000100), 0x8) 14:47:17 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xff00]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xfffffffe, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="3970ff", 0x0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:17 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xc003000000000000, 0x1000000020000) 14:47:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xffffffffffffffff, 0x6, 0x0, @buffer={0x0, 0x1b, &(0x7f0000000200)=""/27}, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000080)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYPTR64], @ANYRESOCT=r0], @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESDEC, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES16=r0, @ANYRES64=r0], @ANYRESHEX=r0, @ANYRES64=r0], 0xfffffd3a) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/33, 0x21}], 0x1) 14:47:17 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x9]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:17 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fcntl$notify(r0, 0x402, 0x1) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), 0x4) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x7, 0x507b, 0x4, 0x0, 0x0, [{r0, 0x0, 0x6}, {r0, 0x0, 0x7ff}, {r0, 0x0, 0x7fff}, {r0, 0x0, 0x13}]}) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x100, 0x4) sysfs$2(0x2, 0x262, &(0x7f0000000140)=""/219) 14:47:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x2, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:17 executing program 7: syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5, &(0x7f0000002300)=[{&(0x7f0000000080)="770c456cb3c458f4eb3fe72afd24c5f537efc85111046e36a2b9312d2ccf0d78fe06c280f36b3dee8c25ccb1c67941b2c8e4075b11496ae2210bed93f59aa341d9482965e9dbf9f2414e40d050bd31ea69c81d8bf4815fbc3b76d801de8df20b3c82893c3bf4c335de4930a8d85c86ce711b70da1cdc2aec3d4e780cf0f87f2ca0df3862b1", 0x85, 0x2}, {&(0x7f0000000140)="28371a5de332b51bed8ef66266cd8b76b5282c40776ea547fddbd32e778deeaa9d67c2a986b352ff269398475bf447c57265fa03b7afabc21f0bdd316bef2abca632068df9c01119adc14ece1278a683da7fab9f5e8a2fd8bcb64dde86d3438f3396762adecf41f27013c833e1e7cca8b42986b8e1c5052a5a80d2ef01b2962de1c55f2a4420e11c15563acac64c8111302f3a08d121b90b83a2df227e79ec83620563e1f8532f1fcddc841a6490f25a0bb04f2179082dc9d92ad26c32aec41ef7d10e3952d9136f9b8ba7f5fc74c7aeb16edaae452cebd49a51d8cd31c4bb28b65b3ba10942872152553e39009e5104f30c0bdf667fe7e1d6e9278475f43c7f3ca5afeee1aa934ccbd2c5d4fcf9808da66edf1ec35552a49e1b89095fcce800ef1acab34bd3b9428bd66203a85a7ce3653f905ea4dc4a2305a9e434c92b864e3a91fa7ed14211963019ba06b474508e901fbbad7392c8e7c41c8eb040984c5e803133ac9b110d9e76df43d53b4ff3c3d5db37f808cabbc3d26fb9ba7e9fb4fa919d0abcce8af5d3ce4d6d2f32ee3c4a1eaa4d22edc44ee95860dbebfe96ce774c995310eb5b17d14be15346fa20e9e32d7d1a6c1bd47da22dfc303e03a83fe8b129835f031d73ef13094014ac8382825db0c494b15e1e7f2260e49ce13c5cf2acd534d0e634f53de69fbf0f70ebf6e9548668b3a00f050814be932dc5256b02cb6d4dbda84b8742f21f540aa680e2cf75d648f0c82ad4f935a7ccb8154a3950de63a0ca888c72de98207a4544d5a4e9df7c0dd5efce5cf57d809998e1f18a24bcc1c55ed0c04d2540e1d4d07117a4933e3210271eb17a734842860270ac2478c5aa7d9fe028aeb576ba7ff57dcc0e0286ac72ab1a41580b79490dbb632af9912b9785beab5bc9e1566ab715afc665275f8ba1c16b794c14deab7ed91f5cabe27c253846e2feddfcaba72eed64a419a9f6f738b19a1b33d38799c0d91a3eaf1c7aa4a8f83c5dc7edb6f5301226cf51f31238e265250947cd70e6f841c742b16348bddb08b4927b33d65d2aabe9624d8c22e7de05f19f4078dfc6c13d885d6f58eeb7686107cf2ed3e599d8f7beb88076b21a8fc7c6d514616cc58c87b96b9fd9a184109acadb997085dd9dc92dddf9ebbfb912e5f673610c2f71eeac09fffe5a451a1e171777efaf4bbcb99a3732f67e30c7a12cddb7a1230f676649c5ae97e038ed20f2d2b2fd45450e1682fcf039cbe7a4c841f432cd4cd1ffc4dec166ccfe1d505fbe7ed483e4e1dc4cb615df0e5ed0bbf62a9bf67ecf8b3a9f814136149fb85a0a73037c107d2d99b2334d70ea3b0238d3acd8abe6a21839576f86b10299db2aa3d4c3a8b9a9b3cb6efc280d0185f7b19cb1c2f720995d70b0aeb1dacae2911cf4b0f01adc151ade162b30038dd00e95e0c8cd037cd393b1492941b7d9992675f7c96009718c5a330cbb5e72419cd60924833684725ccf16d8dca0fda132a0367a93e439c5286aacd9380b3bedfc8a6618c1f9e85bbcd0697a7e058acfa5c0f38af81aebb147abee805e97ffe853e1aecebf261d7f036ddeea7fc0a335c1ec7e85497764f9944363710dcaa87e0cb781dee81ca6ac33ed11c72ccc3541182f886e50cd6610666c4c4508b4654fac7a2a264f8cdbc901647b742ea7a004ca209619c7eae81bbfb05f0b1199e5c952d2c98229247ef059bfb49c22df72e9b0e67fd7b3d487615d5d972ed53c95b389464dd5be151cb332f3c086d126229f2d1d7c70480c8cd877041585607417022a6e33de602a3d2fbbc199b73587dbe609f546dbc2c7aaff277ac29fadcd5a60d0905e2792e494ddf9261a0c27fa0d8ebb417e0260e1fd7228520028feabf1f1b46b829c9f9c2c07350e63eea17bbc9f36ba666fcc54741c3119fb1463e15216f28c9ef97b985b64900e6d2c09bc0658d70b490fd68f55f0649c45d6a837411ae8dc7b454b1f8cc56659cfeb2b7869821f90c71ba8c4b61632118adaf40ac52000d2416e65c42e733fd75af84f08b3c094c799413ec67b8a15be1d15ac619e1f3592c2c2f77f8c0c2a2617a9d1bf30c6023ff3bb54dc22c43567d6369813193dd055afc0cbe6a2d3325d2176f03b0993d0daa60b54929900950e3f779cb135816fe813a70b3e8b5b64b2a396c79689b7bb8478a6e2dd3bba5d5473cc05a57217e842c8f2b46ead4d1761d132265ed0f43bfa3433ea3a9e3e90c494163535fb92866ddd30c5580197d09802aedad875d382d15f338cba78422214248f1ea4088caecb9a2f3cd0d047b0e36325561bbbeb3d6783685a8509e8bec41b298a7bfda32ee12fcd465a01b2bf7a742176a6d874bb1e560f2a85e4b530133308f66666660d86a98915911f72e79b8b08e07fd96be1f45c3a895176761f2e57b9904ff106a2439558685b467ff7f3a89cd64f965f0bb3180c3a5b78214f8e9824737a3d3d7e831ddcd8fa8855b1472f0203cd54316c59c4008e32f608407ea22a2b558ab50efb00f5982f5c9b6410836e1f3cb600a20501db91f45a4a0cc4beb42fac60db8a8407a2cb61cd947911f096ab778e23fd68197cc73ccf0baaaf90a66fbb12593a89d0f34906eed031514b663d58d428af03dd263d5231799be51e6323f1db9f41b6afc05dcae93303bbcc5a16f98b1282f4a75df6e7cff8c2738310f2b17b8b7c9b8e154cee62020ed9d04223980ab9e4ade390ae43cd2904bfa272cd67978cdf3dbaf6ab578d19c49401d484b2069c2073f575dd89ad518ce3b0eee93296cbf880eed8d2e4b607848c5a617597a8c911eb536ce7be4bab1b3dc951d4176a7e3c87f9642bc721df7b1f7ac39cdcfc5dcd469fc6a18e11ba663b22240cc9ee5503aec729c5bca536df9b77f232de161f7ca73d3fbc13b97159822630cfbd5beb9365c8f85a1e008571246d90735f73621b7e405b7eed2503fc4f4888a9c4b45f78ad28e56269100268cb2680e2784ee334e0952486e30784df71c8e71872da4311c3aae965c8ae952c3e7be5f9ada99624ba5d929d988446887788d100891074544be75ccba434e75a93a5a96fc3a5b785b1cf7950eb2df2c7a3ef06771f2a9026c2dea8e8b0db9ec2076e7c4b433a1a5e3f7147b0249aaf2de9231f798c3fb468bba23146aed15e35ef08060aa41ed3337ce8485ddbcd74cb9fb5e5dc723ad7aa41b999c7e9700b25905f3ff7ad8b259d929623e90f7d52f2ae28702a034309e377cfb457c101f856f24402a3e635d0495fe8507b3b33c5653755074124e5b8621200a69a0293b165021ffd80651c679fab710354d33f50140a49e00ab19cf1e6395a18560743d74a2b524c56fdf621b83cadb618597250800af551d66c2d5dde34d62d53e27e6c9563dfe723ce737d49139e3bddbf13ba59eaf2ab925988331b2b5c28f46b2dfe58790d34488fac0edc6ec7af989bafde96ea3a1465811ce04155a419803fbb5e4312092c5f4b48da9304e81bfb192a7683e06a926e26e37cd00dffce119a589d6bf9443a18049fc1a90f18981815a694d1b900fbb7862f9a6fc1923537c0dedc4d9ce2d87de62b1f858ed168dd941275cbc8032ca78e3a6b635889427b762941e7f383ac22309f637dd9edac3e05128ddc07e12d3539b22d503838bb353142b751c098ca9eeaedf7a4b67ee864e5aeafee2e53f415eae458ee980f9cca76b2ba708ecee6bd070f6a3785fffba767c2aa136d4f5f164553fad080667373be9051ecf7fd2830ec8caa051c7493410c54d8efbc93aea47fb906e2120bf95add4584dfc67a660a05bca4b15c87db16196e2a4da101b6f8fdef25bb05542a19a99e17a9bd6b1c8db46451c1d67a2afc87c49bcf0cf9219f398f599e3ded4de3a9af56b4ffc6643f17bd07372da09d6796e1e015f3cb44c42978f40c916ce43d4cfc002777636fbe5d3db54b3e3be32064b2a57f3da259f7a87752e16337ba19b832d57d39454e70e1a898aad49f39661526572b0b13fc3961e5071e1f0a335a1063487de40eebd2530ce6aa3980959702a60d5707a5743dd9c197385d4f45d1d5f1d43f4d6e4ba1a10f82eb85bcf8ab48c9a56998fef8e90011f3e1073a57bca860199c5770f3464b159d5ab8d0e2aea783f58841ff3f4d16a5efbd06c20e96d4bdb9da0eb91314c1e658b1541560cc9a2e598f28a78518a7f7a3de0c74dde35af1b955a0ed58b4ef1ea76269bc6c838bfa1e229f0f4189ba1143869703cd0d7af359feaff31df012b7d96c3d79ca0df7640841a7aa58bec84ad8339356940895943959222713d370375462d3400580ec2a93eb628cc8f1db3d7f0bf057bb22dcc2f6b7886901a540820b57c97e32d3432eb6b5e8ccb375535e79a6a9a3b1d4beb391516f452b00d8238e1737b8224801a434027de0c67102ed7ca73c6fb85575def4a939df225b69f846260ac62cdae44bbc9c437a16d9dc0c72da74c7376fd589b099ec44212988638eccceb3785ccf353c217e85a52cf87966d592740513f15ed4b5210c9d293a0d49a53bee26f44483ace82e03cefdf91ad5f1c0f0e0d77f559ee75d0f648c28122f29dd081c45a6040426a5ff049e07e9ef27c8dc302a13dde6161fc83f2e1665175ffa2a45da6152e215925d979da9199aeb7836d4a8527c43cfbc0eb55e7a6dfc35ba6f6cae76bfe2db5bd92011c295f359b7fe5aae1e04d450567f197d562cff55861a5442e7779202b1aa093b34992048441762db829ae3b67c4d0ccb335b95a646460b47b59fc8841cb3095578cc2f20841bf56f4402ccab65ed9e23afb839bae21f8f1d081b5e314c93d7cad2bcd9a95dc5dfe50db9c9f6e292eaf78274b64679ae2e4c952cb4bbace87e830f9082aed7020e88bf18b3212f6958f939de249f55270b08baffb6db5b954977ead246a7f581c0fce518c3f95779a46f0c7b055aadb99c28a024be36e656f8649d1bf4366335c4c4a6bfa15c9798454fb3a443a7f8ab8ad7ad096628165f1555d306221d2108c019981a2df1cfa572588402caee01d9036ed7ab0b6c7641275d551e4b08a99853c79f2f1582c8b48d10306af75c162381e6a83d26745f9809d48f99b297595328ce36407641f6cf9a1bf30e055dc20f24593f8bdb8b60d50bd4160c8e29fcdb4fa0dceff9ebac30877a8ccd2f0360899ce29ad8ed2e372edf79612ec429129e426ce0ffd3e79b4e38174ddd13a3288f982214c46fb1c295083d56fb1a60ea2b82ed00267d2301d8e857a69da7ba66f94a102df41a3101f5db5ae7b586600e0e7d81e7aea8f0bb7df1b36f30f8516d215ca447a1b406746d53817c7f557a22e42972b250bdab7b077f81c82ce8c3eadc9194fae3e01fe23dc53ec91979d51bfebf7b3582bf8734b4884f631dac5e0b48fc059d44025bf49ea36c7259f38bdfe2b082c47593697bdacd4f7084472910c6ddf9cca456ba82cc5294f91f92c038464e95c38f53463c9fc61f39a6f9acc29e2d89211956089f8d6c44358dfa7e9497b876d6825a979a16338641124149986989c55fbfca54c4cd414a108026e701bb38bae66e2844ae50ac35a661844a4466e129e472028491a48a6db16e2658ba8a6a1bbcf77aebfece613b99eba261a7f573388cc8ab99d70b2d6123d6bd2cd65c698f12f99f801ea0198a13207069809e2b859c45dff5839348c46f48da55164c076a5e109796985e64d6f533c5cf285031bf9e670c6a94f98b8f114adabfc5f96551adad0410893b36fe1ceeb9cffd2706797aec5e1a1d7e2b7222aac5a1e0cc44e11d613e59d5990eafe778b3a1", 0x1000, 0x9}, {&(0x7f0000001140)="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", 0x1000, 0xb5}, {&(0x7f0000002140)="ceb860bce55789d7f5170f37fbbae6cfd447af775410a2bdd7d5b95ff3b6468051567eabfcba98171bda9b1bfe7040357f99ce204831956b0a06bab1d6e6b24f1beeb2e4a79391631135728589d800d3f9464d9b4d2998d3458d3e93fa8f74a791f17908cbcdd2dcad848f8838caa17b2df3525bd94e8e846d34dbf9482811ae000ffb1530f362ce4c19e8aee0b4189a39963da0964197fb6f9f912d6a41e23b9f0684c07888683fa755f4d7fc9b1229e793d8dbd69293822d66dc0a", 0xbc, 0xff}, {&(0x7f0000002200)="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", 0xfb, 0x5}], 0x40, 0x0) r0 = socket$key(0xf, 0x3, 0x2) getsockname(r0, &(0x7f0000002380)=@alg, &(0x7f0000002400)=0x80) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002440)='/proc/self/net/pfkey\x00', 0x10140, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000002480)) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f00000024c0)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000002500)={0x0, 0xb9ce}, &(0x7f0000002540)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000002580)=@sack_info={r2, 0xfffffffffffff800, 0x5}, 0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000025c0)={r2, @in6={{0xa, 0x4e23, 0x2, @mcast1, 0x5}}, 0x7, 0x1, 0x8, 0x3}, &(0x7f0000002680)=0x98) r3 = semget$private(0x0, 0x4, 0x4) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000026c0)=""/167) write$FUSE_GETXATTR(r1, &(0x7f0000002780)={0x18, 0xfffffffffffffff5, 0x2, {0x5}}, 0x18) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, &(0x7f00000027c0)=0x9, 0x7, 0x4) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002800)=0x0) r5 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r1, &(0x7f0000002840)={r1, r1, 0x80000000}) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000002880)={0x4, 0x5, 0x10000, 0x1ff}, 0x8) recvmmsg(r1, &(0x7f0000007500)=[{{&(0x7f0000003000)=@sco, 0x80, &(0x7f00000031c0)=[{&(0x7f0000003080)=""/158, 0x9e}, {&(0x7f0000003140)=""/73, 0x49}], 0x2, &(0x7f0000003200)=""/217, 0xd9}, 0x4}, {{&(0x7f0000003300)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003640)=[{&(0x7f0000003380)=""/79, 0x4f}, {&(0x7f0000003400)=""/59, 0x3b}, {&(0x7f0000003440)=""/120, 0x78}, {&(0x7f00000034c0)=""/214, 0xd6}, {&(0x7f00000035c0)=""/117, 0x75}], 0x5, &(0x7f00000036c0)=""/27, 0x1b, 0xffffffffffffffd8}, 0x3}, {{&(0x7f0000003700)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000003780)=""/129, 0x81}, {&(0x7f0000003840)=""/205, 0xcd}, {&(0x7f0000003940)=""/87, 0x57}, {&(0x7f00000039c0)=""/110, 0x6e}, {&(0x7f0000003a40)=""/196, 0xc4}, {&(0x7f0000003b40)=""/112, 0x70}, {&(0x7f0000003bc0)=""/76, 0x4c}, {&(0x7f0000003c40)=""/212, 0xd4}, {&(0x7f0000003d40)=""/166, 0xa6}, {&(0x7f0000003e00)=""/4096, 0x1000}], 0xa, &(0x7f0000004ec0)=""/4096, 0x1000, 0x400}, 0x1}, {{&(0x7f0000005ec0)=@nl=@proc, 0x80, &(0x7f0000007440)=[{&(0x7f0000005f40)=""/91, 0x5b}, {&(0x7f0000005fc0)=""/4096, 0x1000}, {&(0x7f0000006fc0)=""/55, 0x37}, {&(0x7f0000007000)=""/153, 0x99}, {&(0x7f00000070c0)=""/27, 0x1b}, {&(0x7f0000007100)=""/154, 0x9a}, {&(0x7f00000071c0)=""/33, 0x21}, {&(0x7f0000007200)=""/19, 0x13}, {&(0x7f0000007240)=""/241, 0xf1}, {&(0x7f0000007340)=""/237, 0xed}], 0xa, 0x0, 0x0, 0x6}, 0x6a6}], 0x4, 0x20, &(0x7f0000007600)) fstat(r0, &(0x7f0000007640)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000076c0)={{{@in6=@mcast2, @in6=@loopback, 0x4e20, 0x0, 0x4e20, 0x0, 0xdc4a7ee462d1b4dc, 0x80, 0xa0, 0x0, r6, r7}, {0x8, 0x8, 0x94f6749a0000, 0x4, 0x100000000, 0xe6, 0xf5eb, 0x6}, {0x5, 0x1000, 0x747, 0x1ff}, 0x5, 0x6e6bb0, 0x1, 0x0, 0x2, 0x3}, {{@in6, 0x4d2, 0xff}, 0xa, @in=@local, 0x3506, 0x0, 0x0, 0x3141, 0x5, 0xeb, 0x1}}, 0xe8) getpeername(r0, &(0x7f00000077c0)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000007840)=0x80) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x2) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000007880)) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000078c0)=""/63) pipe(&(0x7f0000007900)={0xffffffffffffffff, 0xffffffffffffffff}) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$TIOCGSID(r9, 0x5429, &(0x7f0000007940)) sendmsg$nl_netfilter(r8, &(0x7f0000007b80)={&(0x7f0000007980)={0x10, 0x0, 0x0, 0x8403000}, 0xc, &(0x7f0000007b40)={&(0x7f00000079c0)={0x160, 0x7, 0x1, 0x20, 0x1000, 0x25dfdbfd, {0x7, 0x0, 0x8}, [@nested={0xc8, 0x92, [@generic="226d7322b21e3f30586f522c80eeef88e08b417c64158250ddd5e678f0c8587ecafe4c437605c99826c18f535d8f973858876602a7c0abd3db14a45939cfc3561822893f942bfcda93b99a7260fa821b6e22d95706edf9d94d5276d50547c08acdb6f2fa3ecc79b17c9706cf191cf5dc5f78bcdb8861132f11ae7c19d9e495362426a3651c1a3999b065a8491b5f830eb022e2b274cef215d16764e0255102c28ee40e1eb6f648c4c6fb793cd03f577605ce7e8f", @typed={0x8, 0x66, @pid=r5}, @typed={0x8, 0x42, @u32=0x4}]}, @generic="08f5ecd840c4d333badc2bf210ba88923bb997c3e8d90b5323ab7ae3faf878389612350c36594d8951adcb281bb368e453222e94a956f16c8777bcf3a27da448e17e2401cde4dafba6f36620c6f9c8cb4f9722be263b87fe02a5d37cdc83029f", @typed={0x24, 0x14, @binary="aaa717269cc9b98a46164a143ee331d079fa4a04fa7a2cdd4cf54d817b79feed"}]}, 0x160}}, 0x8084) openat$full(0xffffffffffffff9c, &(0x7f0000007bc0)='/dev/full\x00', 0x400, 0x0) [ 398.976054] 9pnet: p9_fd_create_tcp (31379): problem connecting socket to [ 398.976054] 27.0.0.1 14:47:17 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x2000000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x6c, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 399.083647] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop7. [ 399.116462] binder_alloc: binder_alloc_mmap_handler: 31309 20001000-20004000 already mapped failed -16 14:47:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x4800, &(0x7f0000000140)="06"}) 14:47:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x4800, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 399.128970] binder_alloc: 31309: binder_alloc_buf, no vma [ 399.134644] binder: 31309:31397 transaction failed 29189/-3, size 0-0 line 2969 [ 399.137055] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop7. [ 399.149704] binder: 31309:31396 ERROR: BC_REGISTER_LOOPER called without request [ 399.161806] binder: undelivered TRANSACTION_ERROR: 29189 [ 399.186680] binder: 31402:31404 ERROR: BC_REGISTER_LOOPER called without request [ 399.195366] binder_alloc: binder_alloc_mmap_handler: 31402 20001000-20004000 already mapped failed -16 [ 399.205450] binder_alloc: 31402: binder_alloc_buf, no vma [ 399.205463] binder: BINDER_SET_CONTEXT_MGR already set [ 399.211048] binder: 31402:31405 transaction failed 29189/-3, size 0-0 line 2969 [ 399.224415] binder: 31402:31404 ioctl 40046207 0 returned -16 [ 399.227725] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) [ 399.237553] FAT-fs (loop1): Filesystem has been set read-only [ 399.248133] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 399.255296] FAT-fs (loop6): Filesystem has been set read-only [ 399.258064] binder: undelivered TRANSACTION_ERROR: 29189 [ 399.270038] 9pnet: p9_fd_create_tcp (31407): problem connecting socket to [ 399.270038] 27.0.0.1 [ 399.275509] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 399.286614] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) [ 399.289474] binder: undelivered TRANSACTION_COMPLETE [ 399.299415] binder: undelivered TRANSACTION_ERROR: 29189 [ 399.326532] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) 14:47:17 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xfeffffff00000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x68000000, &(0x7f0000000140)="06"}) 14:47:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x9, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:17 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x2d, 0x1000000020000) [ 399.340338] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 399.377029] binder: 31418:31424 ERROR: BC_REGISTER_LOOPER called without request [ 399.377236] 9pnet: p9_fd_create_tcp (31421): problem connecting socket to [ 399.377236] 27.0.0.1 [ 399.384683] binder: undelivered transaction 577, put_user failed [ 399.404424] binder: 31418:31424 ioctl c0306201 20000040 returned -14 [ 399.415596] binder_alloc: binder_alloc_mmap_handler: 31418 20001000-20004000 already mapped failed -16 [ 399.425757] binder: BINDER_SET_CONTEXT_MGR already set [ 399.431790] binder: 31418:31424 ioctl 40046207 0 returned -16 [ 399.438977] binder_alloc: 31418: binder_alloc_buf, no vma [ 399.444609] binder: 31418:31428 transaction failed 29189/-3, size 0-0 line 2969 [ 399.452081] binder: undelivered TRANSACTION_COMPLETE [ 399.460055] binder: undelivered TRANSACTION_ERROR: 29189 [ 399.579235] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 399.586398] FAT-fs (loop6): Filesystem has been set read-only [ 399.592408] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) 14:47:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:17 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x501400, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f00000001c0)={0xfffffbfffffffff7, 0x3, 0x7ff, 0x7, 0x5, 0x4}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="66baf80cb89cc35484ef66bafc0cb0d9eeeadfa36e063401662ef20f1b2366f20f011cc7dac20f0093be0000000f080f20c6c4c175f1d7660f66e4", 0x3b}], 0x1, 0x21, &(0x7f0000000180), 0x0) getpgid(0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000080)={0x40000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:47:17 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xb400000000000000, 0x1000000020000) 14:47:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x800000000000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x7000000, &(0x7f0000000140)="06"}) 14:47:17 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xb800]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:17 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x2000000000000, 0x1000000020000) 14:47:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025c3f0a00145f8f764070") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000280)={&(0x7f0000000080)=@in={0x2, 0x4e22, @local}, 0xffffffb4, &(0x7f0000000200)=[{&(0x7f00000000c0)="7ec4aecf5ff3fe855019f901c8dcc5e9bd691f69b843b6d83fe559d95569674da16c6d29e320644fba2f891610058797ac2b93127b82a19849643b1137152ab48a03e165c315852bee17b71260110a7da97a37195ef90534edebc23de0db819620eeadf9332da31d9f7ba4d5e782d43cba1395157e6df501209fe4978adcc32e104bb1e112b053df4a44", 0x8a}, {&(0x7f00000001c0)="f4df5c17c2", 0x5}], 0x2, &(0x7f0000000240)=[@init={0x18, 0x84, 0x0, {0x100, 0x0, 0x7, 0x8}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}], 0x38, 0x4000040}, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={&(0x7f0000000340), 0xc, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400ade1c74618b5a93d00001801000000ffffffff000000020000000000c382f2346d0b91d392c27505a0818807f9bd275c2524e62c2c1257fc9873284d231926de8b2aae296b93c8b9a0036c786783786d08bb7a5b89f876b60a04ce772a7e9f6f77eae1a091832c66b159e05f2495ee500374608882c17124cc7bb7e9c46a6988c0001a746c16c1ef66df95d6e954c3819e7bd56e85778d20239779c144029c7a8811334f6e97b52fdf6de186b54e9b7e762446c03e7db30859ac390532c0647da2aac5b1ffb3004a1c916e14926304e6975d8b1cef142f42488781292a40ce243cd71ecfed41449dd7f1e9fcba04ea9cea3ebcd587b3d2d4d71f74ac3e6bfab04e2a5ed83c92e8806a905ba25348f37c72428b4b5f99e962b490f1ce4f58f66aaeeca127bb5efcc3f30553a1e5b17113a7f5b872dd78317db570f627514291efb15cb872fa9ef55a4b4e678c1646cc4f4705d862d4c53ebbf9270000000000000000000000dcb346e15b16db8b1a1c2357ee4e89ec10bb4afe82"], 0x24}}, 0x0) 14:47:17 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup2(r0, r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000080)={0x1d, r2}, 0x10) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="24000000100007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63e674feb5bf1375ab975c0ac47b6268e3", 0x4c}], 0x1}, 0x0) 14:47:17 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) write$FUSE_LK(r0, &(0x7f0000000080)={0x28, 0x0, 0x4, {{0x9, 0x8, 0x3, r1}}}, 0x28) getpeername(r0, &(0x7f0000000180)=@hci, &(0x7f0000000200)=0xfffffffffffffed9) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x200, 0x0) [ 399.771726] binder: 31458:31464 ERROR: BC_REGISTER_LOOPER called without request [ 399.779465] binder: undelivered transaction 580, put_user failed [ 399.785843] binder: 31458:31464 ioctl c0306201 20000040 returned -14 [ 399.795455] binder_alloc: binder_alloc_mmap_handler: 31458 20001000-20004000 already mapped failed -16 [ 399.805481] binder_alloc: 31458: binder_alloc_buf, no vma [ 399.805982] binder: BINDER_SET_CONTEXT_MGR already set 14:47:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x48000000, &(0x7f0000000140)="06"}) [ 399.811108] binder: 31458:31469 transaction failed 29189/-3, size 0-0 line 2969 [ 399.816996] binder: 31458:31464 ioctl 40046207 0 returned -16 [ 399.824209] binder: undelivered TRANSACTION_ERROR: 29189 [ 399.846950] binder: undelivered TRANSACTION_COMPLETE [ 399.870151] binder: 31482:31484 ERROR: BC_REGISTER_LOOPER called without request [ 399.877991] binder: undelivered transaction 583, put_user failed [ 399.884643] binder: 31482:31484 ioctl c0306201 20000040 returned -14 [ 399.894720] binder_alloc: binder_alloc_mmap_handler: 31482 20001000-20004000 already mapped failed -16 [ 399.904614] binder: BINDER_SET_CONTEXT_MGR already set [ 399.910230] binder: 31482:31484 ioctl 40046207 0 returned -16 [ 399.910265] binder_alloc: 31482: binder_alloc_buf, no vma 14:47:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x400000000000000, &(0x7f0000000140)="06"}) 14:47:18 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt(r0, 0x100000000, 0xfffffffffffff801, &(0x7f0000000040)=""/184, &(0x7f0000000100)=0xb8) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000), 0xc, &(0x7f0000c8d000)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000030101000000b302aa9b9b788b3a26a05fba000000ff7f000000000002"], 0x24}}, 0x0) 14:47:18 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x1800]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x2000000000000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 399.921808] binder: 31482:31485 transaction failed 29189/-3, size 0-0 line 2969 [ 399.929816] binder: undelivered TRANSACTION_ERROR: 29189 [ 399.944044] binder: undelivered TRANSACTION_COMPLETE [ 399.958362] binder: 31486:31487 ERROR: BC_REGISTER_LOOPER called without request 14:47:18 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) chmod(&(0x7f00000000c0)='./file0\x00', 0x20) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206000000a84309c02623692500090003000200f0ff56039848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x10040, 0x0) listen(r0, 0x101) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000100)) [ 399.973461] binder: undelivered transaction 586, put_user failed [ 399.981904] binder: 31486:31487 ioctl c0306201 20000040 returned -14 [ 399.994370] binder_alloc: binder_alloc_mmap_handler: 31486 20001000-20004000 already mapped failed -16 [ 400.004501] binder: BINDER_SET_CONTEXT_MGR already set [ 400.010480] binder: 31486:31487 ioctl 40046207 0 returned -16 [ 400.030055] binder: 31486:31487 ERROR: BC_REGISTER_LOOPER called without request [ 400.049645] netlink: 16 bytes leftover after parsing attributes in process `syz-executor7'. [ 400.070025] binder: undelivered TRANSACTION_COMPLETE [ 400.134265] netlink: 16 bytes leftover after parsing attributes in process `syz-executor7'. [ 400.186440] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) [ 400.193629] FAT-fs (loop1): Filesystem has been set read-only [ 400.199851] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) 14:47:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)='\n\\') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000100)={0x616, 0x0, 0x0, 0x0, 0x3, [{0x7, 0x8}, {0x9, 0x80000001, 0x7, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2001}]}) fremovexattr(r2, &(0x7f0000000040)=@random={'trusted.', '/dev/vhost-net\x00'}) write(r1, &(0x7f0000000400)="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", 0x200) sendfile(r1, r2, 0x0, 0x10000) sendfile(r1, r2, &(0x7f0000002000), 0xffffffff000) 14:47:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x100000000000000, &(0x7f0000000140)="06"}) 14:47:18 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x500000000000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:18 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3d) 14:47:18 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xb6, 0x1000000020000) [ 400.523183] binder: 31514:31516 ERROR: BC_REGISTER_LOOPER called without request [ 400.531660] binder: undelivered transaction 588, put_user failed [ 400.538130] binder: 31514:31516 ioctl c0306201 20000040 returned -14 [ 400.547025] binder_alloc: binder_alloc_mmap_handler: 31514 20001000-20004000 already mapped failed -16 [ 400.558410] binder: BINDER_SET_CONTEXT_MGR already set [ 400.564099] binder: 31514:31516 ioctl 40046207 0 returned -16 14:47:18 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xffffff0f, 0x1000000020000) 14:47:18 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x700]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:18 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) unshare(0x10000000) socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8901, 0xfffffffffffffffe) 14:47:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xffffff7f00000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x960f0000, &(0x7f0000000140)="06"}) [ 400.583678] binder_alloc: 31514: binder_alloc_buf, no vma [ 400.584312] binder: undelivered TRANSACTION_COMPLETE [ 400.594872] binder: 31514:31527 transaction failed 29189/-3, size 0-0 line 2969 [ 400.614140] binder: undelivered TRANSACTION_ERROR: 29189 [ 400.667846] binder: 31537:31542 ERROR: BC_REGISTER_LOOPER called without request [ 400.675620] binder: undelivered transaction 591, put_user failed [ 400.681947] binder: 31537:31542 ioctl c0306201 20000040 returned -14 [ 400.693375] binder_alloc: binder_alloc_mmap_handler: 31537 20001000-20004000 already mapped failed -16 [ 400.704505] binder: BINDER_SET_CONTEXT_MGR already set [ 400.709907] binder: 31537:31542 ioctl 40046207 0 returned -16 14:47:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x4c00, &(0x7f0000000140)="06"}) [ 400.715989] binder_alloc: 31537: binder_alloc_buf, no vma [ 400.721585] binder: 31537:31545 transaction failed 29189/-3, size 0-0 line 2969 [ 400.729795] binder: 31537:31542 ERROR: BC_REGISTER_LOOPER called without request [ 400.742588] binder: undelivered TRANSACTION_ERROR: 29189 [ 400.768634] binder: BINDER_SET_CONTEXT_MGR already set [ 400.774522] binder: 31552:31553 ioctl 40046207 0 returned -16 [ 400.782455] binder_alloc: 31537: binder_alloc_buf, no vma [ 400.788144] binder: 31552:31553 transaction failed 29189/-3, size 0-0 line 2969 [ 400.797318] binder: 31552:31553 ERROR: BC_REGISTER_LOOPER called without request 14:47:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xffffff8c, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:19 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x18]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 400.835043] binder: undelivered TRANSACTION_COMPLETE 14:47:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ustat(0x7, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x2, @remote, 'veth0_to_team\x00'}}, 0x1e) r2 = shmget$private(0x0, 0x3000, 0x2000000000000010, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000000)=""/6) 14:47:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x7a, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 400.984004] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) [ 400.991248] FAT-fs (loop1): Filesystem has been set read-only [ 401.023696] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) [ 401.044349] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 401.045777] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 401.051565] FAT-fs (loop6): Filesystem has been set read-only [ 401.066391] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 401.072164] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 401.086556] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 401.094872] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000020) 14:47:19 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)="b5080000000000000011d2aa8700", 0x72edecd720c1478) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400000, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r3, 0xb1c, 0xef, r0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="672eff8b80e5660f38827e7b660feeebb96d0300000f32b8010000000f01c10f01df0f63757466660f38822dfd00000066b826010f00d866b86c008ed0", 0x3d}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:47:19 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xa]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x4c00000000000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:19 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xaf00000000000000, 0x1000000020000) 14:47:19 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x3f000000, 0x1000000020000) 14:47:19 executing program 4: pipe2$9p(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2a000000000000000000000000f40000000007002e2f66696c65300000000000000000000000000000004783757f08adcfc9194dae53161f62a8f90ba515e3624f1678ee8ce4a3bc4ebcdb94fb4a707a17d2e55d0db4f17ab51729714a6297108d872745e27e8bfce716345516a16a287503008fc4adf577972ba2ccfe974184b8718de8827cc67bc8f548508a63419e394c834ed86e8d0267d597e3b7c156d5043a"], 0x2a) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000140)={0x3f, 0x0, 0x7}) sched_setattr(0x0, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x4000000000, &(0x7f0000000840)=ANY=[]) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x20800, 0x0) 14:47:19 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) [ 401.447341] syz-executor4 (31584) used greatest stack depth: 14584 bytes left [ 401.463976] syz-executor4 (31544) used greatest stack depth: 14576 bytes left 14:47:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8cffffff, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:19 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xfffc]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:19 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000340)='./file0\x00', 0x32500, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0xfffffffffffffd05, 0x40, 0x1, 0x0, 0x0, {0x200000001}, [@generic="357b3cf766edbddf68be05ce22741f4f5fc219b62fea552ead2d9cedddb10256fd37e433e52bbcd0abf281cf840aa5f731a2dcdae58e293d3bd417a4aa4ee053baa833d90917b8a476956e555101094a12f11b0a4a6cfe1bc00f6305bb63548cb7a66bfb4e1bd2eb913ffc1ce3945c8946ea536d944f234b132472036015a3df6249ed7da5994244a63a31a5508d018bed53578dade59bacfe3f201a4cce81c0586059d415c2971fbe90f41203b3cd1b9f327965377278d7fb8ac3e39e63553770dea4168fc4ca44ff89"]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2) ioctl$KIOCSOUND(r1, 0x4b2f, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4001000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x34, 0x2, 0x70bd2b, 0x25dfdbfb, {0x4}, [@typed={0xc, 0x28, @u64=0x140000}]}, 0x20}}, 0x4004) 14:47:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x3fe00, &(0x7f0000000140)="06"}) [ 401.576789] binder_alloc: binder_alloc_mmap_handler: 31552 20001000-20004000 already mapped failed -16 [ 401.587377] binder_alloc: 31552: binder_alloc_buf, no vma [ 401.593050] binder: 31552:31613 transaction failed 29189/-3, size 0-0 line 2969 [ 401.601079] binder: 31552:31610 ERROR: BC_REGISTER_LOOPER called without request [ 401.621847] binder: undelivered TRANSACTION_ERROR: 29189 [ 401.629132] binder: undelivered TRANSACTION_ERROR: 29189 [ 401.647146] binder: 31618:31620 ERROR: BC_REGISTER_LOOPER called without request [ 401.656703] binder_alloc: binder_alloc_mmap_handler: 31618 20001000-20004000 already mapped failed -16 [ 401.667956] binder: BINDER_SET_CONTEXT_MGR already set 14:47:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x500000000000000, &(0x7f0000000140)="06"}) 14:47:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xfeffffff00000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 401.667969] binder_alloc: 31618: binder_alloc_buf, no vma [ 401.673350] binder: 31618:31620 ioctl 40046207 0 returned -16 [ 401.684827] binder: 31618:31626 transaction failed 29189/-3, size 0-0 line 2969 [ 401.693515] binder: 31618:31620 ERROR: BC_REGISTER_LOOPER called without request 14:47:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025cc80700145f8f764070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000100)=0x0) io_getevents(r2, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000)={0x77359400}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x20c08, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}]}}) close(r1) socket$can_raw(0x1d, 0x3, 0x1) io_submit(r2, 0x20000000000000cd, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140)}]) [ 401.738140] binder: undelivered TRANSACTION_ERROR: 29189 [ 401.745644] binder: BINDER_SET_CONTEXT_MGR already set [ 401.751222] binder: 31627:31628 ioctl 40046207 0 returned -16 [ 401.757854] binder_alloc: 31618: binder_alloc_buf, no vma [ 401.763499] binder: 31627:31628 transaction failed 29189/-3, size 0-0 line 2969 [ 401.780171] binder: 31627:31628 ERROR: BC_REGISTER_LOOPER called without request 14:47:19 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000100)="120000001a00e705017b00000000000000a1", 0xfffffffffffffff4, 0x8000, 0x0, 0xfffffffffffffc61) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/86, 0x56}, {&(0x7f0000003800)=""/4096, 0x1000}], 0x3, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f0000000000)=""/64, 0x40}}], 0x2, 0x0, &(0x7f0000003700)={0x77359400}) 14:47:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x300000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 401.788306] binder: undelivered TRANSACTION_COMPLETE 14:47:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x2010000000000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:20 executing program 7: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x2000000000002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000008c0)="ba2000ec0f01df66b9800000c00f326635008000000f300f01cfbaa10066ed66b95d0a000066b8c800000066ba000000000f3064f6a644d12e0f017b17d9f066b9e20800000f32", 0x47}], 0x1, 0x0, &(0x7f00000003c0), 0x0) [ 401.853982] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 401.861188] FAT-fs (loop6): Filesystem has been set read-only [ 401.878754] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) 14:47:20 executing program 4: r0 = socket$inet6(0xa, 0x4000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x1, 0x98401) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000180)=0x1, 0x4) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x2001f, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="f1"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"}) r4 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, &(0x7f0000000240)}) [ 401.909079] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 401.927288] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000020) [ 401.945326] binder: BINDER_SET_CONTEXT_MGR already set [ 401.961323] binder: 31653:31654 ioctl 40046207 0 returned -16 [ 401.990843] binder: 31653:31657 got transaction to context manager from process owning it [ 401.999257] binder: 31653:31657 transaction failed 29201/-22, size 0-0 line 2845 [ 402.011803] binder: 31653:31654 ERROR: BC_REGISTER_LOOPER called without request [ 402.033699] binder: 31653:31657 BC_FREE_BUFFER u0000000020001000 no match 14:47:20 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x31000000, 0x1000000020000) 14:47:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xf4010000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1020, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:20 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xa800000000000000, 0x1000000020000) 14:47:20 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x9, 0x40000) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000080)={{{@in=@multicast1, @in=@multicast1}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x40000010]}) 14:47:20 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xa, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x1000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 402.445679] 9pnet: p9_fd_create_tcp (31693): problem connecting socket to [ 402.445679] 27.0.0.1 14:47:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x7400000000000000, &(0x7f0000000140)="06"}) 14:47:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000e80)="66b88c008ec8430f01d10f20a03e66d17293c4e1fc117bd2660fe590387e000066baf80cb8e42ede86ef66bafc0cb806e60000efc4c20bf7b7004800000f00180f20d835200000000f22d8", 0x4b}], 0x1, 0x0, &(0x7f0000000e40), 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000f00)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000080)=0x2) r4 = dup2(r0, r1) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'eql\x00'}}, 0x1e) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:47:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x4000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x3, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 402.529652] binder_alloc: binder_alloc_mmap_handler: 31627 20001000-20004000 already mapped failed -16 [ 402.539424] binder: BINDER_SET_CONTEXT_MGR already set [ 402.545175] binder: 31627:31699 ioctl 40046207 0 returned -16 [ 402.551458] binder: 31627:31699 ERROR: BC_REGISTER_LOOPER called without request [ 402.559386] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 402.566550] FAT-fs (loop6): Filesystem has been set read-only 14:47:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x1f4]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 402.586698] binder: undelivered TRANSACTION_COMPLETE [ 402.594462] binder: BINDER_SET_CONTEXT_MGR already set [ 402.599825] binder: 31701:31704 ioctl 40046207 0 returned -16 [ 402.606070] binder: 31701:31704 ERROR: BC_REGISTER_LOOPER called without request [ 402.622874] binder: undelivered TRANSACTION_ERROR: 29189 [ 402.629417] 9pnet: p9_fd_create_tcp (31708): problem connecting socket to 14:47:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xe]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 402.629417] 27.0.0.1 [ 402.639825] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) 14:47:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000e80)="66b88c008ec8430f01d10f20a03e66d17293c4e1fc117bd2660fe590387e000066baf80cb8e42ede86ef66bafc0cb806e60000efc4c20bf7b7004800000f00180f20d835200000000f22d8", 0x4b}], 0x1, 0x0, &(0x7f0000000e40), 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000f00)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000080)=0x2) r4 = dup2(r0, r1) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'eql\x00'}}, 0x1e) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 402.746759] binder: BINDER_SET_CONTEXT_MGR already set [ 402.752313] binder: 31653:31657 ioctl 40046207 0 returned -16 [ 402.758588] binder: BINDER_SET_CONTEXT_MGR already set [ 402.777710] binder: 31653:31726 ioctl 40046207 0 returned -16 [ 402.787180] binder: 31653:31728 ERROR: BC_REGISTER_LOOPER called without request 14:47:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001a40)='net/igmp6\x00') bind$alg(r1, &(0x7f0000001a80)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha224-avx2,lrw-camellia-aesni)\x00'}, 0x58) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x187, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000250007031dfffd946fa2830020200a0009000000069effffffffffffff00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000001680)={0x0, 0x0}) r4 = getuid() stat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getpgid(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001780)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000001880)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000018c0)={0x0, 0x0, 0x0}, &(0x7f0000001900)=0xc) sendmsg$unix(r0, &(0x7f0000001a00)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001600)=[{&(0x7f00000000c0)="444a8abef07e345def3a1ed25d48338b98cc720cc91b95671773790815639d58e401f79aa658639b06adc1", 0x2b}, {&(0x7f00000002c0)="aae66a8f727537b41424968f07c2516c254c5cefe64b12c0e56b30ff640a6311afc65bd2381ac51272d64b151a667d0976b4a63f8a6fca9ab5bf11fb9b736745ea46d3ed39700d46c0990a1357cccfa273482290264fe5378625298b1e8652a600b43fa28d6022486034c3cf80d6ade95c102d06b898dd7674ad6e68c6279c3add086a358fed329cc55285bb514e9cf31bed6c70bbb0fc6ba84ec7981a089bb5061bf8f9db985fddeaaf362ecac0641a8b6dac07e1472c6f1cd867a6105c6a3bd0e3a65cd5e165a3699d", 0xca}, {&(0x7f00000003c0)="795eda7984eb4b1060fd315d68bd166d75eeb4b6d71709e6ed7d63c80836d9d485a973235f517e9e8ae77d57361ab12726d67fc379b729108a6df2e8c12a4f2c45aadddb5e0770b179c6e2cb04376fa9b379c5b182c92cbe39d3c9b85928b0d73996b0b39eb051492690a872f70e834a553a81c9d8f775fe9fe344df5d4cdfcf8c8f856bf8b8627320b3d545b83871069e1aaf6e06c87f926fca6574fb516929155166f96747f19ae212c86c3f80948546959f2970131cb5dea9f4910d15b909969724edfc56f38afb6c051ff07549a06d71124e6a", 0xd5}, {&(0x7f00000001c0)="c6c2faac7de57dfb496e5551df1e5a6f92911c197834fd11ad7e0f530552191010549055415f5353d1c7ea2df2a5f30a2faca851dee5fec09b9feb77c65fbbbad107af3e42377984458a4cc39fe49b76664e657a5520ce42946b7cc0c2800670ac13ca1900902ffd70a384f56013d856264248abd394ebb12b373a23232f3dc59108f1a076a436d945b9be02fd67ad0d7649f7c4", 0x94}, {&(0x7f00000004c0)="b718eaf60bf3f8e72a491dbc335ac4085f25f6c35d50e46630dc77f539899d43f8528c90845930516248d5e85768ea694ec878c9ef87d5ba63b866de818a4be02c50ce33786316c0c3192ab5a7253a438a96aeecc39f16de1652a725a943a9511f11557cfedc0f34d0442dfa08b2c5b9fb89a16d3d1385978cabba15a83133a30e0919cfc0fc51935dfcfdf2b4657aadf8cd92832cf9b0157f1fc9a93207c9eecebb19f864250bfb1028991cde4416306ab912e93bde93b4cc2c7581031be690ff119e4e2602c9badc9451fead43650556fc0c54cf974b2f2d0e51f4403a36d9f8d60dcc0dc0c643b9352c08a8", 0xed}, {&(0x7f00000005c0)="7110c02a8912b4a80e7b4e268f394e0934bba34e", 0x14}, {&(0x7f0000000600)="74d9147193fbf4acc0cc7ec68c9d93692e524965c8d405398a90deb9864ccc4220ca9c904167e4e8224bc8922498366e5fb837c114c19bcb236c22d9f87bf18ea1099ee721f139a73ae47390038964e32c01c7110c40ba5e1a1d48c7d5ebe96d8c770d5315f28b6988a1f631ee9de50269d4c8964464e0d04e6bfe2a0127bb1cab1a4e161e1b847a1d2c840c381f6b36ba639885f7df0fbb21a4fa417e1328235669c33235fe729dc314dfa8d752b01d522261ee9a230621fe358c7a0b2783fc8a48ae4892ef6f2d8101648b4880f39f0620232a6e266e1826776317037b1ca8d4e964403d62e249819a8a2cc99ef8fa0066b94de8e1d45986d11331ab601501d91363c94d55d5cd7c8583b8012e9bf70d58748bd7e2606e01e09ac05bf71a532baf59b911dc9e1f3a1bc0dc292ad1c2a234a2f2b683af8fbcb63679bd5cd35a918ff6fd531cb33c41c8a2fb1fb13af48c08b7ac5d6ae9feef279b8c7bf99457dc132b112fc9731522227c6ebd99483952f3a8eaca0b2b1406cb9949bd7f213f33bb37106b2cbc48bbb8b9c6a3cb1743f2657d067dfd9d0fc5fe59d4da6b97ce4c7a26b2afac8735f6652f90f06ad7c739348016d95aa7b6471533f0fd54518d2d86f2a61b952cb9e7b730151b7864978121d45a02a797a06025106ea51840eff19a7d202861dad492d47030a987a81559ea698409e694e9136f684546c2021d06fb76e2e705c01970b73ccd43959bf4948ddf903ece59f1b30d8594564f549dc1c83509ddd68fa4d4073797cdb0c7b19f5bdc670b061cd956131396eaf5389289e6edd81fbf2c9ca42dc7f6a4476f8702a00b4423e25601457683464a531faecda07a4ba85217a9ca6ded282a0e63c3aa2578f4e53503fda501db03bb8adc6903ee83ea51aef34e60ce5ebee2f4ed81f76b7d4bd207f8dfb5dd91b242955ab84d914d9ff7b7a4d7f3398f5c5e3f4fc3cf148c33f26a0aa1523e2c057cd9d7633f4788950864c330573d46228de256bb61f51d360afc667a25e6e2323cd7950fb1cf38f3758721b5cde531488d114ffa538a1f7500381cfb798c15ee44d1aafe7f1c1c9e827b8458fef2183f98f7e0544067ea1106ee27be4efc3148f4c791263c43d6727faefcdbf21899cd154aef5abde5f3a32f4ceeb61c371e3b12e9589c9b049c1acaed509e73e03fdd35e2ef38f84334d6baf319b36db75f7356b948489b6669589af9afd387c82e8474e54b2d07422c512d09c01989652d491f45628f7204df8ad183543d1866dd042e8d4d7e9da6e13a6e013eaf0496481b1ab54f7e10ee68d068854339a758d9b0647c89e6c0053eab0ae0b593fe8fc60a56f3972bd6fb25bcfd657f2dc3ceadea9ec5132a57e83153a03479cafcf08704a1af228a7699058963c7442133dead85fd531b88752fd6b5f01296e7b426ba0cb424df9b757a3ccf22876d1260a91d05581b99e333ff32f5f82a32cb6e31e31593e9840ddb320e05a732a80e767f114dc1595e1348119dd819174e5d0003863ee65539e0f43b051b040a20808a8c67c7c2baffb1860489a5015fd6630edb2686a03700f5346f251bdc7a0d896aaa84a209f2addcd67bf6a827f4eb63e00c5d85d3c8820cf63d4c0a27bdad9420c0fcfbf9e7f702ea4f6cea90ed5dab502cfdc7fa661fd6658b7e00f99a9de2ddcc8dec638a3d511f1c338cb2bf8789b02b9e2303832b57873b50e6fd218a7f01ecb7f019bab742514fef0af10063252e9ed269747a2e1719dad283029482d9995aaf69f98f3019f5f4e4d7905ba6faffc490ef1b570b681ac2cecd6c95ea89214383184b03e8afaf02ad2f3a2d28bf518dae99df307fd82bbb953a5abc5a8908b45470f8eaa5e602f86918010dadcdf459b14d24566810e38005135f3bcd1c42324b135035508c6a14b0055321059a0da07aab986cb97fcea2a20b2185b7d456261bbe7d808c405d1e812b0a03395c869cf2796a9a19ea1faced755623d0dd7b7ada72cfc32340f1eae07b561673c9cc3efc0ee451839207876936d7e18bd08b900932a9ea9f171a996239f4124d0b993c3fe4a5abd2d8b88874cd8661920e52dfaf12084eb1339ab38c7defbe3a14e42f35d7357b492a4630d9c08e463d7b8c0ba300f6c2f9ccbdfb14408440438770e176c91e480d41085ec44d5cd3954e52d974f46ba43ecc6d586dd8ae2229e818e74dd90ce32fbeabd5beab94ba5aec8eff774c5ef25ad6c05c0f356fd487567a90b9f51f1b741c7f0782cddf462fe0aca2dfafa13fdfde3fb936f626f6238142fd3fff3730d1c606a7e4d38dc13366432aa6d3c73250ec7e00989b3553502606393cafa8018d68736b23285eb211b0db97e9b3d2c9ae61fcbd85068da480d0e001b8c0c809a3187bf605e5857797fe553306bec9e4030997902c6a95ae449aacb116a96aaadfd4873fb53eb3029cb8b61ddf48d65388a954af319bc271c4731bb06483db8b5ba770e6bdb43a9d525ad5e02a2ebe2c7e3479b31a6aaeebf18da889d39d6715995e583cfc0dda22222153fdcdd9535c992d5d3bea770ce35d4579f0fc787897fcc507be3f6bfa39a12ad4d0d76793c325810d9bdfafabf7df888b6068ecc68d0974b092df11caf1ae20b029f9b28550346a1063df122986412fa53d91fa06ada8f9a10e87a38b107f44c4c6158b031fe080c8b4d61e00b68084f3f1c48504460a7ba8143bf35890dd59db5ba9359a4ee89061dc8425360c8006098ce50e0a3bd991e201d1e5425ac1c3032c1409f519960e2c2cfc59068b11a49fd0df9f2b8363d2ac3a9c4ef04d839ac0c7709429f7ea3df2086bbf42ed5e2254a89649e3f03ea856412487bf924f40edf5233446ffcb4c91506114cbae661f99d1ef0f8042bf85bbe3e9f24b3abc7c1eb1bb7d87072db3f7ba75f020282dbc5d93e17385263552b6d20871d99ef2af24290304c629ca9679943b2e29344d86590aa80de2dded6bb1e75c6ef6e8736b942e615eaec05ac76fc4d364510e791e0126f318fa93913cc8d5b03be6bed493081932fd9f457916510fe635c5b4f9982b12a0226e32de8b56865f6bd85aa20e846b3e23775e1ccbd8b74aabc7e0e657e99451c9500e6a6797e3a9646c66ed2ca8e93b864dea19194a19f7f7db65db03c0422b4c39c6df9db61000891a3af255cf45a3a6d17c6fe2d245d5d2a1407389d3fc761996b75f5da91630ca72539d39ba3d5c691291513a65dc48b22c3f633041a6b6eb3eea1747439736e78b62adbc529f8fb9f3844c5616e74d7fa090d4682e355b262767dbb5f3acf929f3bde0e3da3cdbb8c70dd08901e76dcbe29e120d5f89acdf9022d13a7c374976cc7c8f22678438673a6111671fcc520a59e7761bf567cbc874471eb2046bd2ae86742fcc1bcf00477594c0ef78b24cbd1f43044e840492aa949b0a81d4907ae06e67dfce69037934e593b3ec2635360b63b8e32d6fec5705b181d3cd5eb8c8149c75009781e346d61985787acb76f6d2eaae9592693ae34234f6e3bb27d1bc83085ba99fc9d6cd2f6c1947a7528d2f003f9bbfe64794caa7eddbf817f60e392e627f9a4ee47d3210677e47c03a2e3c67d6f25aa7c69f4b67a4eb22333c36c18a0ced03665c56afac04d4f9447440f13d739d064c8c323ebb3c5756f990b2363dcd232a952f9fc9851d12a5cebd5f6c3b1751df358c7185bfa805b526cb266e2c5d31deff0382bef3de5b6e628bde4b1425329b29f35693b9a9fae7cd4a09bf9d45166495cdb0e452d0a2fb166d7a5cf3d6b4318c60fd42856daae676c18023255c11f32977880959d45e32841610bfa415bced39d811105c11d3ff65d483a42df4d624775bd04b06c50b494291311c1a22159402bd74fc4169abc2404f7cb2dd91bf429eac9c378388ad0d35ca0d07823702f3d4b26af83b614ba59e2eb2f8085be2a9435185b742060aa6d0ce41b9010e48d684e33547821fd1e5dfa4e492a9cdc41f039002269952be046d4d332e9df0e7f1c3a988a2e872e472af5574c90c7766f2d69230d90f37ac3a293e6684d77e40adfe92a6b85f3c7d704fe4ee29df8fb48b9973e9da9850fa401b0313d89b6cc06220a5b96efcdef5a3b2fac1c6d676d2eeeec88310873df550fdb59788602e1a7e93ca28d70cb9ac57eec367a44fb0b7970bc93bb609933e33e85e2e4b06c46e1e52b32467997ba699aebb5f868b20a4de54bd11784bbd233a1e32268efe146af219df2699bf4de3be4dae64dfa38e51e2b0d1bdbb71d6299a3af39c39d121960ec6a33e46cc1e922fe1c645ee76e917d05cd82b9edecf1537ccd364bd5cc03e0f182fa88b69c4d9d70489965556760fdf58682a0c6008984bb1569ab77d576356893e74455a9036792c3f09b637f89987bb9a77b70f02ba8bc43d847509a7364c396a5cd7c6eb2fc331377894e756198f927bc4b620de843eaa7d205500d1ea5c5239bf517e83732e7c52c49ee4887027be76556572d1d73a18f2ebff39747d1f7b20073e4dde93eee0b0ebd5558358afae3393adf41e5e7a144e2fa3bba18fed247c4ffa5e0f4865ff0ecd5ba938a26d22d5711845f5e909248d0673acbebbced1ab51cb2145a5f08427f1c4d31479ffbfcac479696249fa2cc80a57b557bfde42ad1343291bbca05bbb17c295e314c0854fad981b2b511645f286e90332d750a96de987afb1ce7b0b4f7892b133e4b66be97aae50740d1c6936a6b1776c0b119dcc646b750ccad99b2d0878493d9902032576f7cd089d6c443a468cee3aec6e392593b3195aa758ba76368cd0eb517a9ebf229fded092009272f179a32f2d9d72c8c347d6f2c363e28e10c923c5f1eeed545f59a33d88e07bb081628fcb7a34d147193dd85743878f8cbcf876a06653b2abf91776f918bc2d4734c3549631574154ecf3ea728ead5e03770e33702c29600d56e74b584f646813e668c86a9ac313db436ef63b999c03e653ddea7fadaa9655bcd8081796a2a51caf51f2ed920dcae8a1d03316b938bd936c59076defcba77e631dd6674fa4fe8a071d8603026773aab64713c2c4ffd2a578120aa8102c0ebbe63445d2ececad32dd76a61c25fe9692823afc34335bcacd15493fc94fbbe25b88d5419ea604cd3766da99df4b60a5426c421660387f328a28bc75060a484664c371822f91732c1f34924d0efb6aa9474b8b63b8a8968928c748efb20f85059cd4244f6e3e75b97d458e21861b7a2c629abae9d9b6b51f8467b95a285335ce48fe284093e208c51402c59fadeca0be0e83c002a5bc49f4a5dc1b1a6d26c4d3060b0cd16fb0382b7f5878e01dcc7e621f5ed56bbe86ccb62cb2cbf1389159396840b640ce76b18eefe68d51679f28ca9e9309b69c06775291f205d54b9d40405e9696ef9290ce86ed3727fa975a1347f679c22c1fcc4eb3cbe6b0562971243ce5c3fc3cfdcbe98cd81925d0c676e2d85f86087aeac370139ff6b08a201ce5c95a0bec9d462e5f23d425cba1ffa89268f69eb1f0fe3e02c0e4f9fcbdada0d1af52da886e68777e71b9742cef4d57b4b62fec722350aa9dc2a4b1e6c532c5675324f59b0071d411cd2fda3fb5fbc4ad52690849301a48d9a2c2f58fcbba891fa0a25a68c38745fbef661156f347978c5a61fb1782e7eb9d7ffba1d2b1f1288b60e0ae619194a54ebce61e7f4b470b988c964de1fe95d393c73c497c3dd10cbad3c2790112f39f017d388f41966b6c62a052a6180d8456053e4ae75d2db8bb51d4c4b50902cf5934be8754469c06a2de942c5181087d40efd2", 0x1000}], 0x7, &(0x7f0000001940)=[@rights={0x18, 0x1, 0x1, [r0]}, @rights={0x20, 0x1, 0x1, [r0, r2, r2]}, @rights={0x20, 0x1, 0x1, [r0, r2, r0]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x20, 0x1, 0x1, [r2, r2, r2, r0]}], 0xb8, 0xc000}, 0x24004040) 14:47:21 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xf00, 0x1000000020000) 14:47:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x6000000000000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x700000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 402.800167] binder: 31653:31727 BC_FREE_BUFFER u0000000020001000 no match [ 402.808354] binder: undelivered TRANSACTION_ERROR: 29201 [ 402.813981] binder: undelivered transaction 603, process died. [ 402.820012] binder: undelivered transaction 602, process died. [ 402.826004] binder: send failed reply for transaction 604 to 31653:31727 [ 402.852588] binder: undelivered TRANSACTION_COMPLETE [ 402.857792] binder: undelivered TRANSACTION_ERROR: 29189 [ 402.877509] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 402.897558] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 14:47:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xa00000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:21 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x100d}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000280)={0x6, 0x118, 0xfa00, {{0x4, 0x5, "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", 0xd6, 0x3, 0x3, 0x1fe0000000000, 0x2, 0x9, 0x3ff, 0x1}, r1}}, 0x120) r2 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2019, 0x0) write$P9_RMKNOD(r0, &(0x7f00000003c0)={0x14, 0x13, 0x2, {0x0, 0x1, 0x5}}, 0x14) write$binfmt_elf32(r3, &(0x7f0000000140)=ANY=[], 0xffffffdb) ioctl$int_in(r3, 0x800000c0045002, &(0x7f00000004c0)) 14:47:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x100000000000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) r1 = socket(0x10, 0x20000000000003, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000140)=""/39, 0x27}], 0x2) recvmsg$kcm(r1, &(0x7f00000018c0)={&(0x7f0000000740)=@can, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/45, 0x2d}, 0x0) write(r1, &(0x7f00000003c0)="220000005e000721004f10f7d0ebd900000000003c0253573d9a047c26485a3d572846135b18bcb38eeee1ad5bd2d2ab6c121a392b2f77842f0e325bcd103461ba9c503c0a8d100dca6a03594c381c6d7d62dbc9a8bf86e4f1ea69e9a03baa9e7ae6abf08c1b1a400f870a1a5979605784b8afbf194dda9aa36eb4c2cb75e5a03923f0b9b66b6e2a76dd8864a523da7e744983a1493a61146525e7ac4925ed40369488ad8727beb66d086b43a63aaccb9eee2a2687e0fa7fc9c6343c5d6e4464011ad1932504da2ab829c493a312468a8e40", 0x91c3db3c7fe9d456) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000080)=0xffffffffffffff05) 14:47:21 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x950f000000000000, &(0x7f0000000140)="06"}) 14:47:21 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x3f00, 0x1000000020000) 14:47:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x9000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x6800000000000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 403.386637] binder_alloc: binder_alloc_mmap_handler: 31701 20001000-20004000 already mapped failed -16 [ 403.396443] binder_alloc: 31701: binder_alloc_buf, no vma [ 403.402131] binder: 31701:31774 transaction failed 29189/-3, size 0-0 line 2969 [ 403.409743] binder: 31701:31773 ERROR: BC_REGISTER_LOOPER called without request [ 403.417698] binder: undelivered TRANSACTION_ERROR: 29189 [ 403.423989] binder: undelivered TRANSACTION_COMPLETE 14:47:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xec040000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x7400, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 403.446863] binder: 31776:31780 ERROR: BC_REGISTER_LOOPER called without request [ 403.454873] binder: undelivered transaction 608, put_user failed [ 403.461963] binder: 31776:31780 ioctl c0306201 20000040 returned -14 [ 403.473094] binder_alloc: binder_alloc_mmap_handler: 31776 20001000-20004000 already mapped failed -16 [ 403.487085] binder: BINDER_SET_CONTEXT_MGR already set 14:47:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x950f0000, &(0x7f0000000140)="06"}) [ 403.493012] binder: 31776:31780 ioctl 40046207 0 returned -16 [ 403.499345] binder_alloc: 31776: binder_alloc_buf, no vma [ 403.504994] binder: 31776:31785 transaction failed 29189/-3, size 0-0 line 2969 [ 403.513549] binder: undelivered TRANSACTION_ERROR: 29189 [ 403.519377] binder: undelivered TRANSACTION_COMPLETE 14:47:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x2000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 403.540506] binder: 31795:31798 ERROR: BC_REGISTER_LOOPER called without request [ 403.548302] binder: undelivered transaction 611, put_user failed [ 403.554556] binder: 31795:31798 ioctl c0306201 20000040 returned -14 [ 403.561823] binder_alloc: binder_alloc_mmap_handler: 31795 20001000-20004000 already mapped failed -16 [ 403.572085] binder: BINDER_SET_CONTEXT_MGR already set [ 403.577724] binder: 31795:31798 ioctl 40046207 0 returned -16 [ 403.583929] binder_alloc: 31795: binder_alloc_buf, no vma [ 403.589573] binder: 31795:31800 transaction failed 29189/-3, size 0-0 line 2969 [ 403.598294] binder: undelivered TRANSACTION_COMPLETE [ 403.608480] binder: undelivered TRANSACTION_ERROR: 29189 14:47:21 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x60040000, 0x1000000020000) 14:47:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xfeffffff, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x600, &(0x7f0000000140)="06"}) 14:47:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x600]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 403.684423] binder: 31810:31812 ERROR: BC_REGISTER_LOOPER called without request [ 403.694607] binder_alloc: binder_alloc_mmap_handler: 31810 20001000-20004000 already mapped failed -16 [ 403.705768] binder: BINDER_SET_CONTEXT_MGR already set [ 403.711248] binder: 31810:31812 ioctl 40046207 0 returned -16 [ 403.712106] binder_alloc: 31810: binder_alloc_buf, no vma [ 403.722799] binder: 31810:31817 transaction failed 29189/-3, size 0-0 line 2969 [ 403.731046] binder: 31810:31812 ERROR: BC_REGISTER_LOOPER called without request [ 403.764814] binder: undelivered TRANSACTION_ERROR: 29189 [ 403.777026] binder: undelivered TRANSACTION_COMPLETE [ 403.908584] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 403.915827] FAT-fs (loop6): Filesystem has been set read-only [ 403.922049] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 403.938327] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 403.946623] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000020) 14:47:22 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1fa6, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="f20f080f01cf0f233a66baf80cb86402868cef66bafc0c66ed67660ff6b9360036663e0f35b9c60d00000f322e2ef30fbeb541240000f30f211366baf80cb81f926b83ef66bafc0cb000ee", 0x4b}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r3) 14:47:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x4c000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x7fffef58]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0xfe030000000000, &(0x7f0000000140)="06"}) 14:47:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) [ 404.087696] binder: 31838:31846 ERROR: BC_REGISTER_LOOPER called without request [ 404.096056] binder: undelivered transaction 617, put_user failed [ 404.102869] binder: 31838:31846 ioctl c0306201 20000040 returned -14 [ 404.112611] binder_alloc: binder_alloc_mmap_handler: 31838 20001000-20004000 already mapped failed -16 [ 404.123472] binder: BINDER_SET_CONTEXT_MGR already set [ 404.129298] binder: 31838:31846 ioctl 40046207 0 returned -16 [ 404.135430] binder_alloc: 31838: binder_alloc_buf, no vma [ 404.141033] binder: 31838:31850 transaction failed 29189/-3, size 0-0 line 2969 [ 404.149110] binder: 31838:31846 ERROR: BC_REGISTER_LOOPER called without request [ 404.157662] binder: undelivered TRANSACTION_COMPLETE [ 404.157743] 9pnet: p9_fd_create_tcp (31844): problem connecting socket to [ 404.157743] 27.0.0.1 [ 404.172457] binder: undelivered TRANSACTION_ERROR: 29189 14:47:22 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x3f00000000000000, 0x1000000020000) 14:47:22 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xffffffffffffffff, 0x1000000020000) 14:47:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x7400000000000000, &(0x7f0000000140)="06"}) 14:47:22 executing program 7: mkdir(&(0x7f00000000c0)='./file0\x00', 0x1) mkdir(&(0x7f00000001c0)='./file1\x00', 0x1) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x18000, &(0x7f0000000000)="bc44c182ceefd8c21be1c28d1767fbc32fce9f3c2f34334ff4622cba5ff95c300965c6cf") 14:47:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x1004000000000000, &(0x7f0000000140)="06"}) 14:47:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x200000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x2000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 404.285421] binder: 31859:31862 ERROR: BC_REGISTER_LOOPER called without request [ 404.293136] binder: undelivered transaction 620, put_user failed [ 404.297396] overlayfs: unrecognized mount option "¼DÁ‚ÎïØÂáÂgûÃ/Ο0x0) sched_getaffinity(r1, 0x8, &(0x7f0000000040)) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @link_local, @loopback}}}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000007c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)=@newtclass={0x2c, 0x28, 0x0, 0x70bd27, 0x25dfdbfc, {0x0, r2, {0xa}, {0xe}, {0x0, 0x4}}, [@TCA_RATE={0x8, 0x5, {0x7, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) [ 404.423970] binder: undelivered TRANSACTION_ERROR: 29189 [ 404.429438] binder: 31860:31868 ioctl 40046207 0 returned -16 [ 404.440132] overlayfs: unrecognized mount option "¼DÁ‚ÎïØÂáÂgûÃ/Ο0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x6c00, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xfc000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:23 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x20000, 0x1000000020000) 14:47:23 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x9, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000851013004a6cf0836ae13938c9fa5dbbb325060000003f00000000000000bf610000000000009500000000000000150100000000000000000000000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) getrandom(&(0x7f0000000140)=""/39, 0x27, 0x2) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x111043, 0x0) getsockopt(r0, 0x2, 0x3a, &(0x7f0000000340)=""/226, &(0x7f0000000300)=0xe2) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, r1}) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000180), &(0x7f0000000200)=0x60) 14:47:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xffff1f00]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x74, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 405.200174] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 405.216558] binder_alloc: binder_alloc_mmap_handler: 31887 20001000-20004000 already mapped failed -16 [ 405.226413] binder: 31887:31950 transaction failed 29189/-22, size 0-0 line 2854 [ 405.239400] binder: 31887:31948 ERROR: BC_REGISTER_LOOPER called without request 14:47:23 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000200)=0xffff) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000140)="0f013b360f2264808abab818f367360f001d00000080366435d88d66b9800000c00f326635000400000f300f221767f0827604976766c7442400156500006766c744240229c200006766c744240600000000670f011424dadd", 0x59}], 0x1, 0x0, &(0x7f00000001c0), 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000001c0)={0x2d, 0x4, 0x0, {0x1, 0x4, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair(0x9, 0xa, 0xffff, &(0x7f0000000240)) 14:47:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x700, &(0x7f0000000140)="06"}) [ 405.265050] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 405.280536] binder: undelivered TRANSACTION_ERROR: 29189 [ 405.289382] binder: undelivered TRANSACTION_ERROR: 29189 [ 405.299519] binder: 31960:31961 ERROR: BC_REGISTER_LOOPER called without request [ 405.309048] binder_alloc: binder_alloc_mmap_handler: 31960 20001000-20004000 already mapped failed -16 [ 405.318640] binder: BINDER_SET_CONTEXT_MGR already set [ 405.324030] binder: 31960:31961 ioctl 40046207 0 returned -16 [ 405.330035] binder_alloc: 31960: binder_alloc_buf, no vma [ 405.335640] binder: 31960:31964 transaction failed 29189/-3, size 0-0 line 2969 [ 405.343225] binder: 31960:31961 ERROR: BC_REGISTER_LOOPER called without request 14:47:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x500, &(0x7f0000000140)="06"}) 14:47:23 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x3) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x800) shutdown(r1, 0x2000000000000001) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='vcan0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x98) 14:47:23 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xfbffffff00000000, 0x1000000020000) [ 405.375247] binder: undelivered TRANSACTION_ERROR: 29189 [ 405.401742] binder: undelivered TRANSACTION_COMPLETE 14:47:23 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x200000, 0x0) sendmsg$alg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="38320a20cddec01c4d9924b1fb6680464b4a001595b3bd3134256d4f4a9b067dcd5dd4d9c9967531f98a0d97fa89e154e82be9ae8fb7822b80d966bc131c942a7c9e23b963b400eeaef4a0e71e75be72f7514ff09ff010c105260dde7365777f3139c49ed99a68f307af1fbe26b8a6d50b10e834f49496376d26cdb9ece8e698718be501ce5ece", 0x87}, {&(0x7f0000000200)="2aa6a9f1014340f01be212007a36659f533e3691b0efdfe660f047254ed3eab5df3f9066679d72db35af69d5a300706b2e76a2525c0f9860f8673b799cba6dc2e1279abab4df913101d18543c170edfe6171445b96e9c589a90c7d0144ad39953c8133e211fb096d9e9e08bab954dd55291a3628ec54bc89af8fb898384014f5954d59e794d21ac68b0146515a11382e1044515d46d370cab52c394e77ad1aece74b2a93809a4e24e0be9a", 0xab}], 0x2, 0x0, 0x0, 0x48884}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) 14:47:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x300]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x6, &(0x7f0000000140)="06"}) 14:47:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x7400000000000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 405.472500] binder: 31977:31978 ERROR: BC_REGISTER_LOOPER called without request [ 405.481807] binder_alloc: binder_alloc_mmap_handler: 31977 20001000-20004000 already mapped failed -16 [ 405.491418] binder: BINDER_SET_CONTEXT_MGR already set [ 405.497002] binder_alloc: 31977: binder_alloc_buf, no vma [ 405.497468] binder: 31977:31978 ioctl 40046207 0 returned -16 [ 405.502599] binder: 31977:31983 transaction failed 29189/-3, size 0-0 line 2969 [ 405.502858] binder: undelivered TRANSACTION_ERROR: 29189 [ 405.557373] binder: BINDER_SET_CONTEXT_MGR already set [ 405.562901] binder: 31989:31992 ioctl 40046207 0 returned -16 [ 405.570036] binder: undelivered TRANSACTION_COMPLETE [ 405.570572] binder: 31989:31992 transaction failed 29189/-22, size 0-0 line 2854 [ 405.585443] binder: 31989:31992 ERROR: BC_REGISTER_LOOPER called without request [ 405.762809] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 405.769981] FAT-fs (loop6): Filesystem has been set read-only [ 405.776244] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) 14:47:24 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:24 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="3106ceb1a06c5fc7cc6c2899e986f5d863d90bd0655089cf3a36395f0719d6ca1997b29e098f39a2bcc27461c585b2b72245f89767ed69b3caf30c43da1d8c3dbb89ee900d7896578544aaa654e2d563dec18b4788fdd3c27e3c0d5d1e4e637f1ae200129184a377950d22b707288e863beafc8e5312f8060c52df4e7ffdc5d36f12b83221038701d328330691fe9c30e693f6d13af00d12fb33bf68df4d8321490918cc89ea8d624b01236afd93c056055b9435e8dd3486eff12d63f2a0f8fc570044163a38c7d1e83517cfdc3a4c3ca79df975f94ec6bf6a0884f881a26872288d4bbdb7a3c9e73bdf18c5cf9915dc497abc7a6e907c1d9403a26a8be18cd1615138a442f9c05afde27c4cccf31aa47cda1095c7dc9e5e142efd68f0db5c11f17cb799c8c6f7759eca17b65dd77c8faef71427d1bd7cb112454145702cefd0fd7b59a793b9a6fba1a6004764c54ae164f24f7fdd2fd0daf17cbc665fc7c695ec0eac470cd276e432954fb9305d5f93aea6035e1bb811e8ff3b19284fbdbc9c9b66bef10e3cb378ee294a6caa9a2bc379fd9423cbf77f79c7564ca37a7ac2ae197ac54dc43e82402342bf6f4a14220b3454ff8fdd117051d55f1a2dfa95a36adf1f45dfea0b796531d707062a6e58d3f51644f8291c014d484a8cee04e0b4dd173dcf41bce83a8db1cfde52b38161cbe53ae7d2e707304827875336f95ffb8ce052249ad6c920381bb0a898637ff19c8cc3af2e025826a1d18fa17312f20a908c0f7b413687636564b5e03ed94f2996e8ae5b7f63ad0ac46ed68f30f9edc2e501d10da250568d15c5a90376de509dc25e3e9003a4f9f6150d175de2478b5c7ce832a4f0ec3df69d471915a6ed55a0296ff7df119796a1b01a6bf456d20628782a61440dee555bceaa739cdead0275dfe293fd26de77ef7d6cfa6d248a37d7e74c678da19b624f05bd71fca08650dda06fa5c24e4b9701007d309fddbeae943cee346790148189065ef7162256891cdf54dbad98f1e21186b711258703f042c8e5ad4865fbb11dd5757b511deda1119b700d0f0932cafa35c17138be9f36a2aad5fd0771bd74697c494bf251cab9b500e774880d780b50102949149b385b7c489dd0daea67c9290ed6e95f7ead5f2eb22e8684748ffd46cd6ee8ae61e042c25223336b13222c9545a4869b5fc90fca0b5fbe4b7c32cc74211968138e576a21fe1397e2d2fc6454f4f78a6329d66130d957f8c76ccd8a9b0acb44820681496792a52691a7d78e0c407b3121512e4f96d7703e8816ca6a066e13ecb90c0a9dd2725a3b3a90df847291246c42d1ead5193cd99ce76bd16c3c40817ad85c684ce5c9af1beccf20c17c3396ccead03b1d4143e3f293834925698941771f65e01326b74613cdbcd5a55b00af027ed0212fb4bcc57ad1145d7b2ae42bc11fcb97af4f2a16365bd348b40b1e7880e082d3c142d6ffd48ce4832ec63fdb6478ede76e23951f2d537218f27182e731503f0a912e715ee1c904076816715963d8635e623c45effdc7405dc98bf89d4d3b61e3420da78c0b06531a5375bccdf8bd95bec49baa5e8459224653048fd2c100760e4906aec2c3c5e52b2206258399fd761be0f2bde8d23afef330f000bfac835b56abdf4f4101a6f455e2537a160b621b3ff03498a87ee1d96d5780cb181662975da86031b0eb3fde8ad69980a8814f8a5d4751016e7e8dd3a8c70a835a9721c5b2097654c18e2d8465c272969f8a23bdd764966ca428ff81d8a5f314fcdd56cd6755f2084a4339ab33c523c7fb1d270907f9160124521c6d76ac80e8562862a61b7550bfcfd884a76b49b5884f185e9f3167fe300b6665a1650d342437f286cf76044e7871cdc645542a7828940db8532f4c59141fa747c4b5243e8cedab80c5046ffdad53fe06fa0b58fe4c69d50bdb9785ede3a4937cc4c884d0be07bf49884e74c5831fe692d12e96632ed8e65c39d18a91a37f9cae2cae5531dc0fe217abd64a9320436d47c9fc3afd5ee96d0e639d18fd0383ad14c821ea27f701b16b2b2a0afc9456f4fa13a6e17999332ba5ba017fa674c893be3c43deca910a0cab26ec8d21a8fa36ea5a5e44d2d6c8dc9ea20f199b1b7b523605137102edc8c1dc510c6d3c07ab2d3fc9ebde130700b5ea616b3ac74d4485d41930a65647343dee11de2135f09e0cbdedd9b3ec02632f84cbf2013fffdbbca7a568e77d4b543ae89abc73aae2229ee9aec7cf96759c565867e29dbb948b3e899bebaf2a282a12deda83e4091f8ff0bba43fe009694e0d761875549a14e3afd24eae167776cd4a58de9cd95cecb73178fff28ec4ac2280ad30f6720ae5b07359abc39f194b60292566ca00fcf08548a0b595c5c78b40e746760d1290821d0aaea59288339bab24cff1a5abbf8a0f8a002f1c96a7f5f0bf462af0c6b55a19af174067ab714b5a34a2b403072d69388e79e95f49034e2a0882c607de4a097b3435de8a4e4492824b38f44dee68dd1d21478be766ec18f92adc1b414106e4858c07ac216baa2b1e624c4809cb6c783884635eefca26ffc984c74b593022a46e2bdf66b5e437469a84f437d46855008d08410d67da7e1cd578f7bffe52e04e0a211fc254bbe39253f224c0bcd4a506d7c4e9bd610e772545521ce6d399e52e71ab5d3150bfc86092b0b3928ec5146aec68563d98639fc78e2ce989459b0a67531dd2de0c26b2fb9fa94f243445ea7bb277b8add53cc8ad58187d55b324151b97cd0d55dad351b436c1ad4ae60bc0e3812404b9fd91d59c70b7006777928e641d8b4ec8b4ed55afb53947959eb54ad441ac8146d7cad94a32b76e743e95abad05e6ba273f9026133042b459109aff8d77c2fd321988ad2d0091afd60d4bf2ec8a32ea69760f5eedca645607263dd65dd97fa0ad8e9a05de57c31c4ec7b040340cf6c0a63cba5b310b74aab4d97ad91cda58863daa87baff23382603507084d053c40d547e69c846deb2c9042d3a598b7c4aeb0ba168c2e4483e5390fa8421ea8cabdd1a63b855ac633464fa070989833a2f9937e43dc22b8f177ba694cec4ef26940dbf2516aff40177c6a5fdef7d2d063ccc99ada29c4f52f71131c1f0d976b93c13a35d0065f2c036f20039bc43a40c52714c35e43d9fc2adda229f801fa4935373b3d07508a2e6c8959c40d47f4695968b4056789a782f626a3e08a99afb479a5744e5f0153973581e38743a8530f6a59c50ec061c66fa76b8c16ba11d1c98256890ba4c235852cf825482cdd501768b6207ff1d044fad118e47cedb98f00df1c00858ffe66013f9772055f41978c285e01ff0400886398e3ab192248454511037118cee193c4b5b2d74f2b94da1f19a50f5ba6b82c171bace0b46331fdf1883f70d764b94e04795865d5b67fc5a6eef0acde48ab71e302b80bd2b29adf8af19964f1b1c835caf844e500ee9ce52f867a27599a333856cf836c5f8dd3e884f25ff20559135f04276b7cd0667f7b13aa3fa74b2d426ab45dc1dc69a1eeab5506a84c20cfe45cf50754068e7b3ea0c0ce9910c176f3d97ced052db384b3cd26468749767097339227f869f83f3244d7200482d81ad9d6e52f0add15d89561dfd03fb77243dbb5328a7c19ecd2c849e419dde66228fe8940f5236fae71131f38dc45416f455ccb988f4a72dfc18b0da9c8e3797d332491917816db6b501a21e5f7dad1fb0165338c8ede74b4c91b1fb174f425099391c19cdfb323bbfe5a5d8d4db04c60419584d25c8c2f4491d91f85fb93185a87c2aeba463e34d0d9c9b09512f9646873fbbc393dbdf593804468850355740d6d51ca795d6889ec093ba221706bc20df61ea113735fd64ff5268bbd23a30a08817767e2e9607b2512851835d18bd5d2c088189dfa9d724d023a225e5e9a169ffce2ad4e7cc1bd436aca211a11aa8b622c6633e0e95764fcab578420f3002223a0459c53033b1478f5d69dd8a85a4a52de6a05da545f0e78ea02d62706f50305c61dd7d0002ca601fedd017f2b450afdb2a31cf5ca5ef77cf6657c7891805aa8e8ecdfc1cf333b0d69714f775f4d21c87e96cbc7135bae2f13b3198c3fbcd9925cd7d4eaf81af53ec69ae4a207fdffc9cbd926fe9504fb40895e71c6336e204e30968055fb30f91d0e10d9ee91fc18a858fdc3de51c84394226145e8e314e86868fc6f551ce8d727dbc5897988846e42ff0126703c24a7b580e35abbd67fb768c62225ccc054143981f31813fc947a7ec1cf7bd14b5f363194e82c07367e5a1e7e427b1b56067024e7e1b513e7b39bd85832bda59351c2abe05ff9b78438f425a554bcf37455a6e2c093ec7670e5057b370f49b3ce701b7af870ea48084fa567a5491e639c20c8a0679557eccf4315c2fa1312df2416ab11309f9dd0184c1681e18c200a0af8028c20b38bc2ffdb06db402c7f07ca292b7a3fae586f8bd2154ca2457bfad1f06176b47582f9cbe73f1d7e120a5f570207d7f7107efe7ffe5028b8551a2c21f4b37c5398974e1b74cd759afc2f1fa06e10caa80bbaa2c21b794bccea8f3bf53d2393be44473dc3b51ff9ddac88fe33919d9032fb770e6dad8e01d4c0ae06235fd0a60fee60987c12d0090e4af48248ef98a602917903a704ef02316089c21f80300ffb558d3ef09ad6de1a3a7ba8c94ba9f0695076c8796bb0f93a12bc0b0e1d4ddbd782716a134646fa34467830535a95ac195c5100298aed96e29ef2332439a53e0000a6cbd3de2265efbde718f11e7dcaea89e3a686e5e312b597618f90e16a15eb61a9bf7aa3be32e8257d09616fe4bde3b4d48ec321feb720ec8f8232dea22140dd86f0c9d634f3a6b82fd049e0795b899aac99eecefcf53b45e21a7c0d03f6a5089faa438aec12dbd54ae47b2961a9e1d01128de662db6627acdfe52eb6b7a3be78309fff3d3e7d298b1a297935c4746d7d086faad577cc1b287711938d0642b27ad8efc6d7749db0bcf331b2e906a0471a493f6ac51009f9ea0efc3320c96c6ec701b0fbfad47fff54edb8a53245271314e6053e9034fca798f9881906385b5f2c9ff5cd7aeb00a5092e83fb5c2cebf224e57d9dabf0d1c6a1338846784179f31604d94a409af566e703d926a6b4a162c17ed3a2dfc90b85ad93d1f613365bcafaddb6a12ce3b55633cf4e1638d4a65d5193df87ec95397a528f15f0852b541c02b5563d89d35c66aa04e024e599aa23b259f406f3dda3cb51bcc010290d0e0d1877bed0481f7185e251621271e449642d8b7e65a0cddaefbef45dc7db5926d6d930103e5417de2d17288178e55ab2894570eec0530863d5e8393a2f91a10ccd9c19c6e29cad58edc01ee831100d784aa262d7d5c962faef527f127ceaaf4029bcfb008c421ec0ccebe515dd3fca4a2818f4226790b7a227f313408bde6d2a6b86f022563d2e0fc4377b32a2f20a6713cf137acdad98380a866c638105bc2bd1fcaca6aa9d3cd5800ec5c282d1d96b90845175283a63b1fd0208fbdc26a569f936b188810fc06db24039288b961acb6237817372b0bf85e017e4b022f3f64dce74f2c843f690daa1fe57c4bf4a46c11a2c054e0416f8fd4b8adc487a77c59ab5906f97d62d52d9813de0cda7edd7b5ac4880e51c027378e79ddc6079b3d09a63ff2535b949cf4f32c0540b5c12b994731fc5623029c625a6263a566c9afa688bf8510d51108d73e5d2ecd741c4493bb6973b05b6b2ef62b70e68deb9717a5d0244469a8696f6204e9d9a31a99788cc413b49e26267a8466cabd014cc95e389c259b7", 0x1000, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000480)={@mcast2, 0x59, r1}) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f00000014c0)="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", 0x1000, 0x48000, &(0x7f0000000280)={0x2, 0x4e24, @rand_addr=0x9}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x10001, 0x1, 0xfffffffffffffde8, 0x0, 0xffffffffffffffff, 0x1}, 0x2c) socket$inet_tcp(0x2, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000000)='./file0\x00', r2}, 0xc) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000200), &(0x7f0000000240)=0x40) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='\x00', 0xffffffffffffff9c}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='\x00', r3}, 0x10) sendto$inet(r0, &(0x7f0000000180)="216f3215f8f9966f3fcf07a609a2a271eaba1495e3ee5400c49c26e4911f9276b775ba088f2f875e5a0f2c8f4c3afc431c720387181faf527ff9a13a", 0x3c, 0x8090, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @empty, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @multicast1, @random="93e3ce93d3a1", @dev={0xac, 0x14, 0x14, 0xe}}}}}, &(0x7f00000000c0)={0x0, 0x1, [0x8d8, 0x2f6, 0x430, 0xd4e]}) 14:47:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x600000000000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x100000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:24 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x6004000000000000, 0x1000000020000) 14:47:24 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xd000000, 0x1000000020000) 14:47:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xfcff000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 406.070313] 9pnet: p9_fd_create_tcp (32039): problem connecting socket to [ 406.070313] 27.0.0.1 14:47:24 executing program 7: mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) open$dir(&(0x7f0000000000)='./file0\x00', 0x2001, 0x0) tkill(r0, 0x1000000000016) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x40, 0x521000) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f00000000c0)=0x22000) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 14:47:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xedc0, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 406.298763] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 406.305956] FAT-fs (loop6): Filesystem has been set read-only [ 406.309150] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) [ 406.319063] FAT-fs (loop1): Filesystem has been set read-only [ 406.319828] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 406.329596] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) 14:47:24 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x40, 0x4000) write$P9_RMKDIR(r0, &(0x7f0000000040)={0x14, 0x49, 0x1, {0x1, 0x2, 0x7}}, 0x14) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") prctl$setmm(0x7, 0x0, &(0x7f0000ffc000/0x2000)=nil) 14:47:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xf401000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:24 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x2d00000000000000, 0x1000000020000) 14:47:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0xfdfdffff00000000, &(0x7f0000000140)="06"}) 14:47:24 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xe000000, 0x1000000020000) 14:47:24 executing program 7: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) r0 = socket$inet(0x2, 0x2, 0x9) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f00000001c0)=""/68, &(0x7f0000000240)=0x44) clock_nanosleep(0x3, 0x0, &(0x7f0000000140)={r1, r2+30000000}, &(0x7f0000000180)) setsockopt$inet_dccp_buf(r0, 0x21, 0x0, &(0x7f0000000080)="0d385eabb60dee2eb0f9c29438c99b73406dbf98c3674739ee13a661cb4a77e4b0cf481677f5621e8b51bd6118a9d97221434dfd895fd12f3eb2b18f5ebe6222dbe501ddbb41859e322bade0893d59c97fe045b7436542c405f8cab1df3004dc7a2be60433c0eee62ac42de6ec7b4594190c905aedd0ffc306b839c6b5f49eee87915951125bb30f8831cda1d8bf4908bdac3338e0d0eed10d41e9cb44f1cbb4a5911c1488de49df3c3daadca0a2fd45e68614f4a7564332d587c243a5", 0xbd) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f00003b6ff0), &(0x7f0000048000), 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.current\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x58, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e23, 0x8, @empty, 0xfff}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e23, 0x6ec8869b, @mcast2, 0xffffffffffffff80}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000003c0)={r4, 0x6}, 0x8) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000400), &(0x7f0000000440)=0x4) [ 406.344807] binder_alloc: binder_alloc_mmap_handler: 31989 20001000-20004000 already mapped failed -16 [ 406.364073] binder_alloc: 31989: binder_alloc_buf, no vma [ 406.369714] binder: 31989:32072 transaction failed 29189/-3, size 0-0 line 2969 [ 406.378883] binder: undelivered TRANSACTION_ERROR: 29189 [ 406.421493] binder: undelivered TRANSACTION_ERROR: 29189 [ 406.429867] binder: 32079:32080 ERROR: BC_REGISTER_LOOPER called without request [ 406.437589] binder: undelivered transaction 638, put_user failed [ 406.444036] binder: 32079:32080 ioctl c0306201 20000040 returned -14 [ 406.452016] binder_alloc: binder_alloc_mmap_handler: 32079 20001000-20004000 already mapped failed -16 [ 406.462226] binder: BINDER_SET_CONTEXT_MGR already set [ 406.467588] binder: 32079:32080 ioctl 40046207 0 returned -16 [ 406.473599] binder_alloc: 32079: binder_alloc_buf, no vma [ 406.479203] binder: 32079:32087 transaction failed 29189/-3, size 0-0 line 2969 [ 406.486778] binder: 32079:32080 ERROR: BC_REGISTER_LOOPER called without request [ 406.496225] binder: undelivered TRANSACTION_ERROR: 29189 [ 406.496240] binder: undelivered TRANSACTION_COMPLETE [ 406.685424] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 406.692577] FAT-fs (loop6): Filesystem has been set read-only [ 406.699223] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 406.710467] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) [ 406.717615] FAT-fs (loop1): Filesystem has been set read-only [ 406.723950] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) [ 406.737266] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 406.745455] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000020) [ 406.751479] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 406.765384] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 14:47:25 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xff0f, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:25 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xb80b000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x700000000000000, &(0x7f0000000140)="06"}) 14:47:25 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000440)=0x3) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000100)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@mcast1, 0x4e23, 0x1, 0x4e24, 0x7fff, 0xa, 0x20, 0xa0, 0x2f, r2, r3}, {0x100, 0xffffffffffffff96, 0x100000000, 0x4, 0x7fffffff, 0xffff, 0xdf4, 0xfd}, {0x3, 0x6, 0x80000000, 0x7}, 0x3e7, 0x6e6bbc, 0x2, 0x0, 0x2, 0x2}, {{@in=@loopback, 0x4d4, 0x3b}, 0xa, @in, 0x3505, 0x0, 0x3, 0xfffffffffffffe00, 0x8, 0xfffffffffffffffa, 0x9}}, 0xe8) r4 = inotify_init1(0x0) r5 = gettid() kcmp(r5, r5, 0x0, r4, 0xffffffffffffffff) kcmp(r5, r5, 0x0, r4, r0) r6 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x3, 0x400) connect$rds(r6, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r7 = syz_open_procfs(r5, &(0x7f0000000040)='net/stat\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r7) 14:47:25 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x4000000000000000, 0x1000000020000) 14:47:25 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xfffffffb, 0x1000000020000) [ 406.846763] binder: 32111:32123 ERROR: BC_REGISTER_LOOPER called without request [ 406.854413] binder: undelivered transaction 641, put_user failed [ 406.860620] binder: 32111:32123 ioctl c0306201 20000040 returned -14 [ 406.868394] binder_alloc: binder_alloc_mmap_handler: 32111 20001000-20004000 already mapped failed -16 [ 406.878010] binder: BINDER_SET_CONTEXT_MGR already set [ 406.883348] binder: 32111:32123 ioctl 40046207 0 returned -16 [ 406.890969] binder_alloc: 32111: binder_alloc_buf, no vma 14:47:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0xec, &(0x7f0000000140)="06"}) [ 406.896542] binder: 32111:32126 transaction failed 29189/-3, size 0-0 line 2969 [ 406.904019] binder: 32111:32123 ERROR: BC_REGISTER_LOOPER called without request [ 406.912100] binder: undelivered TRANSACTION_COMPLETE [ 406.917487] binder: undelivered TRANSACTION_ERROR: 29189 [ 406.938810] binder: 32131:32133 ERROR: BC_REGISTER_LOOPER called without request 14:47:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xa00, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:25 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xfeffffff]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0xecff, &(0x7f0000000140)="06"}) [ 406.947982] binder_alloc: binder_alloc_mmap_handler: 32131 20001000-20004000 already mapped failed -16 [ 406.961167] binder: BINDER_SET_CONTEXT_MGR already set [ 406.971602] binder: 32131:32133 ioctl 40046207 0 returned -16 [ 406.981001] binder_alloc: 32131: binder_alloc_buf, no vma [ 406.986660] binder: 32131:32137 transaction failed 29189/-3, size 0-0 line 2969 14:47:25 executing program 4: read(0xffffffffffffffff, &(0x7f00000000c0)=""/81, 0x51) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) shutdown(r1, 0x1000000000000002) close(r1) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0x100000000, @my=0x1}, 0xff25) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000240), &(0x7f0000000300)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r2, &(0x7f0000000180), &(0x7f0000000300)}, 0x5a) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r2, &(0x7f0000000380)="d21a970a3c158d14c0deb568cb44f35cf34a9507ed45aa68f1eec2476eb759f9cb9a8383fb3fab34a5c29972e2d81d48114253a44bcc63b0866b8b71a0632808473686e8a8b1bca3a07c157e09c2e6490bc05c2c2d603fef499cc3b212891843a7515ad3fb038c9967d96fad062dfaf9733b83ef"}, 0xfffffffffffffe06) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x65, 0xffff, 0x100, 0x6, '9P2000'}, 0x13) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000240)="1926b470be1085db9a4e40d951956e29f8fe40e5c0b0b199580ea6ab02bbc3a45f6e9c688026caead62e5bbb1e005ba4bec15e243efc3a583e6c9b006852cac8bc0c6f4164b6eb5f56806ffc384405477df6391d9c920952fac3d5f651c34dba44eb30d2df65a00553f6715b1ab3278cf834b687f15fe169985bdf91155f2d53e17d2ccd9f"}, 0x10) dup(r0) [ 407.010411] binder: undelivered TRANSACTION_ERROR: 29189 [ 407.021809] binder: 32148:32149 ERROR: BC_REGISTER_LOOPER called without request [ 407.037730] binder_alloc: binder_alloc_mmap_handler: 32148 20001000-20004000 already mapped failed -16 [ 407.042868] 9pnet: p9_fd_create_tcp (32150): problem connecting socket to [ 407.042868] 27.0.0.1 14:47:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0xffffffffffffffec, &(0x7f0000000140)="06"}) [ 407.057344] binder: BINDER_SET_CONTEXT_MGR already set [ 407.062811] binder: 32148:32149 ioctl 40046207 0 returned -16 [ 407.069225] binder_alloc: 32148: binder_alloc_buf, no vma [ 407.074255] binder: undelivered TRANSACTION_COMPLETE [ 407.074934] binder: 32148:32153 transaction failed 29189/-3, size 0-0 line 2969 14:47:25 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xe000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 407.108670] binder: undelivered TRANSACTION_ERROR: 29189 [ 407.117273] binder: undelivered TRANSACTION_COMPLETE [ 407.130782] binder: 32157:32159 ERROR: BC_REGISTER_LOOPER called without request [ 407.140882] binder_alloc: binder_alloc_mmap_handler: 32157 20001000-20004000 already mapped failed -16 [ 407.151618] binder: BINDER_SET_CONTEXT_MGR already set [ 407.157010] binder: 32157:32159 ioctl 40046207 0 returned -16 [ 407.157029] binder_alloc: 32157: binder_alloc_buf, no vma [ 407.168551] binder: 32157:32162 transaction failed 29189/-3, size 0-0 line 2969 [ 407.196756] binder: undelivered TRANSACTION_ERROR: 29189 [ 407.216332] binder: undelivered TRANSACTION_COMPLETE [ 407.227352] binder: undelivered transaction 650, process died. 14:47:25 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x90000, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f00000001c0)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000000)={&(0x7f0000de2ff4), 0xc, &(0x7f00007a8000)={&(0x7f0000000040)=ANY=[@ANYBLOB="03000000ff000000000000000000000000080011e8b20000007e5de88a8909ceb8ffd6f29c699d0ed0bc857bcc78c68cae64ac3f055c08e506b38d078cbff20454a8c4fc3a1d19e422"], 0x1c}}, 0x0) 14:47:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x74, &(0x7f0000000140)="06"}) [ 407.298970] binder: 32173:32174 ERROR: BC_REGISTER_LOOPER called without request [ 407.307613] binder_alloc: binder_alloc_mmap_handler: 32173 20001000-20004000 already mapped failed -16 [ 407.317618] binder_alloc: 32173: binder_alloc_buf, no vma [ 407.317721] binder: BINDER_SET_CONTEXT_MGR already set [ 407.323353] binder: 32173:32176 transaction failed 29189/-3, size 0-0 line 2969 [ 407.328500] binder: 32173:32174 ioctl 40046207 0 returned -16 [ 407.336661] binder: undelivered TRANSACTION_ERROR: 29189 [ 407.359944] binder: undelivered TRANSACTION_COMPLETE 14:47:25 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xfffffff6, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:25 executing program 7: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x100000000141042, 0x43) unlink(&(0x7f0000000080)='./bus\x00') acct(&(0x7f0000000000)='./bus\x00') ioctl(r0, 0x6, &(0x7f0000000100)="414f46f454f46bfc6d33ab97b9b34de516070056ab688fa56fb7514972d95ab64bc4585aa5c21e5a629f96f2") 14:47:25 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x40, 0x800) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x3, 0x400) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000240)={0x0, 0x0}) r4 = fcntl$getown(0xffffffffffffff9c, 0x9) r5 = syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x8000, 0x0) sendmsg$nl_generic(r0, &(0x7f00000015c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001580)={&(0x7f00000002c0)={0x12bc, 0x1b, 0x200, 0x70bd2b, 0x25dfdbff, {0x1f}, [@generic="46a48699c035e2", @typed={0x8, 0x4c, @fd=r1}, @typed={0x8, 0x23, @ipv4=@broadcast}, @typed={0x8, 0x4, @fd=r2}, @nested={0x1250, 0x58, [@generic="6d672067c86bfd7054e7ea5ec85744db88bb5bfe8cd979f8f4395ac95ca1cc4a52603f35152b3c62787164e142cd75b1855ff657798c13c5bcb14a6953a551a5eed90a3753f1d6adc969afb1191f28ef22b00c11c2e6e3d1cb4f4d912e746e7e583a94f9e0a321afd4c8c1d58c09f006762cc2babbc5ccb100a635ff5212e3f7c923825340ce25b24789979b57df0bcd87520ca8", @generic="a012abc04627c11296d39a120ee3dc5e7354d993511a6845173e1d46546e5417e21f27ec8e6f849b0bea1af5300ba796f7ea0aed035f79b8930c5a46afc8745e64b2141481b26c167785485e80e29251db005f3dacbbcd7dcf4a8370cc63c6ed270997a9b04e2db22f717b7e725777778c52987071ade99f89289442912564b1", @typed={0x8, 0x6e, @pid=r3}, @generic="a83941c740f8e9eb39d03f9a456216e93074671e67c3f15eb18cc5a2851206a271fb1aedfe604b9adcc5fbf850444932ead67b04f6574bdecf0d6c66a4a530ef8d4acb86b3da1959a2e6c4a95f2d1e162c77c0ec607176726506c00342c2ea1e42c709a40ca6cdbf7445a1fb1210e31969fc3b5d33023fe36cbfd016c9b457999d202791596e7564af713c36bddb9f21785797b9ec8317b26a54c6268823959b7ebec632a9fcf4cb78eb3875dcdd3be11601ac7c7a9f144445b3075f3fd29e", @generic="d7a59e3474162277f70cdb6b13254c44b2e3c2fe53ecdf3acc033ec3b9c40b2bbfc0aff2", @typed={0xc, 0x21, @u64=0x4}, @typed={0x8, 0x96, @u32=0x100}, @generic="3b6e8844bd45d519c547fc3bc216626dbc31b6058a010a808b48f56a71e5b0fca7c26eaf1079633c669d7aaf32816cc76c01a430f869a52c3490b32ebfdf7e12a6dd5be7e65f99de8bb9e9ec98d1053b588fb712010bd89f83f76e44369de5d16dcade93d3c9ff733587966d5a49fb80d7f7c83777a8db7a92ca831b644d56b24cf42fa6b4e89403a52bcb95960fb2a80a5d90155de692a360f6056188c063afda6d261992d788caca9bd0d1aa2a721f761fb8ba5d282467d27d6ee0b74a02f221edd0848800517e5f56bbe5ea3b71ce86250554557f3045a77667adf7fa011c9a404e8ee4e65eeba6537aaf5bcc990dab238b9fa54cd950e56afe31cec68fbb05ba018284c16627dc1fa40a6649967334bb501b96984535567203c9b99261e5dd89947cf2b20aa12a3c97221ca0562c7a1a1ae5269dccfbadd84a644fbcaa0109fe2709e280f573db3096e9052668d076f31093ba11f55886c4fab12d91baf17529cf52576422c1d0f75e8cacf98e4482f9908019e6cfa1e530a2836bbb95955c9cf2c188bbf20d6569458811bb9834815a61954a59198491eff7524871290b4bf12239758b05a8cfd7b7f1c2f936d514e12d2a5c55c1a60c92a475dd50f83294bcc0b3cc6e0b3dd1ceb9cb14b989e65fe1bde74e3d57eb1b7f7e4c3f58b1d67df8623c11311e52bdfe0e209a7b12b387ef077417087bfa69651aad5857c06585965b007c8287ba67e6167bac6ddbd400b8c161c1575f77bb01f649a99abead95acb35df701ac6b819b24e68bb8e64ec5185598bbb66ccfac55fc57d20f5649ac72286fd46c94339b65ee7ee7af7bb539182484bdf54894657a8067fa30fda43fff37cdd88f2abb9f8300bdc88ffe77222b2e595461e5ad0ac562d0725cf53607f0a8a0fa7c22353e5fe0d505d782019701cdeb2a2de8269e189705688fce3e11dd4148f5e338a43e7adb8f244dac829b030323454d2b88a03e1ced8ea7cba3a0f37501f35bc9f62ea300ffbfd9d0cf295df4375ba8e99e0755e91d196a6cd6db8e8771cfe341fc16e714145cf100bb330d0dc023a4d47f48c36096e1fd2bec20ae08994ba0d246953a36c4d7cb7737843e51b929a0ea5938d5c7cec5ae5ffcc1d03d4a6113d5bfce76e7e1841b6844d39b0009dc274653e1e9491ce08dd4818f14a6397e1aa11223270557236c1d026c3712cdbcadbd799d9a96bc44776a80703b9aa945241d25b30985e6b190a3315f901bcd661ec4812da24cba4f2975dc01b7a8210c5f030feaa1e87f71c8886f5021d6ce3dc778cf0e89c42f91b0d88cffbe0aaf6c20a1c45735019d2bd06045312170fb59ea3cbe69382c0820df3f22ab6a555b88670efb80ffcbc8e61dec4d9c30748ee7c2fcae26d1266bba546e2c6c1c1e7cf34db64e074dddfad9b19eee303c24d2cbe967d2eb0d395c8586fd4cac5647834b284da45700b4229018d33fce4ed864ee0d46dfd83aaf1415d0fd0bf345f21d2734ddbb28f1a1db884f95bede7eb78b87b8fef13f4cc3263935f1e63d35d7123bfb790452ef0ae397f3405c709688be41f9140a773ed45eaee4d1a399c8388f5043682460b415422a1f4b6b38329c5c01a59bd927aa522e816f3e39dd13ed12ce1289461d5189d87236783af4564f63d7782eaf65e6f8bb8fc71135e27991aa3ad2fb1334fc07abde0c6612a42442c7a5b4b4063ed89dfbcd2874a04469ee498b84a5dc416af5f4981e56624ddac3aabc6d1519c1e3cf3d25dc53f33e45d16e0b09f83b0e06a62c433c55052e3a0749aadc7455679e52458aa7f0b0cb728419b6038ea54dc79d5eaa3208984fb07a8cd076b0ede373ee43c95bbb7333434fcbc0b7047582d9396fede59f2768e87c4ec611d2e511110fba45f425704d66f0876ec8b515d853611f183af125f44bf5fab60f7ac2c7b286ebe0c2e0610a7830d45e143faa45ad02ac29251b56e2ea8161303b9da1fa2782dbf18a1c0c3c767cfe70d764694f0e8bd749e9b411d4de1dca3a15666a2f666d6a6547b7074e9b90ce7e788a52d76a3e1c27acc97e6cf5464d58f84c99adcab94c22498dd64e3fcd87ecc3da6810c3bf4e8c715ad431603654675005d37f8e24451e0dfb581af6fccf09bf7d00baa9634005ad4ca41414130e3683d906c5d23638dc1cc955c438ea74694ba0cc8a683c7e16ebec22d13c6edd04f3c2f7de79d0bd3dea55b302a50b02f4df7131edaf3cd561b5a958a4a7d2378dbd662b47a945f4c35b120c438764709c7d5fda33ee0ce86ce4e256ac7138bc71d69ba02312b0e7a615869d7b3bce412304b4d2c37cd51603b302aeb0e2dd1ee2a5f318e4f5c2177c26310f9cd408a9950df6c5939b020a2a8649fb8bf40104b76ec8a3b51235c50c3bd0f147acf058c5b41ab95a3a4a045da6a3279dd759d2c792830290acc8ed00f9506346a5859791c11cac4dc30ce36c6eb5c608eb9ccf2c879c011263f240bdcaaa37e81f720567f09723240867977c9647f0af6a5ad348386fe2e6b364f20817e32f1da6bf4ee131970d03cd7d1545422f6e79060090281e52dfa427640aa78a8c318bc085fa61a9cf0462d46e68dc944da38ec64fc87009f83314bcec61b1b4a9e79e7516dd4186f87432eed58831196140474bd00e4c11d2c679853497905c94aec8318aefbfff7ce868c0705b19aeadd64ef5c79fb8d4f29846b2c09f72bf2735f2ffad9dd6e61a76f11e64affd1c4e9af71823ceba68f308d7a25647ff4ff696617c7b70cd6c84a1f717324dfffe60c43c3da7a7684077e26be1252ac73d08ad9fcdabb8e7073cc8b09358f1131b4f324dc706b5d22f6217d3d09efe6d897af13c85e90ca691f0ec0f9e3a3c2a71dc7f1606e9ad1acd5bc7899273cdde339d968c3f38d84cd28a474c25cf8c9fd2954f2464f317472eca44d8bc19a05fd2197dae478eec54028662a36376f07b015fbd91c115ec4a677c4f92861a8c75d8ec67998a965888ed0ab3dd77fcf20ffd58befcb1844c611a8dbe466826b1a5fa6f257831bf3a5aeddd5d2fb5034a827d7e66eb360f8ee282f75a62387eae466e62b07b5af8bc7e2905df47828721551b18cbddc4373b5b3c12621f3612270b102991215c89c04b1a4226f6e38ac22be2a5a3079a38ed46680da7b3a8fed862869bdcff0a7ecaab1d123a5e40f729dec9ecb8907dec8d5dda1f21bd72abd518442aeb0655709cc3c9f4f5b2d5dbc884b78406e53d8aa17b6f34a6ff44634777fa62242c065eaf613586b601d397d073825a3b6de612ff6ad0d41bf31512cf85ef35dcf4a9fb85d863da1708e59f860e149822684a16ba73f00499c595a434bb263947dc04c77ddde28aa157fa1d9623bdc89bd1f35ede91f8cff066426a050af22c7664bb00657df828908bc47e6cf4d468e82c79c2e859accc828593bfabd50fae092670307138b286592fd1a15a429311f077ca2268c6775d1a9c33e439d6fe03b640f3a278c254b04450f4bf43416c5070ddf26ad5d11ee0bcac2b7b1b1ebf916dd5918af8ecc250756824031887105cead2c7a9369f9db559ec1fdf6ae905ffdeb83e1bc3747850113f2121a8f266df22042a242b05b6d1cc97081dda187a4de68261ad570dff102cbd32916345d7be9f61d3aec7f0d817f29727fe5e0e7b30fa08199ef907a79984ae4c0725ead52182a3fb5eceb43b7aaee8a6e30d0f8905d4a75257bc4c64dd143700d1cea698a64f4dc6b1e24b39a91433cbc7fcc9c15454db0acbabb11c3f1c1535ce09d7a04251da58d24793483d014ca564dd3e0d521630ba6516ebe00f6fe6fb833bac34cc40cb3c5d7bd9b50119e0495e17322efbab7a0e23aa56d02b3a929826f3362fbcff68c43f03934f12f7ad76a6643eb092c9a29d2dc5c3af7b1071b075fe989c267ca4e4206c7ae31cb3aee6d24a87e9c0d744ca832860a57dfcdb7440348502d0dca3ef7a760086da704752492cb91bf8007e8eea6f4548ddc8af22ca49bdbd1e5480bb4ef3bf1ba7c4d4bb0bf4eae1b3bea9e09e59e5031375338f51dc28fa33c077f4a6fbd426c956f65a21206a15c028d814972298a9312d83c36f67c49390ea1231f4d22b800bdc589b4848c808bcd256ac751317d2efaae8ca9b3b7e24fcc23aed0a367b85373232280553f90c7c37fbd6ddabab6e6045e6ec2b73f1d72fbb614675d907ef79d5058a2f3f61e57ba94593b93b5d63565913fee081d5fbc9cd9ed8edb4a326c1917cfc9e31e663a520ba682abdfcbcdf9dbb2be39a39a799bf42648586718f3100a3305b4a0d46a64cedd455581f003d4b84504114dd99d938a266334a9fbdbf1930bfad173388b811cf45683ccab1ca2a6507968a99098cd5f3e963bb8e260489f32b3de9094e2bf3e60ab33ab6109110e8d8d3920446cb858553173ef79a5c009513f93ae227d9ebff92b81b7325380978170314874937c553fc3f9cd86a75c936a19d87e21279134bc08902d23cadc90feafe8d2087a81ea6047466ec2ec487d2e729aab6ae1e04dbd8e711de140ae67e394df0281b8f20325aa491e7261c48eccafa3afdf6acd70eb803c13de403b1d5d659d5d70735c96ff675047406788a24dbfaa9422a4fa5d76a839ed0e242d7c74a0675d128b480788cb0be0639bd2c43200821a88cbec979a87a706681ff17fc276c077fd98772894a502f0e211a1d95e2677443d8445447c5118a1acbf851b257b3e446ef8721d60f49fb8bdca878a10b6bd43b2cd32f7220ae276b093675396929d5862fcacfd807772e1ed2c340f6bb225a7cc51e0f50097b77e375973775d6487f3cb3037cdb7909b8a14d957f5bc244bc307f4ab6533d6c85e4b63225eb01ea5a450167face9ab4481d7a0081851adfe86fd44551fe455e596900a4f81623c351a5ea6f95f982d4bb38a76b0040a059b705e9446735ca7c3d3a1854a00b5b32bfce8de1be09028b2f4249c15c4d1e1f22de93da8b75e50a8dd664b16155c01678cd3eec8a92e1a0ff24081475ffcd9e00814d60b05656385c2c667fa4186f94faf9d7471f10ef81825fe05604a22b66cdedfb83cc064386ad93657a2e1b75633d6f0da6e32c347ab4b0db5c744e50889a47ec10418901cd45b76b7a63a384a6a57bd4eb1693f8a720b69c0ad9a695b3361c2d7cb7a42e60972f5b1e479038d000f355fec17684531b35a28ec8f722ed7b07f5c4d3c143b6d3696c78fb86f14dddc5bc553d9fb7f9faabe93f265029eaf4a870f54e0582d46a58ae8ae85959ade32f3b5acba4158355f4c501390c105da6787ed66e28b19d47e170b0e41843b4e0013daf9763746754a7b0e18a41a9e315d148a12d7f92045d6bef12d0474bac40a986b18190e94bf7bb9beb84487e6bcd27ec43c8637af37f142fee93ae4dbdc61b106d920afbe81f8249ae6b6f12aa91f0a5af56d814b1bf6663922cdbfc013ed523c4f3c37b47fab40bef9f09151fa667bfb27d4db0d34b96f3b324bf55c559c3fc6c89ce3abfd37f7597be84aca64f31399e65be0e680da1b5b40601129c3310a39f0502f55d6eb84978b42af8ad13d938a94587880e6ee62df4411fab06346b8f169be20b3e42b011e41907f2c6880999ebc85e4ede6403e15e798f79ff70237340cd557db1f23d1cef80a37cb429a94e4aaad4208d66cb8bfd760f548f9a597cfab2e832693f9577f00ca65dffe4604bf402d4cffa4b0adad5cd8b2c03281738436fc733da22d76b7197eb26341b14efd8b0c6ee43b5f7609402a70ccf10b897823c4a37362b267f302f330805c2b05f78a2", @generic="2338d6e9bac6a1d2781fd263b8586343f30828bfdf4afa1ee0d1b0ae3ad9cd081e5e666d44601f8eede5534a455feeaff853ab68b2f15d55"]}, @typed={0x18, 0x28, @str='\'system):-trusted)\x00'}, @nested={0x20, 0x2b, [@typed={0x8, 0x51, @pid=r4}, @typed={0x4, 0x93}, @typed={0x8, 0x52, @ipv4=@rand_addr=0x10000}, @typed={0x8, 0x58, @fd=r5}]}, @generic]}, 0x12bc}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x18, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000000)=0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) 14:47:25 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xfe80]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0xffffff7f, &(0x7f0000000140)="06"}) [ 407.721685] binder: 32203:32204 ERROR: BC_REGISTER_LOOPER called without request [ 407.729454] binder: undelivered transaction 656, put_user failed [ 407.736690] binder: 32203:32204 ioctl c0306201 20000040 returned -14 [ 407.748248] binder_alloc: binder_alloc_mmap_handler: 32203 20001000-20004000 already mapped failed -16 [ 407.758457] binder: BINDER_SET_CONTEXT_MGR already set [ 407.764007] binder: 32203:32204 ioctl 40046207 0 returned -16 14:47:26 executing program 7: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)) unshare(0x4) 14:47:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xa000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:26 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x4004, 0x1000000020000) 14:47:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x960f, &(0x7f0000000140)="06"}) 14:47:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xff0f000000000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x80000) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000040)) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0), 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[{0x3}, {}, {}, {}, {}, {}, {}], 0x2000000000000181) 14:47:26 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xf5ffffff00000000, 0x1000000020000) [ 407.770679] binder_alloc: 32203: binder_alloc_buf, no vma [ 407.776281] binder: 32203:32206 transaction failed 29189/-3, size 0-0 line 2969 [ 407.784338] binder: undelivered TRANSACTION_COMPLETE [ 407.789610] binder: undelivered TRANSACTION_ERROR: 29189 14:47:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200000, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000200)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x400000800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc0109207, &(0x7f0000000140)) [ 407.849483] binder: 32212:32216 ERROR: BC_REGISTER_LOOPER called without request [ 407.858115] binder_alloc: binder_alloc_mmap_handler: 32212 20001000-20004000 already mapped failed -16 [ 407.867789] binder: BINDER_SET_CONTEXT_MGR already set [ 407.873149] binder: 32212:32216 ioctl 40046207 0 returned -16 [ 407.879423] binder_alloc: 32212: binder_alloc_buf, no vma [ 407.885030] binder: 32212:32221 transaction failed 29189/-3, size 0-0 line 2969 14:47:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0xf95, &(0x7f0000000140)="06"}) [ 407.892944] binder: 32212:32216 ERROR: BC_REGISTER_LOOPER called without request [ 407.900831] binder: undelivered TRANSACTION_ERROR: 29189 [ 407.907627] binder: undelivered TRANSACTION_COMPLETE [ 407.933097] binder: 32229:32230 ERROR: BC_REGISTER_LOOPER called without request [ 407.940980] binder: undelivered transaction 662, put_user failed [ 407.948010] binder: 32229:32230 ioctl c0306201 20000040 returned -14 [ 407.957361] binder_alloc: binder_alloc_mmap_handler: 32229 20001000-20004000 already mapped failed -16 [ 407.967159] binder: BINDER_SET_CONTEXT_MGR already set [ 407.973689] binder: 32229:32230 ioctl 40046207 0 returned -16 [ 407.979902] binder_alloc: 32229: binder_alloc_buf, no vma [ 407.985539] binder: 32229:32237 transaction failed 29189/-3, size 0-0 line 2969 [ 407.987125] FAT-fs (loop1): bogus number of reserved sectors 14:47:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x200000000000000, &(0x7f0000000140)="06"}) [ 407.998926] FAT-fs (loop1): Can't find a valid FAT filesystem [ 408.003297] binder: 32229:32230 ERROR: BC_REGISTER_LOOPER called without request [ 408.023226] binder: undelivered TRANSACTION_ERROR: 29189 [ 408.039439] binder: BINDER_SET_CONTEXT_MGR already set [ 408.045377] binder: 32245:32246 ioctl 40046207 0 returned -16 [ 408.052363] binder_alloc: 32229: binder_alloc_buf, no vma [ 408.058075] binder: 32245:32246 transaction failed 29189/-3, size 0-0 line 2969 [ 408.072099] binder: 32245:32246 ERROR: BC_REGISTER_LOOPER called without request [ 408.101138] binder: undelivered TRANSACTION_COMPLETE [ 408.249934] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 408.257117] FAT-fs (loop6): Filesystem has been set read-only [ 408.263406] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 408.277444] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 408.286300] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000020) 14:47:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0xf401]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:26 executing program 7: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000140)) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x9, 0x737, 0x7) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0xc0145401, &(0x7f0000000b80)={{0x0, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f00000000c0)={0x8}) 14:47:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x4800000000000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:26 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3f, 0x20000) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x7, &(0x7f0000000000), 0x1) r2 = gettid() r3 = geteuid() getgroups(0x7, &(0x7f0000000780)=[0xffffffffffffffff, 0xee01, 0xee00, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee01]) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000007c0)=0x0) fstat(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0, 0x0}, &(0x7f00000008c0)=0xc) sendmsg$unix(r0, &(0x7f00000009c0)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000140)="ffe34a5dc1afe31bf9072bf63ac86783313e2425c4c4ba4aeab5c2cbecb6d9281badbf526dc427423e17ffaf24705815b5b7bec8271935e86989c3d7a99744d5cf31c305fff72c8025955333a6b6adf2873221908357fcc3d380a949349cdcd2fd68874d4dd3b2fc6861985801084b8c04a0da5b83d06b44e9f93445fdc97bfc5a6e8e2913104bb513bd18ab76bfc03da42dda5824cd2ac6108e77668755e029ec96493e9621f0fd9b729f9f313b27a5b932c734e0b6e48f277969c47c445f8d", 0xc0}, {&(0x7f0000000200)="e19932cd8693c4909ef6e7431fd9d9dcc5a38edb4fc0e2f846a5c2b2b2a1198f9d52af0fc2776fa9f4a39f0bc58941eedd5727148e8ce30ba672cc4952f462cbab110fe6bba8e7ed5767d2cedb0430c616257f981b54b3e42d60124fb73f33f72c67dabc244e4c91c292dca54d5b6466e4f57e93445771711f0571d4d0d0b8123df6eb5fef1ea3302a9550c969a88e289407f9081fec5f6f90721478665c2c60002aaee2bd690733a0383619f026175c573646a07e1aaf59bfed9fa82cf84fe4a77147bdcf85f51612dbe42443d4abaeae1ef20209050d4625f836a4532fe3edb67d49f800a25a3a", 0xe8}, {&(0x7f0000000300)="83a7d4fbff669886fde06593402e1ae5ee51b6f84555e2182b8de15a17c6270106da390f0c3fee502e33da4299d3d34e1385e34bbfd592da84dc37b33f9b6cc34d415ac26248b8d916b869156c08a6c53a2f2a1545378ce22ad3220103e1ffe0376d00db881c9a74b74431bbcede6378136bda624d2262b45850fa6f1fa47d37c468bd72bdf941719e55b5beee5f9775db6b345306524f630d1a6aa8a0e459090b7233c7acd0d518d7bf795149", 0xad}, {&(0x7f00000003c0)="e238118a688bd88556b6dc2318f38b66ca3a7bfb979b5186c5ee682ca81fcaff8dee0f420cd3d7afc4fb6de3bd31af08e35ef8bee1af0dacce8a7da6380eb8edbc7229f912066fb4ae161e822e9a6079cbaee497db62057d3ad445bbd323038451495f7ad16486b4e559afddcdf5d9861cee3adeba9820b166e997d2ca544b0b25cb81d6937d9b69026179e9eeffb17e4a0ed3c38878992eb6a7aea34841b702f3182d6b4658ac864efb06b605880ca8d70061d4e3480d6c6c990f624a7b6da57c2597fb7ec46ab5cc423ed8f54c6cd54bbc3344b43e12c6f08f", 0xda}, {&(0x7f00000004c0)="dd68664940ea770ad6025b4cf08061cc24", 0x11}, {&(0x7f0000000500)="023681a1f47541e3aa77789ca74eb3465626535d67969357e1e5ff9268603ea16eacb01416ba2fa2fd05eed131d6fd20eb7819f2bb2f8ec8b8608212b7793ae15ddb323c6ba673b8cc2e583fc5542f51b47ab82fc876f4ed04972e7a9b4969394d3e85dbd2883b9b76aeb6360ae29e2bd28d431540c43b632f2c1c92aec207c33bba6a3a86922ebbbdfa86d8ca8c27b4c625c51a332d9f3f91f923b81dc8e16626f0490f5682422cb95b046a7ff63424aab5ee6103a7752f1677afa750fd825d64859bec296aadf132832f609af633a3f19628b75a1a392a2597fa7a6a7911a36fab56", 0xe3}, {&(0x7f0000000600)="08beb2bbe4001c8071c820bbe8d09f7e0389d0ec4acdc75a5179d429968244396c1fba3462a9ea77392c0da83d65abb63aaccdc6d54a9b9daa2fb2278e945339f0b22dcc992a304e363ea21982178b7663dd91575656e941507a7a57afe1d7647829d03957b537d0a5d9d1563847668f71f9c21cd948c3e76538885ac0edecf67546c906db57a7cbe550431b864f0f445e60c0f12d8ada4efd6d04f50d093facdc15c2281e95", 0xa6}, {&(0x7f00000006c0)="cd8d07502acaad465a69dd80b8686996fc3c3098251d83fce23b4b0e1c76caf12b80cf23991942225df1f6dbd07986981a57aef05899863d65ac", 0x3a}], 0x8, &(0x7f0000000900)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x30, 0x1, 0x1, [r1, r1, r1, r1, r1, r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x20, 0x1, 0x1, [r0, r0, r1]}, @rights={0x18, 0x1, 0x1, [r0, r1]}], 0xa8, 0x4000001}, 0x4000) 14:47:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:26 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xfffffffb, 0x1000000020000) 14:47:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xfffffffe]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:26 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f00000002c0)='/dev/snd/controlC#\x00', 0x100000000, 0xfffffffffffffffd) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0xc, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040)}) 14:47:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x68000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:26 executing program 4: mkdir(&(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000280)=""/194, 0xc2) r1 = open(&(0x7f0000000000)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x107fc, 0x3) mknodat(r1, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x3) 14:47:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000), 0xc, &(0x7f0000ff5000)={&(0x7f00002a0e50)={0x18, 0x30, 0x3, 0x0, 0x0, {0x400002}, [@nested={0x4}]}, 0x18}}, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x3fed, 0x80) write$P9_RLERRORu(r1, &(0x7f0000000100)={0x14, 0x7, 0x2, {{0x7, '\'ppp1-]'}}}, 0x14) modify_ldt$write2(0x11, &(0x7f0000000080)={0x6e7, 0xffffffffffffffff, 0x0, 0x4, 0x6, 0x9, 0x8, 0xffffffff, 0x20, 0xa7c6}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x8000, 0x0) 14:47:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x7000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 408.680235] 9pnet: p9_fd_create_tcp (32288): problem connecting socket to [ 408.680235] 27.0.0.1 14:47:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xa00000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:26 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000007000)={0x0, 0x3, &(0x7f0000009000), &(0x7f0000001000)='GPL\x00', 0x0, 0x3d, &(0x7f0000009000)=""/61}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0xd81d}, 0x46f) 14:47:26 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x200000000000000, 0x1000000020000) [ 408.779509] 9pnet: p9_fd_create_tcp (32298): problem connecting socket to [ 408.779509] 27.0.0.1 14:47:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x4000000, &(0x7f0000000140)="06"}) 14:47:27 executing program 7: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000004000)) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000080)) r1 = socket(0x18, 0x6, 0x28) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e21, 0x1, @remote, 0x1}, 0x1c) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0xa0001, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0xffffffff, 0x6}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r3, 0x9, 0x20}, 0xc) 14:47:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x500, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x3000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x800000000, 0x4) getsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@security={'security\x00', 0xe, 0x4, 0x420, 0x120, 0x230, 0x0, 0x230, 0x0, 0x350, 0x350, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000040), {[{{@ipv6={@loopback, @local, [0x0, 0x0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffff00], 'veth1\x00', 'bond0\x00', {}, {}, 0x73, 0x2, 0x2, 0x1}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d3, 0x4d6, 0x6, 0xa257, 0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xec, 0xb61}}}, {{@uncond, 0x0, 0xc8, 0x110}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x80000000, 'syz1\x00', 0x5}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d2, 0x4d2, 0xc7e4, 0x7fffffff, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0x4826, 0x3}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) [ 408.843042] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 408.850275] FAT-fs (loop6): Filesystem has been set read-only [ 408.861623] binder_alloc: binder_alloc_mmap_handler: 32245 20001000-20004000 already mapped failed -16 [ 408.873299] binder_alloc: 32245: binder_alloc_buf, no vma [ 408.879027] binder: 32245:32318 transaction failed 29189/-3, size 0-0 line 2969 [ 408.887784] binder: undelivered TRANSACTION_ERROR: 29189 [ 408.939031] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 408.948142] binder: 32328:32329 ERROR: BC_REGISTER_LOOPER called without request [ 408.959365] binder: undelivered transaction 668, put_user failed [ 408.965690] binder: 32328:32329 ioctl c0306201 20000040 returned -14 [ 408.974020] binder_alloc: binder_alloc_mmap_handler: 32328 20001000-20004000 already mapped failed -16 [ 408.979799] 9pnet: p9_fd_create_tcp (32335): problem connecting socket to [ 408.979799] 27.0.0.1 [ 408.992872] binder: BINDER_SET_CONTEXT_MGR already set [ 408.998275] binder_alloc: 32328: binder_alloc_buf, no vma [ 409.003874] binder: 32328:32337 transaction failed 29189/-3, size 0-0 line 2969 [ 409.011987] binder: 32328:32329 ioctl 40046207 0 returned -16 [ 409.080628] binder: undelivered TRANSACTION_ERROR: 29189 [ 409.109471] binder: undelivered TRANSACTION_COMPLETE [ 409.126489] binder: undelivered TRANSACTION_ERROR: 29189 [ 409.178045] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) [ 409.185213] FAT-fs (loop1): Filesystem has been set read-only [ 409.191355] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075e) 14:47:27 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x4c00000000000000, &(0x7f0000000140)="06"}) 14:47:27 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x2c00c0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, r0, 0x0, 0xffffffffffffffff, 0x0) 14:47:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xfe800000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='fd/4\x00') r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060"}], 0xaaaaaaaaaaaa84c, 0x0, &(0x7f0000000140), 0x10000000000000c5) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000500)=[&(0x7f00000000c0)='{mime_type\x00'], &(0x7f00000004c0)) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)) rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000200)={0x77359400}, 0xfffffffffffffe9c) ioctl$KVM_RUN(r4, 0xae80, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) 14:47:27 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x7fffffffffffffff, 0x1000000020000) 14:47:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x700000000000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:27 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x900000000000000, 0x1000000020000) [ 409.390769] binder: 32354:32365 ERROR: BC_REGISTER_LOOPER called without request [ 409.401617] binder: undelivered transaction 671, put_user failed [ 409.407867] binder: 32354:32365 ioctl c0306201 20000040 returned -14 [ 409.416464] binder_alloc: binder_alloc_mmap_handler: 32354 20001000-20004000 already mapped failed -16 [ 409.426452] binder: BINDER_SET_CONTEXT_MGR already set [ 409.431829] binder: 32354:32365 ioctl 40046207 0 returned -16 14:47:27 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x7400, &(0x7f0000000140)="06"}) [ 409.432444] binder_alloc: 32354: binder_alloc_buf, no vma [ 409.443437] binder: 32354:32374 transaction failed 29189/-3, size 0-0 line 2969 [ 409.451040] binder: 32354:32365 ERROR: BC_REGISTER_LOOPER called without request [ 409.471028] binder: undelivered TRANSACTION_ERROR: 29189 [ 409.476962] binder: undelivered TRANSACTION_COMPLETE 14:47:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xffffff7f, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 409.487273] binder: 32385:32386 ERROR: BC_REGISTER_LOOPER called without request [ 409.496302] binder_alloc: binder_alloc_mmap_handler: 32385 20001000-20004000 already mapped failed -16 [ 409.506159] binder: BINDER_SET_CONTEXT_MGR already set [ 409.511551] binder_alloc: 32385: binder_alloc_buf, no vma [ 409.511674] binder: 32385:32386 ioctl 40046207 0 returned -16 [ 409.517229] binder: 32385:32392 transaction failed 29189/-3, size 0-0 line 2969 [ 409.531659] binder: undelivered TRANSACTION_ERROR: 29189 14:47:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x4c, &(0x7f0000000140)="06"}) 14:47:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x4000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 409.546352] binder: undelivered TRANSACTION_COMPLETE [ 409.596018] binder: 32399:32400 ERROR: BC_REGISTER_LOOPER called without request [ 409.604570] binder_alloc: binder_alloc_mmap_handler: 32399 20001000-20004000 already mapped failed -16 [ 409.616569] binder: BINDER_SET_CONTEXT_MGR already set [ 409.622037] binder_alloc: 32399: binder_alloc_buf, no vma [ 409.622055] binder: 32399:32400 ioctl 40046207 0 returned -16 [ 409.627740] binder: 32399:32404 transaction failed 29189/-3, size 0-0 line 2969 14:47:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x2, &(0x7f0000000140)="06"}) [ 409.641589] binder: undelivered TRANSACTION_ERROR: 29189 [ 409.647559] binder: undelivered TRANSACTION_COMPLETE [ 409.690323] binder: 32410:32412 ERROR: BC_REGISTER_LOOPER called without request [ 409.700372] binder_alloc: binder_alloc_mmap_handler: 32410 20001000-20004000 already mapped failed -16 [ 409.710757] binder: BINDER_SET_CONTEXT_MGR already set [ 409.716165] binder_alloc: 32410: binder_alloc_buf, no vma [ 409.716234] binder: 32410:32412 ioctl 40046207 0 returned -16 [ 409.721852] binder: 32410:32413 transaction failed 29189/-3, size 0-0 line 2969 14:47:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x6c00000000000000, &(0x7f0000000140)="06"}) 14:47:27 executing program 4: add_key(&(0x7f0000000200)="6173796d6d65747269630000f623c165dbdd5da4e516feae1218931b7f62f1989e779cb3e199015e6f224dc786b78b696462c7dec58cd05fa42773a0af0a703d63e1962008165b5d862cf735059c401152746037a51f9d035dcf4197d265f6f5d246b14212db69e767574420fb11a7308eb293967dbd5a729bb8c6833a854e2036d4e9270fef4cef270638e56c144263ecf69038c96c9d38f68668c21513e19c1311eea8ee94c59609987d033ca3c8ad624dbc5c8958aaa4e9158c5850c6228a22d0adaabe8bba70a4e2011090b566c069d5ba", &(0x7f0000000100), &(0x7f0000000040)="3080", 0x2, 0xfffffffffffffffd) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)) 14:47:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x300, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffed7) shutdown(r2, 0x0) 14:47:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x34000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 409.735370] binder: 32410:32412 ERROR: BC_REGISTER_LOOPER called without request [ 409.755236] binder: undelivered TRANSACTION_ERROR: 29189 [ 409.761198] binder: undelivered TRANSACTION_COMPLETE [ 409.784285] binder: 32414:32415 ERROR: BC_REGISTER_LOOPER called without request [ 409.792352] binder: undelivered transaction 683, put_user failed [ 409.798863] binder: 32414:32415 ioctl c0306201 20000040 returned -14 [ 409.812223] binder_alloc: binder_alloc_mmap_handler: 32414 20001000-20004000 already mapped failed -16 [ 409.822375] binder: BINDER_SET_CONTEXT_MGR already set [ 409.827793] binder_alloc: 32414: binder_alloc_buf, no vma [ 409.827997] binder: 32414:32415 ioctl 40046207 0 returned -16 14:47:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x2000, &(0x7f0000000140)="06"}) [ 409.833428] binder: 32414:32418 transaction failed 29189/-3, size 0-0 line 2969 [ 409.847471] binder: undelivered TRANSACTION_ERROR: 29189 [ 409.875290] binder: undelivered TRANSACTION_COMPLETE 14:47:28 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000040)=0x5) syz_emit_ethernet(0xffffff61, &(0x7f0000000140)={@local, @broadcast, [{[], {0x8100, 0x100000000, 0x4, 0x4}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)={0x0, 0x0, [0x100000000]}) [ 409.884943] binder: 32430:32431 ERROR: BC_REGISTER_LOOPER called without request [ 409.892605] binder: undelivered transaction 686, put_user failed [ 409.899015] binder: 32430:32431 ioctl c0306201 20000040 returned -14 [ 409.916236] binder_alloc: binder_alloc_mmap_handler: 32430 20001000-20004000 already mapped failed -16 [ 409.918746] 9pnet: p9_fd_create_tcp (32428): problem connecting socket to [ 409.918746] 27.0.0.1 [ 409.935103] binder: BINDER_SET_CONTEXT_MGR already set [ 409.940585] binder_alloc: 32430: binder_alloc_buf, no vma [ 409.941465] binder: 32430:32431 ioctl 40046207 0 returned -16 [ 409.946200] binder: 32430:32434 transaction failed 29189/-3, size 0-0 line 2969 [ 409.946502] binder: undelivered TRANSACTION_ERROR: 29189 [ 410.004416] binder: undelivered TRANSACTION_COMPLETE 14:47:28 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xffffffffffffff7f, 0x1000000020000) 14:47:28 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x3400f}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xfffffffffffffed5, 0x35, 0x829, 0x0, 0x0, {0x3}, [@generic="6f7924a3ea291327e3652f26143a5157fb235bf74457bcc008ea5614887118b81e50ab4d384781eec5d7cd776febdaf64970ae6e226adc10963727e14e57ebd223975638b0e92053639e44029d4817"]}, 0x64}}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) syz_open_pts(r1, 0x1) [ 410.087343] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 410.094554] FAT-fs (loop6): Filesystem has been set read-only [ 410.100849] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) 14:47:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x10000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 410.229461] 9pnet: p9_fd_create_tcp (32457): problem connecting socket to [ 410.229461] 27.0.0.1 14:47:28 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x3, &(0x7f0000000140)="06"}) 14:47:28 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xfc]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:28 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x9, @ipv4={[], [], @rand_addr=0x7fffffff}}, 0xc) listen(r0, 0xffffffffffffff7f) fdatasync(r0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000000c0)="480000001400190d09004beafd0d8c560a84470080ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 14:47:28 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xfbffffff, 0x1000000020000) 14:47:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = memfd_create(&(0x7f00000004c0)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92d2a0b84e4dff1dcefc64ecf978f1f81081b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281dbee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4be90901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00", 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x5, 0x20, 0x1f00, 0x4}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000380)={r2, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x7}}, 0x9}, &(0x7f0000000200)=0x90) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000000)={0x1, 0x8000, [{0x80, 0x0, 0x6}]}) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000600)=""/4096) ppoll(&(0x7f0000000240)=[{r0, 0x2}, {r0, 0x400}, {r1, 0x1014}, {r1, 0x100}, {r1, 0x9040}, {r0, 0x8000}, {r0}, {r0, 0x8080}], 0x8, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300)={0xffff}, 0x8) lseek(r1, 0x0, 0x4) 14:47:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xf6ffffff, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 410.325829] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 410.333018] FAT-fs (loop6): Filesystem has been set read-only [ 410.339096] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 410.369541] binder: 32463:32467 ERROR: BC_REGISTER_LOOPER called without request [ 410.377529] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 410.386143] binder_alloc: binder_alloc_mmap_handler: 32463 20001000-20004000 already mapped failed -16 [ 410.395472] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000020) [ 410.402889] binder: BINDER_SET_CONTEXT_MGR already set [ 410.408503] binder: 32463:32467 ioctl 40046207 0 returned -16 14:47:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x7a000000, &(0x7f0000000140)="06"}) 14:47:28 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x1fffff]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 410.414768] binder_alloc: 32463: binder_alloc_buf, no vma [ 410.420549] binder: 32463:32479 transaction failed 29189/-3, size 0-0 line 2969 [ 410.428682] binder: 32463:32467 ERROR: BC_REGISTER_LOOPER called without request [ 410.443729] binder: undelivered TRANSACTION_ERROR: 29189 14:47:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendto(r2, &(0x7f0000000200), 0x0, 0xfffffdffffffffff, &(0x7f0000000000)=@hci, 0x80) pipe2(&(0x7f0000000200), 0x80000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/50, 0x32}, 0x0) sendto(r2, &(0x7f0000001640)="13", 0x1, 0x0, &(0x7f0000002a80)=@nl=@unspec, 0x80) 14:47:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xa000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 410.474080] binder: BINDER_SET_CONTEXT_MGR already set [ 410.479663] binder: 32490:32493 ioctl 40046207 0 returned -16 [ 410.488549] binder_alloc: 32463: binder_alloc_buf, no vma [ 410.494252] binder: 32490:32493 transaction failed 29189/-3, size 0-0 line 2969 [ 410.503306] binder: 32490:32493 ERROR: BC_REGISTER_LOOPER called without request 14:47:28 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1c}, 0x23) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x400) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) syslog(0xf, &(0x7f0000000200)=""/159, 0x9f) write$P9_RCLUNK(r1, &(0x7f0000000080)={0x7}, 0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9c}, [@ldst={0x7, 0x1, 0x0, 0x0, 0x7a}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x450, &(0x7f000000cf3d)=""/195}, 0x48) getsockopt$inet_buf(r1, 0x0, 0x25, &(0x7f0000000140)=""/109, &(0x7f0000000040)=0x6d) 14:47:28 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xf5000000, 0x1000000020000) 14:47:28 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x58efff7f]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 410.529080] binder: undelivered TRANSACTION_COMPLETE [ 410.529361] 9pnet: p9_fd_create_tcp (32500): problem connecting socket to [ 410.529361] 27.0.0.1 [ 410.566263] 9pnet: p9_fd_create_tcp (32500): problem connecting socket to [ 410.566263] 27.0.0.1 14:47:28 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x4, 0x100000001, 'queue1\x00'}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40000, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0x8, 0x4) fcntl$getownex(r0, 0x10, &(0x7f00000002c0)={0x0, 0x0}) wait4(r2, &(0x7f0000000300), 0xb, &(0x7f0000000440)) r3 = getpid() fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000680)={0x81, 0x3, 0x5, 0xa129, 0x101, 0x3}) accept$alg(r1, 0x0, 0x0) fchmodat(r1, &(0x7f0000000500)='./file0\x00', 0x3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000003c0)={0x0, 0x7f, 0x7fffffff}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0xfffffffffffffff9, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000540)={0xe10, 0x3, 0x9, 0x0, 0x0, [], [], [], 0x0, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x8, 0x2, 0x6, 'queue1\x00', 0x1}) 14:47:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x6000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 410.820935] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 410.828133] FAT-fs (loop6): Filesystem has been set read-only [ 410.834381] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 410.849761] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 410.858272] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000020) 14:47:29 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714074") 14:47:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xec04]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x700, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:29 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:29 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xa800, 0x1000000020000) 14:47:29 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x31, 0x1000000020000) 14:47:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x600]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 411.212373] 9pnet: p9_fd_create_tcp (32543): problem connecting socket to [ 411.212373] 27.0.0.1 14:47:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x74000000, &(0x7f0000000140)="06"}) 14:47:29 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x800, &(0x7f0000000280)="0a5cb00700315f85714070") r1 = socket(0x10, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) [ 411.266230] binder_alloc: binder_alloc_mmap_handler: 32490 20001000-20004000 already mapped failed -16 [ 411.276026] binder_alloc: 32490: binder_alloc_buf, no vma [ 411.281647] binder: 32490:32560 transaction failed 29189/-3, size 0-0 line 2969 [ 411.290522] binder: 32490:32559 ERROR: BC_REGISTER_LOOPER called without request [ 411.322680] binder: BINDER_SET_CONTEXT_MGR already set [ 411.328296] binder: 32565:32569 ioctl 40046207 0 returned -16 [ 411.334964] binder_alloc: 32490: binder_alloc_buf, no vma [ 411.340670] binder: 32565:32569 transaction failed 29189/-3, size 0-0 line 2969 [ 411.351321] binder: undelivered TRANSACTION_ERROR: 29189 [ 411.357807] binder: 32565:32569 ERROR: BC_REGISTER_LOOPER called without request 14:47:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x4c00, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x4ec]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 411.372955] FAT-fs (loop1): bogus number of reserved sectors [ 411.378859] FAT-fs (loop1): Can't find a valid FAT filesystem [ 411.390819] binder: undelivered TRANSACTION_ERROR: 29189 14:47:29 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000140)=0x100, 0xfd50) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @empty, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001940)={@dev, @loopback, 0x0}, &(0x7f0000001980)=0xc) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000019c0)={@mcast1, r2}, 0x14) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") listen(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000001c0)='veno\x00', 0x5) sendto$inet6(r3, &(0x7f0000000280), 0xfffffffffffffedd, 0x2000012c, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) close(r0) 14:47:29 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x700, 0x1000000020000) 14:47:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xf401000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 411.481830] 9pnet: p9_fd_create_tcp (32583): problem connecting socket to [ 411.481830] 27.0.0.1 14:47:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xff000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 411.554636] device team0 entered promiscuous mode [ 411.559610] device team_slave_0 entered promiscuous mode [ 411.565198] device team_slave_1 entered promiscuous mode [ 411.589524] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 411.591633] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 411.607107] FAT-fs (loop6): Filesystem has been set read-only [ 411.608460] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.628598] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 411.645495] 9pnet: p9_fd_create_tcp (32583): problem connecting socket to [ 411.645495] 27.0.0.1 14:47:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x400000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:29 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x900000000000000, 0x1000000020000) 14:47:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xff0f0000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 411.656248] device team0 left promiscuous mode [ 411.660927] device team_slave_0 left promiscuous mode [ 411.666282] device team_slave_1 left promiscuous mode 14:47:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x58efff7f00000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 411.699385] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 411.877134] device team0 entered promiscuous mode [ 411.882064] device team_slave_0 entered promiscuous mode [ 411.887654] device team_slave_1 entered promiscuous mode [ 411.895695] 8021q: adding VLAN 0 to HW filter on device team0 14:47:30 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xec04000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x9000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:30 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/202, 0x13}], 0x200000000000005b, 0x0) mkdirat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x1ff) [ 411.995417] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 412.002602] FAT-fs (loop6): Filesystem has been set read-only [ 412.008669] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 412.022492] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000ff0) [ 412.030599] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000020) [ 412.068039] 9pnet: p9_fd_create_tcp (32633): problem connecting socket to [ 412.068039] 27.0.0.1 14:47:30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xb80b000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/123, 0x7b}, 0x0) 14:47:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0xffffff7f00000000, &(0x7f0000000140)="06"}) 14:47:30 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x500000000000000, 0x1000000020000) 14:47:30 executing program 7: r0 = socket$inet6(0xa, 0x100000000007b, 0xfffffffffffffdfa) r1 = shmget(0x2, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") timer_create(0x0, &(0x7f0000000240)={0x0, 0x15, 0x7, @thr={&(0x7f00000000c0)="7382d9da1f8eb6b3f31ede043ec76b102cde99a22adc1c546701e938f1a7b4bb31ecc93c69e7db7e7748d641a3d4f3b48cf1b02c649bbf6af3821f05faefd54a9074a62427de3524d4fbaee44d5390539d48f6765d7076f39011f8e3b53c2a147294792e6f4b3115cc4bfa722344d64c82029b429e8f38558ca3f7137c51aae4c46ddfcca36a5ae144078b207f2f5b7eec36c646b0b252308233f7b579819660ef3cad5a71831c6a52fdb8066fbead2b46be010358eb25192fe257abea5cd81caf", &(0x7f00000001c0)="4412bf601f92481cf5e492769dc4a9106b50b794dd54d79f27f9c3b13506db181f8f9295ec2c391b006d3acb7e3e5810a4488883a4fc6371d93abfed0a3379a137b84feac2ec567c37cc1202e5a13ed70f65dcbb743dd4ce87227a887b4030968334bddcef6487a0c30d81995307a1"}}, &(0x7f00000002c0)) seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6, 0x0, 0x0, 0x407ffffffd}]}) r2 = accept(r0, &(0x7f0000007a40)=@in={0x2, 0x0, @local}, &(0x7f0000002240)=0x80) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000002640)=0x1631) timer_create(0x3, &(0x7f0000044000)={0x0, 0x0, 0x1}, &(0x7f0000000000)) exit(0x0) timer_delete(0x0) r3 = dup3(r0, r0, 0x80000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r3, 0x2) recvmmsg(r3, &(0x7f0000007780)=[{{&(0x7f0000000340)=@generic, 0x80, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/138, 0x8a}, {&(0x7f0000000480)=""/55, 0x37}, {&(0x7f00000004c0)=""/9, 0x9}, {&(0x7f0000000500)=""/105, 0x69}, {&(0x7f0000000580)=""/124, 0x7c}, {&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/98, 0x62}, {&(0x7f00000006c0)=""/9, 0x9}], 0x8, &(0x7f0000000780)=""/107, 0x6b, 0x1f}, 0x3}, {{&(0x7f0000000800)=@ipx, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/145, 0x91}, {&(0x7f0000000940)=""/205, 0xcd}, {&(0x7f0000000a40)=""/241, 0xf1}], 0x3, 0x0, 0x0, 0x4}, 0xffff}, {{&(0x7f0000000b80)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/93, 0x5d}], 0x2, &(0x7f0000001cc0)=""/167, 0xa7, 0x5}, 0x191}, {{&(0x7f0000001d80)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001e00)=""/225, 0xe1}, {&(0x7f0000001f00)=""/112, 0x70}], 0x2, &(0x7f0000001fc0)=""/231, 0xe7, 0x3}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000020c0)=""/138, 0x8a}, {&(0x7f0000002180)=""/55, 0x37}, {&(0x7f00000021c0)=""/80, 0x50}, {&(0x7f0000002240)}, {&(0x7f0000002280)=""/155, 0x9b}, {&(0x7f0000002340)=""/149, 0x95}, {&(0x7f0000002400)=""/246, 0xf6}, {&(0x7f0000002500)=""/25, 0x19}, {&(0x7f0000002540)=""/222, 0xde}, {&(0x7f0000002640)}], 0xa, 0x0, 0x0, 0x40}, 0x3f}, {{&(0x7f0000002740)=@pppol2tpv3, 0x80, &(0x7f0000003a80)=[{&(0x7f00000027c0)=""/56, 0x38}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/61, 0x3d}, {&(0x7f0000003840)=""/175, 0xaf}, {&(0x7f0000003900)=""/172, 0xac}, {&(0x7f00000039c0)=""/187, 0xbb}], 0x6, &(0x7f0000003b00)=""/157, 0x9d, 0x500000000}, 0xfffffffffffffffe}, {{&(0x7f0000003bc0)=@xdp, 0x80, &(0x7f0000005000)=[{&(0x7f0000003c40)=""/119, 0x77}, {&(0x7f0000003cc0)=""/120, 0x78}, {&(0x7f0000003d40)=""/205, 0xcd}, {&(0x7f0000003e40)=""/181, 0xb5}, {&(0x7f0000003f00)=""/4096, 0x1000}, {&(0x7f0000004f00)=""/216, 0xd8}], 0x6, &(0x7f0000005080)=""/173, 0xad, 0x100}, 0x7}, {{&(0x7f0000005140)=@nfc_llcp, 0x80, &(0x7f0000006240)=[{&(0x7f00000051c0)=""/4096, 0x1000}, {&(0x7f00000061c0)=""/74, 0x4a}], 0x2, &(0x7f0000006280)=""/4096, 0x1000, 0x3f}, 0x7}, {{&(0x7f0000007280)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000007340)=[{&(0x7f0000007300)=""/37, 0x25}], 0x1, &(0x7f0000007380)=""/79, 0x4f, 0x6}, 0x60}, {{&(0x7f0000007400)=@generic, 0x80, &(0x7f0000007680)=[{&(0x7f0000007480)=""/124, 0x7c}, {&(0x7f0000007500)=""/191, 0xbf}, {&(0x7f00000075c0)=""/161, 0xa1}], 0x3, &(0x7f00000076c0)=""/159, 0x9f, 0x4}, 0x5}], 0xa, 0x40000000, &(0x7f0000007a00)) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'trusted.', 'cgroup\x00'}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000300)) [ 412.122681] binder_alloc: binder_alloc_mmap_handler: 32565 20001000-20004000 already mapped failed -16 [ 412.132742] binder_alloc: 32565: binder_alloc_buf, no vma [ 412.138417] binder: 32565:32643 transaction failed 29189/-3, size 0-0 line 2969 [ 412.147069] binder: 32565:32642 ERROR: BC_REGISTER_LOOPER called without request [ 412.155592] binder: undelivered TRANSACTION_ERROR: 29189 [ 412.161648] binder: undelivered TRANSACTION_ERROR: 29189 [ 412.188445] binder: 32647:32648 ERROR: BC_REGISTER_LOOPER called without request [ 412.196295] binder: undelivered transaction 698, put_user failed [ 412.202956] binder: 32647:32648 ioctl c0306201 20000040 returned -14 [ 412.211126] binder_alloc: binder_alloc_mmap_handler: 32647 20001000-20004000 already mapped failed -16 [ 412.221131] binder: BINDER_SET_CONTEXT_MGR already set [ 412.226590] binder: 32647:32648 ioctl 40046207 0 returned -16 [ 412.233136] binder_alloc: 32647: binder_alloc_buf, no vma [ 412.238783] binder: 32647:32658 transaction failed 29189/-3, size 0-0 line 2969 [ 412.246774] binder: 32647:32648 ERROR: BC_REGISTER_LOOPER called without request [ 412.257063] binder: undelivered TRANSACTION_ERROR: 29189 [ 412.284701] binder: undelivered TRANSACTION_COMPLETE 14:47:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x4800000000000000, &(0x7f0000000140)="06"}) 14:47:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x4c, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x200000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000040)=0xfffffffffffffffd, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000000)=0x68) getsockname$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @local}, &(0x7f00000003c0)=0x1c) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e23, 0xfffffffffffffe00, @ipv4={[], [], @rand_addr=0x8001}, 0x3}}, 0xfffffffffffffbff, 0x4, 0x2, "84104ff1e5c0fd5d4cd6c2434ce677c619adc99a4700fa7c8b83897dec41b270b5af7fe107828abfa11371b18fd1fcbdf3255b85aa0dfa0929516e70650b3ba588eb1a35772e54d80aef7bc658bf754e"}, 0xd8) setfsuid(r1) 14:47:30 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xd00000000000000, 0x1000000020000) 14:47:30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xb800000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 412.371163] binder: 32669:32671 ERROR: BC_REGISTER_LOOPER called without request [ 412.378791] binder: undelivered transaction 701, put_user failed [ 412.385997] binder: 32669:32671 ioctl c0306201 20000040 returned -14 [ 412.394094] binder_alloc: binder_alloc_mmap_handler: 32669 20001000-20004000 already mapped failed -16 [ 412.414277] binder: BINDER_SET_CONTEXT_MGR already set 14:47:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0xffffffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000080)) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x3, @local, 'irlan0\x00'}}) write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) write$binfmt_misc(r2, &(0x7f0000000040)={'syz1'}, 0xffcf) [ 412.419735] binder: 32669:32671 ioctl 40046207 0 returned -16 [ 412.428955] binder_alloc: 32669: binder_alloc_buf, no vma [ 412.434573] binder: 32669:32680 transaction failed 29189/-3, size 0-0 line 2969 [ 412.442476] binder: undelivered TRANSACTION_ERROR: 29189 [ 412.453318] 9pnet: p9_fd_create_tcp (32674): problem connecting socket to [ 412.453318] 27.0.0.1 [ 412.483537] binder: undelivered TRANSACTION_COMPLETE [ 412.578603] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 412.585793] FAT-fs (loop6): Filesystem has been set read-only [ 412.591833] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 412.606901] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 412.615007] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000020) 14:47:31 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0xfdfdffff, &(0x7f0000000140)="06"}) 14:47:31 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xf401]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:31 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xd00000000000000, 0x1000000020000) 14:47:31 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000280)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd7271fb2d0d91c5ca3a4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0xfffffffffffffffe) pwrite64(r1, &(0x7f000003bfff), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0x7, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x0, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000380)={0xa, 0x4, 0xfa00, {r2}}, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000080)="b988c337f70518cf5e0fb968fae1e040833dea64632ee57f0c7ab7d7229a0a03ac3b30687e06106b72522f1c2d16d2e7fe5af6697a8dec7f8c1d35ae0287e97c9e52ed58da7b132d1dab9392c43285b94768e88772e97a4df93881ca6772249b4a6a17479ff933cc9ce9d94968755d5a320b3d19c4dffd69fa21a4ef71127d4e7b5935"}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x47, "c69ace7e8854c8bacd19229488353fbe86c8462d34bdc5393378689cc2af135eb5f98a0ed1354b7a1a45e09bd98a6c8ef4a7980888f5c342eb6329f442e0b3a1ae5d390ffac581"}, &(0x7f0000000200)=0x4f) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000240)={r4, 0x4, 0x9}, 0x8) [ 412.876010] binder: 32704:32710 ERROR: BC_REGISTER_LOOPER called without request [ 412.883759] binder: undelivered transaction 704, put_user failed [ 412.890024] binder: 32704:32710 ioctl c0306201 20000040 returned -14 [ 412.901532] binder_alloc: binder_alloc_mmap_handler: 32704 20001000-20004000 already mapped failed -16 [ 412.914599] binder: BINDER_SET_CONTEXT_MGR already set [ 412.920114] binder: 32704:32710 ioctl 40046207 0 returned -16 14:47:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0xecffffff, &(0x7f0000000140)="06"}) [ 412.926236] binder_alloc: 32704: binder_alloc_buf, no vma [ 412.931877] binder: 32704:32711 transaction failed 29189/-3, size 0-0 line 2969 [ 412.932868] 9pnet: p9_fd_create_tcp (32718): problem connecting socket to [ 412.932868] 27.0.0.1 [ 412.943303] binder: undelivered TRANSACTION_ERROR: 29189 [ 412.967580] binder: undelivered TRANSACTION_COMPLETE 14:47:31 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x7ffffffff000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 412.988740] binder: 32725:32726 ERROR: BC_REGISTER_LOOPER called without request [ 412.996669] binder: undelivered transaction 707, put_user failed [ 413.018944] binder: 32725:32726 ioctl c0306201 20000040 returned -14 [ 413.030229] binder_alloc: binder_alloc_mmap_handler: 32725 20001000-20004000 already mapped failed -16 [ 413.039843] binder: BINDER_SET_CONTEXT_MGR already set [ 413.045317] binder_alloc: 32725: binder_alloc_buf, no vma [ 413.045655] binder: 32725:32726 ioctl 40046207 0 returned -16 [ 413.051320] binder: 32725:32733 transaction failed 29189/-3, size 0-0 line 2969 [ 413.065052] binder: 32725:32726 ERROR: BC_REGISTER_LOOPER called without request [ 413.072786] binder: undelivered TRANSACTION_ERROR: 29189 [ 413.078327] binder: undelivered TRANSACTION_COMPLETE 14:47:31 executing program 7: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10401, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f00000000c0)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7e, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000), 0xc) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0x9) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=""/20, 0x14}, 0x0) shutdown(r1, 0x1) 14:47:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x48, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x5000000, &(0x7f0000000140)="06"}) 14:47:31 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00002d5000/0x400000)=nil, 0x400000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f000049f000/0x1000)=nil, &(0x7f00008ac000/0x4000)=nil, 0x1000}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendto(r1, &(0x7f0000000100)="caa5e50f8d312639df2db62fe3bfddc16243fc5f5436caab33fd6f64660243cbbc59d1fd2d52d108152028811bcb5616a43b5ef67a1430d3d4c0a7e79c1070e6d591f51c0ddc2bf07bebe3c42a306101f977f376e4d30a895e890ba17c607d36ed48333f79f3088ce4e7a97d0d0c8fdb516b482feddb49de9ee86bee1c196b953202f17f5a0000093aecf55328954ed1e31f8793f99371e44671", 0x9a, 0x4800, &(0x7f00000001c0)=@ax25={0x3, {"25623c36d1355a"}, 0x1ff}, 0x80) 14:47:31 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x600000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 413.163037] binder: 32737:32742 ERROR: BC_REGISTER_LOOPER called without request [ 413.170699] binder: undelivered transaction 710, put_user failed [ 413.178719] binder: 32737:32742 ioctl c0306201 20000040 returned -14 [ 413.190325] binder_alloc: binder_alloc_mmap_handler: 32737 20001000-20004000 already mapped failed -16 [ 413.200315] binder: BINDER_SET_CONTEXT_MGR already set [ 413.205684] binder_alloc: 32737: binder_alloc_buf, no vma 14:47:31 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xffffffffffff0700, 0x1000000020000) 14:47:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0xf96, &(0x7f0000000140)="06"}) [ 413.205816] binder: 32737:32742 ioctl 40046207 0 returned -16 [ 413.211356] binder: 32737:32749 transaction failed 29189/-3, size 0-0 line 2969 [ 413.225352] binder: undelivered TRANSACTION_ERROR: 29189 [ 413.231186] binder: undelivered TRANSACTION_COMPLETE [ 413.249035] 9pnet: p9_fd_create_tcp (32741): problem connecting socket to [ 413.249035] 27.0.0.1 14:47:31 executing program 4: setgroups(0x0, &(0x7f0000000200)) getgroups(0x1, &(0x7f0000000000)=[0xee01]) r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x101, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000100)={0x45d9, 0x9}) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000080)={0x5, 0x81, 0x1, 0x7}) [ 413.275528] binder: 32755:32757 ERROR: BC_REGISTER_LOOPER called without request [ 413.283382] binder: undelivered transaction 713, put_user failed [ 413.289982] binder: 32755:32757 ioctl c0306201 20000040 returned -14 [ 413.298341] binder_alloc: binder_alloc_mmap_handler: 32755 20001000-20004000 already mapped failed -16 [ 413.317808] binder: BINDER_SET_CONTEXT_MGR already set [ 413.323294] binder: 32755:32757 ioctl 40046207 0 returned -16 [ 413.329712] binder_alloc: 32755: binder_alloc_buf, no vma [ 413.335357] binder: 32755:32760 transaction failed 29189/-3, size 0-0 line 2969 [ 413.343305] binder: undelivered TRANSACTION_COMPLETE [ 413.348745] binder: undelivered TRANSACTION_ERROR: 29189 [ 413.375548] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 413.382838] FAT-fs (loop6): Filesystem has been set read-only [ 413.396525] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075e) [ 413.433209] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 413.444389] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000020) 14:47:31 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x6c, &(0x7f0000000140)="06"}) 14:47:31 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x300000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x68, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:31 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f00000000c0)={{0x2, 0x6}, {0x7, 0x1}, 0x3, 0x1, 0x4}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) sendto$inet(r0, &(0x7f00000004c0)="a0", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x0, @dev}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x230082, 0x0) 14:47:31 executing program 7: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "3c87c834"}, 0x8) fstat(r0, &(0x7f00000000c0)) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x40002, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0xc028660f, &(0x7f0000000040)) 14:47:31 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x4, 0x1000000020000) 14:47:31 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x6, &(0x7f0000000000)=@fragment, 0xfd35) truncate(&(0x7f0000000040)='./file0\x00', 0xffffffff) [ 413.736651] binder: 311:312 ERROR: BC_REGISTER_LOOPER called without request [ 413.745013] binder_alloc: binder_alloc_mmap_handler: 311 20001000-20004000 already mapped failed -16 [ 413.760302] binder: BINDER_SET_CONTEXT_MGR already set [ 413.765976] binder: 311:312 ioctl 40046207 0 returned -16 [ 413.771975] binder_alloc: 311: binder_alloc_buf, no vma [ 413.777481] binder: 311:325 transaction failed 29189/-3, size 0-0 line 2969 14:47:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x960f000000000000, &(0x7f0000000140)="06"}) [ 413.785960] binder: 311:312 ERROR: BC_REGISTER_LOOPER called without request [ 413.822279] binder: BINDER_SET_CONTEXT_MGR already set [ 413.827691] binder: 337:338 ioctl 40046207 0 returned -16 14:47:32 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xfec0]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:32 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@msize={'msize', 0x3d, 0xfffffffffffff8ba}}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") write$P9_RREADDIR(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x40200, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000140)=r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r4 = open$dir(&(0x7f00000001c0)='./file0/file0\x00', 0x400080, 0x0) chroot(&(0x7f00000002c0)='./file0\x00') getdents(r4, &(0x7f00000003c0)=""/182, 0xb6) getdents(r4, &(0x7f0000000180)=""/8, 0x8) 14:47:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x60, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:32 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000080)={0xfffffffffffffffb, 0xc055}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x8000, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x20000, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f00000005c0)={0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}]}) r5 = getpgrp(0x0) r6 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000a80)={0x0, 0x0}, &(0x7f0000000ac0)=0xc) getresuid(&(0x7f0000002d00)=0x0, &(0x7f0000002d40), &(0x7f0000002d80)) r9 = fcntl$getown(r2, 0x9) getresuid(&(0x7f0000003100), &(0x7f0000003140), &(0x7f0000003180)=0x0) r11 = getegid() r12 = getpgid(0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r13 = geteuid() fstat(r2, &(0x7f00000031c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r4, &(0x7f0000003380)={&(0x7f0000000a40)=@kern={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000030c0)=[{&(0x7f0000000b00)={0x108c, 0x13, 0x80a, 0x70bd2b, 0x25dfdbfc, "", [@generic="da353e024b404b6b8499db3b3beb317e476f3f5200c53190f4580a5f1a7cf9ed10fe90728ce5010c8c3925058d667597145763f009fb9f3256e3c916347c95382370cf", @typed={0x8, 0x46, @pid=r5}, @nested={0x30, 0x2f, [@typed={0xc, 0x8a, @u64=0x6}, @typed={0x8, 0x0, @pid=r6}, @typed={0x8, 0x5b, @uid=r7}, @typed={0x10, 0x55, @str='cpusetuser\x00'}]}, @generic="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"]}, 0x108c}, {&(0x7f0000001bc0)={0x10, 0x41, 0x2, 0x70bd2b, 0x25dfdbfc}, 0x10}, {&(0x7f0000001c00)={0x10f8, 0x39, 0x10, 0x70bd28, 0x25dfdbfb, "", [@typed={0x14, 0x6, @ipv6=@remote}, @generic="aea0ca6d99905a95984406b1f65c3380376a3997278594676c288926f5e8b8452ae8e8391c8e341545b4013df12f638330b3900ecbe38c582d47da7e046aa38dd012a2fa6eef6b8d6b2b813a6335eef76b73971536b387cab8d0a8af70a25ef5c9154836f20e7a38be47dcaa69d28dc1aadf682e6760decb8c9ffb181650108db800498e30d3a518eb31ab14d6c95205c6ee4e4ec061832d60c6a112201dd72edb6480dc5d3e234ece1a89ebf67d814a5a771b7bb780850f3bfca7fea74f512e40d2fdfceb7c544c9854a5850128d4", @typed={0x1004, 0x1d, @binary="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"}]}, 0x10f8}, {&(0x7f0000002dc0)={0x2ec, 0x1b, 0x400, 0x70bd26, 0x25dfdbfb, "", [@nested={0x4, 0x4d}, @nested={0xec, 0x45, [@typed={0x8, 0x28, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}}, @typed={0x8, 0x76, @uid=r8}, @typed={0x4, 0x87}, @generic="c82f5b92b29b16c9de05097a2176cbe3c282c9ebcfec6f5e5a0ddfc363294f78131097611ae45bd2ce2ad5c63c323c74e024fded66d5d4d9b2d5ebdcf336653f3939cba008c57e9bce38c27bf2dc567f739797cd2228c530344f596929d6450d68132c29dedef3f74b1bb8c0f0bb0c9e5b7ff9a397aab74d69030ba8678e2a0b8c30cecdcc73e95a7e7ee97dbc68b01b180416938e223b66352a05f6862fa0f46f24153fdde9018f64731e0255c1fe843ebbcea4396bfa739fbea83dbbf9d5249387bde70e91", @typed={0xc, 0x1b, @u64=0x400}]}, @nested={0xe8, 0x17, [@typed={0xe4, 0x3, @binary="ee0b72e32394d6823ec3dfd4f257f96df54d6f90a3eddc653cde11ff0a0aab2baede3b16a3106cde8381a909cb77dc5fb2bde38593fddf29d9f6d9df027e7975da7b5dddcc24fddb481fbf2ad7ccb61d26b8aa2baaaec29f73b598a0dfb17fa62dd0454b75ed19738f27d7165c91b7139debe53ee82595dafba63eb08a8eb5f11c780e9888b0498f1bf035ece40e8edd7c6a02d9b1fda37cbe2dbb86d8d8d8d78b2739fc0c3ef4dc87898d937ee5de8c1913fc86e93809009954fa5f4fc18fa5c362c38c36a10c3b974140ac8bf4fa1a25fd77a90795d75afe1691b2b8"}]}, @generic="f2446a8552fa916b30672af5094bd0119a7d0212da344160cf0bfe2546a02172652744a0c480e46c6ce3de4e7966cabb43cc0e860dc9e8e0e024e5986b9624dc9d55d43062f81bfaa231b04a5e59082a988a718f8a60ee890bc0f2dd33971aeaf31e81cc47b3aade45e365c6a0089aec281f074683725e9ff353f480e635df76d9f3c56f020e921bcbd062a31418c8493cf49874a7089fb48a5805dc20d6b22dde80ad6808d3f482495a004c904ef2df41948c1e30e9ca2eeaeebe5fc1aa4bc11af14a26d69e64795198df9071b5cb0f3ccb6173c7ac47ba5a2358c655fad8bbe29986931eb65b32c5c9884ab9b8eb66ead0cad6b8607feb2f", @typed={0x8, 0x27, @ipv4=@broadcast}]}, 0x2ec}], 0x4, &(0x7f0000003240)=[@cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x20, 0x1, 0x1, [r0, r4, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r4, r4]}, @rights={0x20, 0x1, 0x1, [r3, r3, r0, r3]}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @rights={0x20, 0x1, 0x1, [r0, r4, r0, r2]}, @rights={0x18, 0x1, 0x1, [r3, r4]}, @rights={0x30, 0x1, 0x1, [r3, r0, r3, r3, r2, r0, r0, r0]}], 0x108, 0x4008041}, 0x40) [ 413.833938] binder_alloc: 311: binder_alloc_buf, no vma [ 413.839368] binder: 337:338 transaction failed 29189/-3, size 0-0 line 2969 [ 413.846927] binder: undelivered TRANSACTION_ERROR: 29189 [ 413.852703] binder: 337:338 ERROR: BC_REGISTER_LOOPER called without request [ 413.860425] binder: undelivered TRANSACTION_COMPLETE [ 414.027485] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075f) [ 414.034691] FAT-fs (loop6): Filesystem has been set read-only [ 414.047372] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075f) 14:47:32 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xa5, 0x1000000020000) 14:47:32 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xb800]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:32 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x7ffffffffffff, 0x1000000020000) [ 414.072203] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075f) [ 414.079542] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075f) [ 414.098551] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000ff0) [ 414.109986] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075f) [ 414.384131] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075f) [ 414.391292] FAT-fs (loop1): Filesystem has been set read-only [ 414.397393] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075f) [ 414.414196] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075f) [ 414.422112] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075f) [ 414.429695] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075f) [ 414.436855] FAT-fs (loop6): Filesystem has been set read-only [ 414.443452] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075f) 14:47:32 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x301}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:32 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001680)={0x0, @empty, @local}, &(0x7f00000016c0)=0xc) bind(r0, &(0x7f0000001700)=@xdp={0x2c, 0x1, r1, 0x15}, 0x80) eventfd(0x4) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000000)={{0xff, @broadcast, 0x4e23, 0x3, 'wlc\x00', 0x8, 0x9, 0x4f}, {@multicast2, 0x4e23, 0x10000, 0x9, 0xfffffffffffffffd, 0xa6}}, 0x44) 14:47:32 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000200)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r1 = epoll_create1(0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") dup2(r3, r0) ioctl$TIOCSCTTY(r0, 0x540e, 0x1ff) dup2(r1, r2) 14:47:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x4000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:32 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x7fffffffffffffff, 0x1000000020000) 14:47:32 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x3]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:32 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x30000000, 0x1000000020000) 14:47:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 414.636604] binder_alloc: binder_alloc_mmap_handler: 337 20001000-20004000 already mapped failed -16 [ 414.646217] binder_alloc: 337: binder_alloc_buf, no vma [ 414.651666] binder: 337:402 transaction failed 29189/-3, size 0-0 line 2969 [ 414.652600] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20003 [ 414.663881] 9pnet: p9_fd_create_tcp (406): problem connecting socket to [ 414.663881] 27.0.0.1 [ 414.665762] binder: undelivered TRANSACTION_ERROR: 29189 14:47:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x950f, &(0x7f0000000140)="06"}) [ 414.689832] binder: undelivered TRANSACTION_ERROR: 29189 [ 414.715560] binder: 415:417 ERROR: BC_REGISTER_LOOPER called without request [ 414.723839] binder_alloc: binder_alloc_mmap_handler: 415 20001000-20004000 already mapped failed -16 [ 414.733410] binder: BINDER_SET_CONTEXT_MGR already set 14:47:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x6800, &(0x7f0000000140)="06"}) [ 414.738907] binder: 415:417 ioctl 40046207 0 returned -16 [ 414.739870] binder_alloc: 415: binder_alloc_buf, no vma [ 414.745400] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20003 [ 414.750200] binder: 415:424 transaction failed 29189/-3, size 0-0 line 2969 [ 414.763982] binder: undelivered TRANSACTION_COMPLETE 14:47:32 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xa003000000000000, 0x1000000020000) 14:47:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xbb8]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv6_delroute={0x1c, 0x19, 0xb29, 0x0, 0x0, {0xa, 0xa0, 0x0, 0x0, 0xff, 0x1}}, 0x1c}}, 0x0) r1 = gettid() waitid(0x2, r1, &(0x7f0000000000), 0x80000001, &(0x7f0000000040)) [ 414.797963] binder: 431:432 ERROR: BC_REGISTER_LOOPER called without request [ 414.802588] binder: undelivered TRANSACTION_ERROR: 29189 [ 414.809886] 9pnet: p9_fd_create_tcp (429): problem connecting socket to [ 414.809886] 27.0.0.1 [ 414.837865] binder_alloc: binder_alloc_mmap_handler: 431 20001000-20004000 already mapped failed -16 14:47:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x6c00, &(0x7f0000000140)="06"}) [ 414.847982] binder_alloc: 431: binder_alloc_buf, no vma [ 414.849062] binder: BINDER_SET_CONTEXT_MGR already set [ 414.853494] binder: 431:437 transaction failed 29189/-3, size 0-0 line 2969 [ 414.858979] binder: 431:432 ioctl 40046207 0 returned -16 [ 414.870227] binder: undelivered TRANSACTION_ERROR: 29189 [ 414.877357] binder: undelivered TRANSACTION_COMPLETE [ 414.897551] binder: 443:444 ERROR: BC_REGISTER_LOOPER called without request [ 414.908804] binder_alloc: binder_alloc_mmap_handler: 443 20001000-20004000 already mapped failed -16 [ 414.918591] binder: BINDER_SET_CONTEXT_MGR already set [ 414.924452] binder: 443:444 ioctl 40046207 0 returned -16 [ 414.930436] binder_alloc: 443: binder_alloc_buf, no vma [ 414.935962] binder: 443:448 transaction failed 29189/-3, size 0-0 line 2969 14:47:33 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000200)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r1 = epoll_create1(0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") dup2(r3, r0) ioctl$TIOCSCTTY(r0, 0x540e, 0x1ff) dup2(r1, r2) 14:47:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x60000000, &(0x7f0000000140)="06"}) [ 414.943515] binder: 443:444 ERROR: BC_REGISTER_LOOPER called without request [ 414.953843] binder: undelivered TRANSACTION_ERROR: 29189 [ 414.963347] binder: undelivered TRANSACTION_COMPLETE [ 414.982701] binder: 454:455 ERROR: BC_REGISTER_LOOPER called without request [ 414.990166] binder: undelivered transaction 731, put_user failed [ 414.996511] binder: 454:455 ioctl c0306201 20000040 returned -14 [ 415.004102] binder_alloc: binder_alloc_mmap_handler: 454 20001000-20004000 already mapped failed -16 [ 415.014192] binder: BINDER_SET_CONTEXT_MGR already set [ 415.019618] binder_alloc: 454: binder_alloc_buf, no vma [ 415.025032] binder: 454:456 transaction failed 29189/-3, size 0-0 line 2969 [ 415.032499] binder: 454:455 ioctl 40046207 0 returned -16 [ 415.044744] binder: undelivered TRANSACTION_ERROR: 29189 [ 415.077495] binder: undelivered TRANSACTION_COMPLETE [ 415.196291] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075f) [ 415.203477] FAT-fs (loop1): Filesystem has been set read-only [ 415.209520] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075f) 14:47:33 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0xffffffe0}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:33 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = memfd_create(&(0x7f0000000000)='vboxnet0security)ppp0\x00', 0x3) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x9) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@ipv4={[], [], @dev}, 0x0}, &(0x7f0000000100)=0x14) syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x1, 0x8, &(0x7f0000004600)=[{&(0x7f0000000200)="bdd00ec9c6b7af9ed6a1110a716cd5f47e9d4c52db893a9adac9dabc620944c9eb5023ebf3dafa209ddec3092e9243ec4fe58cb6b6c9ce42a88dc625f3a90e164b549e46f78d38a4f7deb3ceb0c17fc8994829f58c4258691f5d1f433e3129f01f5376a1fab954d4f6cb2a9b05b85145af1c939ad5e8efd8bf2856436fe464b324849655f4aebe6a395f4263c09e611d1d58dc466504c6240f70f2cd5e5cfc2b8ec1fdf8678640447486", 0xaa, 0x5}, {&(0x7f0000000480)="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", 0x1000, 0x190}, {&(0x7f0000001480)="402e3c8e0b4fd13c98f0b007c5f69541d8a48477f104cd021651f304d970d1788fa40803a82835686b22da8cf9d779006a99cd370c07a5c5b931077db9ae5eb1f5e8a1751cb034bef83097bc78caa2abad647783beb35d3dc7216a2c35a85926c749b5c09a6ba90ff5b86fd1e6b0bd8fbd1498c1625fc170a03918a94f1e5958bd0c5d6a4ce2fee4fb8989c9fbde95d53be3c9397d1185280c5c323c5a80f2a31a3f2e2e2f5d2279d6ae7850ec0897c6c3bc180e415b5dd389d07853d8b57ad4cf4b167d0f07506960b70e38c1f927a6755ee540518292a85ce26b90a3d5bd6f7cbc425f82de07f0089e17087eb183012c7b1e0d2d090cb16ad543d861899beb73c7596a0760ab27b35668bc5b657184c9a5f440fed1bcdc60ea84dade788511924c3554face19cbffdf3808651c55b0bff598608b2ba874e253c4959cdb4b332cbb8ef29291d16ff604bbefc1e4bb12f544fb2df139e55f9b93cbec6ececd188930ee3a6aa47516e8a9fa95629910270afac8136d8fa0604f3e181b1ed4faf975541c1a289385f0f4c24d931d5848c56bff53c4ef9bc46108bfcbcc89ef2fb1238c8fdec87d18e5922b425ea41d8717fc752f29864b4ae97577c38da38682a45ed24814efb567ef197bead6cf94edd5c845fc9d74ec3b6c5863e018880fcb1ac432654088c501c8969da8af54029f405553ffcbee541c003f8cc48d1eb61ed1d68ab5db999f78e80c62a46e622b02cce4c523b658c413e9636fda3c0c66efc0864ac5ede5411dd67ba454954bd1306bdf524cd432388176f57ecb5f680afaa8065021dc9b67e24376dc646752b2fdc1f85feb3762a84b7d704f5df877b037fc4132d2077dc2767d4f4c9b91e30310a6bd0da8df3f38a68c68dcaed3063312a0cb13fd713ba2f80c8229ca11f398d56592438b2921cd583e22fb4006417b093ead0c756f752359bd92a07c44962b9add159b0f4d9226bbe007fd577706fe444f61b135c9952f5b40a1e548a93e611640b8f694aa73b026082932243af429ecabe125af497f73d037f6e12cdbf61de407fe8e6be2510ded0d24c9d9032f46a5ba7f84812f2810cdf2afb8dcb196b57ce28eee99f636f77202b884b57d24dcffd118fb4333bea82d74a071a89b36340d651f6b8a167077ea79b8e634f76a0941ac2822b2ceb23a2889140d864911ec0b2624255e4ee5a7184d19b9b5c6f0ee9d718852caf3970dd0fed4d80bb85de83400a13572d1d9399fd768d42679096815a2f2f362a2ae5804a66ca0e513ef5be4d1956373899ce317da5f47bf67ed3ecb012021351ebbf23d4f43ddea01ebfc8eff82a93966a95a83f5515d8deb126444230d04d67af2083ca48a0193ba1117254e492ac4a3583590aa7eba00677e395a8b94d511bc3ef9a11acb76c541923cee58aa35ea9fe544d4d9f7c2aeb5cb25cf08938d6d34606af3803866277e20b75ea22faead077a72fa436972468038185adbb4d60388ac9ee78c7ea35a851111b2c7171498b820fa1586d7818931ab014ed29784ab13dc71408017619688fa0949970028eda023cf3b6816d99aa5002fbee2b0d900f8ee5e8f24afbe2817f1f2ba8136ac0922b7abf7336eaf15181f4da9bb4b67235713f60f1a7bbd69724b39d4f5f53ec794da30cef92438004d1de904eb22b6400ff07e278eb7c4ae1119eb00c4610b5997c70670ad9ea0d661b222f8cf3155b0b62820d8d341ecee71ef220a0231b5e315b39895a58138d499ee24b7f162479b0046514113d449ccf4ff549eedcf20ff338a9738c3160b7d07bd9c7b9c6420a55fc23e02677a740645e16503e5a4a3db005a1b4bfa7d90de2e7c6407bf5364784237d6b29c28b21c84e14e5812d249817739d2a710bea2de4faefebc94edc75e182bf0310c68045d804f90094c610367fd21c97e6549f164c6cf9fc3c81c815715b1f0c2ea21f38a315b7c114cd04ad037f0606148a9653b4cf4f1c4d27d7adfc7cbe51f98a5174b4b4c2cb2c826d67e93cffd70c800b0b5d47b8de6fc17a80d7acf03b9e307aa82113a29102910810526b608cb40486c8a9fffb65c88172bfff0a597054585aa59344ae7239a05a3268af0c8f741a76865f7d904c5fdf59358926eb73f0145664cc3f5d2f64d55d6d037e45d2ba05a93b1b932cb56be0f043eba25c7e67ba1000d68044b9bfd459e864fba453453c4075f18aa268910e97b1ecd0897c0d5fb104af045a2b350e91808d178c7803156291a9abd3cdaede8e306c070daed728683e4708b9d5667c9d766435d00ca29ce16ba28a61e999cdace38c7681449b7cb706f857d2d41f377ca89d288ab342c5c6773c249b557c623d4d27dd5d7ecdfeb04ea4c5ea6b9dbe71632ffc2e06bf7192f48f64d9bff4a4dd2e95a040f7d88299739afdec424e624044930490a6cd0bca1508241f80bc1021079f385462d7bfe70847c91ba389335204eb69b9ccb74f49ac37882f3a26e0229fa3980ffe372fe11dbb131aef9bb3bbd2832c23db1633a46b469adf9bd190495e5c0b60bebe36409a5cba4338fb7ca689c06c09675841b7762c08afd1bcd52f655af6f9218763fb2784f3bb528bac6cd90d1669d3c410ed0aa3815fd93159784194e22b9da557b221d19ef5c29a90de7169157a89e037d048ba10d0639bb876f3729825f67459dd45c9c8da9043d40b5ce92e3b30ec748aa9eece985ec9558ef0dc1a83b485cdf78ec5411a2c82910a54b0c4f7de7aa82ca53994a1a3aa7a2462e5df0f3ecd3fc76af978656e8604eb5cf0a238374c7798e5d084ea28d41687c1afa210cf48dc346d2abff5345dc0bd3486954e68ed6e03abc786e558db60d14e81a9cbb34708b3fe610a534bcc94480bcc937f0c7e323b3e5563e17ab11634937f8367c20b80ebc58ee92bd23ce9a0abc9bc9824c334fefa8a58201bba7e3c958419dc6dbfa2f74acaca7ae9821707980457767d3c0dea5aa525301b21e4e1e60fe89a59f82a75a949f0b0c4be9eb68bcfdab4e5935e92cdc50e4451a39ae4ca23c593d243f048b6c8feda8047f590ebff16eb6b22b4cfded06c216baeeb85e83d72aa38909d7929be48f9dd5d6ad60c08588296c9e86f913aa90ec8fb10d1665bce63def6e2e663adf36a182047e088a8c5ebb1dbbeab79e55b620f2c22f867c381e6d3b4037e913db359095040bf24ea2a6553850f536091c61571968b0dd501e4140c67adbca871a1f273175cc4014aafa08b24d9fd33633aba47f099b2ddac1d9b478f17b5c62c31b63fed015ac798102a24cdc5a5e3e99e79e7e26de14fe41e2f6fd4ba3d36b3a60bb95f1c73280f4de693ad095f3ed2ea04a1c9a4a6bb301455adad1d1ba56dc014dbceedb7751223b3a08d9c95cc34199c9254f7ed02873099731be3e8ef7818374fde5a14a5262d2cec240b6674bf78d09755775afbd2e84872cf2dec54c29bcebd180bc4930ea7567e497da82cbb1e123b36d5ac6aee33e637fe7c1a3130206ba969c9923a7bd6584416d72ba0847e6705c0a74b6320cebc500bb9046532cffbb5d3378fe1960eb2d3483ebd6d5fd602226edf319b3f6ddeeb118c9e28a1bbe2980290efbeaa09b29eb48442e63d23559ced3bbfb9e059ee7dcafc44e6bbd899305cdbe6b38fe444d7bf27fd864b165a9a4674c30a79a8df7300f232d0a3dec2c7a8af9267d522870cddd85604cda8fed71a205b04c1daf13d9c50f7b0392635c14611a0735eaf10d3efd85b61094f4ac5e2037136f889e5cf31795214b56ffbc97c0593b6cf1f656cb80ade7347a823f1be1affa8cf028aec9f2b56314f3a5252be6d1f6f4359657480b978918a02a6f0a209f1c48b99014ea8cf16e21d7bd2c0c9fd517c45a31989868149df3f74821f344e93b5f00fb89c446f8df4af6f0ebefb51833a8a1c39ef14db97d4d1642b9a91691fcd5430475360c1686ba649b36f8d44db49e3c204a8d3711dc8d1b074dda8e4073b8d1de8a971aaf7f0e9a73b85e4ddc4587fcc0bca3c66662a421dd7c5634543ba3576c7f8db3db93b39942fbadb0599ad24ef0c64826462d496b9406952a684a44bf93eeeba8a80d7b6b01c1623de31a5b47256261789946aeae37e265af8ff5c80e9f6afeba59e77a2cf7f27c74ccb194722bea394d75d4ba32f57ee276d4587c4ee8f3a16e54192194351730e3132fef6b59637e5ee5a291b43dc2bf755284f73a90702919c5ed6519eee75de598f13e84f499edb3e9b5b0bba1e27c8b70fe8bcef16257d7f70c1f776c4607958f3b9e32cfbec97bad44d6d70066436565d6622c28ef91d01206a70a01143a6660c2e64aabe90c108ee2389c874ea3539bfc97dd9f9f324fdb24df94d59dea73b1e8311d561ff70ad4b8c7f40acfc2d2040e5273c1c077330db98ea3dc3bafcf326d9c8f84a103798ab19114bb68e8a1c90c91b03da2df1109d14808941530a32652eae0e87f3730d70bdfb1c5d0951e38811ffa2f011225c7050338423cb0241bc7f30c5c1b5d7e92be99e0d59c59c8a4744c22695bfa5d7a7f11a75e6f08dc9d52aaa4bfb5d127cfa0f3b182a6ba3694604c9f7e32298edae835f4105123da7c876fe947cf6daed0d68259c64c0795f80779dde0e7b083d4340caf7738a2d6c6dcef8124bce205be2b86a1b68827b6901c2bc6e098b07edec1377cfc2b4d145b5a0cf88371fb29592ba6d1790c35d983a87b765f9575fe7fb0b9f5c994ed796a5f56c876370746eccf1c28b6c9e2d3af11e92ca61a65f0ea1eaeb8e0fa85db05acaf1511b30e30b15bd0d15c865241cb08b1a004baad190045152c4ab43c36566849b1fbcadaf0ee96ec50556fa37017de23c96a8099e7b0e6a65269231e7263bf7de0b6d2c878886c27e1b598710460bf1e608ce9cf38114657dbdb834cb36377c23ce9b182418ac4eaa6adf3997026e2113e93ab5e79344b0bf572e5e39e50efa77201e0abc3d489976dd77601b3cf44960e544589c7964a03794c43c1d4478d79a4c8193525578f66012e59af772e422bd775c52b361ee0c0bbb9e76b3ae57f8885295ff696206f76743ebca09f9952949d69ad8ac117be4594b8d7f1cdcbc22c6f0f4d495fb32f6b5ad7461f5d77f62d482bcd0fff520c46896ebd5e720f4d43b8ea6f951234c1f6ae1f235feab268d8d804a38321365865d1e697edb203b1525c8911cb3cfc38e29d7bee07d733ee46e8512d19b515ce2bc2ee40e3555848fb79e8628b6e9f78dbb1222cf62281b6323fa12d05d5321710031c6467a372fc4fa201906259e9a35b1343c42516c0f427ffdec8c28b12d3cc7fbbde96c0c311c2f9bdcbdc368513fcd1c607031c1f70e9d674130573c8d8c1d9aa889a1d7ac351f229b1c41c852f2bd915a60c654893afe300c377afa46936c57037354cc9d8e7eb8d46edfbd712914262741dff9a321e07b853edd07e566486c662971d26083cdb6dd75c5b9799180ce1c06dead4449f0d57bfd01d93c0dee2937a1ce53a667752050dd3cd2bd9aefd119573ee8f3b1324509bee73d46b3df3da6c37bb44bf605c49ffccdc4cdd2adede1b71705a7f28b1f2ff0f4bedb52dab31686771378ab6bd205973068532f6e18bd11392664175a2934d53758c4e30bbaca807fcce31cb44f3af5db63002e96d8a6ea633ab239c535dafa9629fffcfa5c780fb7b7f09a622cab8b9b122fe2421ee5f4ead9ee6da2d7a56b28c1c2b6665f5e47967db9d509fa83c8c8ee0efb976721b8dfadc9923dedcf8e9d663dd0b075c62596fdd0bcf9894820402738f0fe4b90aa85c", 0x1000, 0x5}, {&(0x7f00000002c0)="bf2146e208042745126eef42a520e76416c25a16c33cfcc7156762bd169021f79ef3a69b13644fa394b4784ee968278ce528acfac10d3c42f24a27653eec183144f2aeeb9567e57cd0596e17c03d8347310fe34ae07cb07a0cd00ed95dc909d4c1e39b9272e3b5d0e83c3287ef37ff3b5ec37a581005f250c6de6765d3e18b2f58c612ccbb649fea4323dfaafa5f122860873683fd4fde0b93ba64a709cfe776d0940f96d4cf047720a9e4fe80266529eba59b819c4a93ce582f69c5f1f850e36dcf7f4ec11262d1b4a7f69a60c28f05c45204f7dd8891eb07fa1d0eddf1cdae12bea5f0f3d5dbdabffff7", 0xeb, 0xfffffffffffffeb6}, {&(0x7f0000002480)="4fcc82791964050aad60570e16d6400fcbc250cb6b6df1d5d4467221443542b3ce0c2b6232ded8181934edd7de9b1bef6dc497e4902ab4af3f41e6142422d174290a5b09dc472731e92b9e3c8a92e3bf3244728fbb230f51cb32052c1b043f2ef7dc027c6b8b8d1f78917118b06548d1a6de479832d84ab4caa0662f587cb49e53a323babd80d29546f7cf59f283593ba4800e360145dfb7d8ef5efd83a0c0c9ccfa12d9d35ef3cf4afb009c35f37476d7bc16c6d779c50353cfb3531c713974b2eb75e87b290db073257474d85bc82dceb3fb408fb920831252c4eaf201762f4ce376641be96b3cf310e37a51a035b289", 0xf1, 0x7fff}, {&(0x7f0000002580)="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", 0x1000, 0x3}, {&(0x7f0000003580)="933277d75c1f91b33b4ef02987b3df659182e397eeed0eb4a0a16850fb7b7ed1279180d50bb04f075435b70949b1e55b27f3f2707ce6bb6e7f401981124f9d3961cfdce01d829a362503af0b72d9330de3d01335f000c97fe8ea443f5b648b5e8824dbae0dc5c4a25602f43a3649ff49f8927c248f", 0x75, 0x8000}, {&(0x7f0000003600)="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", 0x1000, 0x4}], 0x40, &(0x7f00000046c0)={[{@swalloc='swalloc'}, {@noquota='noquota'}, {@biosize={'biosize', 0x3d, 0x1f}}, {@uquota='uquota'}, {@qnoenforce='qnoenforce'}, {@grpquota='grpquota'}, {@barrier='barrier'}, {@noalign='noalign'}, {@noalign='noalign'}]}) bind$packet(r0, &(0x7f0000000140)={0x11, 0xf7, r2, 0x1, 0xfffffffffffffff7, 0x6, @broadcast}, 0x14) recvmsg(r0, &(0x7f0000005a80)={&(0x7f0000005700)=@hci, 0x80, &(0x7f0000005980)=[{&(0x7f0000005780)=""/144, 0x90}], 0x1, &(0x7f00000059c0)=""/129, 0x81}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000400)={@random="27e1ad4fb2c6", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "e3837f", 0x44, 0x0, 0x0, @mcast1, @local, {[], @gre}}}}}, &(0x7f00000000c0)) 14:47:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0xffec, &(0x7f0000000140)="06"}) 14:47:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xff00000000000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xb80b0000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:33 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000200)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r1 = epoll_create1(0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") dup2(r3, r0) ioctl$TIOCSCTTY(r0, 0x540e, 0x1ff) dup2(r1, r2) 14:47:33 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xf00000000000000, 0x1000000020000) 14:47:33 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x3f00, 0x1000000020000) [ 415.473123] binder: 473:476 ERROR: BC_REGISTER_LOOPER called without request [ 415.481899] binder_alloc: binder_alloc_mmap_handler: 473 20001000-20004000 already mapped failed -16 [ 415.499494] XFS (loop4): unknown mount option [barrier]. [ 415.506273] binder_alloc: 473: binder_alloc_buf, no vma [ 415.507346] binder: BINDER_SET_CONTEXT_MGR already set 14:47:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x1004, &(0x7f0000000140)="06"}) [ 415.511716] binder: 473:487 transaction failed 29189/-3, size 0-0 line 2969 [ 415.524185] binder: 473:476 ioctl 40046207 0 returned -16 [ 415.524189] binder: undelivered TRANSACTION_ERROR: 29189 [ 415.530960] binder: undelivered TRANSACTION_COMPLETE [ 415.555124] binder: 499:500 ERROR: BC_REGISTER_LOOPER called without request [ 415.562524] binder: undelivered transaction 737, put_user failed 14:47:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x6000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 415.568815] binder: 499:500 ioctl c0306201 20000040 returned -14 [ 415.582888] binder_alloc: binder_alloc_mmap_handler: 499 20001000-20004000 already mapped failed -16 [ 415.592488] binder: BINDER_SET_CONTEXT_MGR already set [ 415.598009] binder: 499:500 ioctl 40046207 0 returned -16 [ 415.604040] binder_alloc: 499: binder_alloc_buf, no vma [ 415.609512] binder: 499:507 transaction failed 29189/-3, size 0-0 line 2969 14:47:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x4, &(0x7f0000000140)="06"}) 14:47:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x7a00000000000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 415.616927] binder: 499:500 ERROR: BC_REGISTER_LOOPER called without request 14:47:33 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xf4, 0x1000000020000) 14:47:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x20000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:33 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x400071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x1b, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x8400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x401) write$FUSE_GETXATTR(r0, &(0x7f0000000280)={0x18, 0x0, 0x3, {0xffffffffffffffff}}, 0x18) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x44200, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54) [ 415.651772] binder: BINDER_SET_CONTEXT_MGR already set [ 415.657212] binder: 519:521 ioctl 40046207 0 returned -16 [ 415.665131] binder_alloc: 499: binder_alloc_buf, no vma [ 415.670615] binder: 519:521 transaction failed 29189/-3, size 0-0 line 2969 [ 415.670961] binder: undelivered TRANSACTION_ERROR: 29189 [ 415.684135] binder: 519:521 ERROR: BC_REGISTER_LOOPER called without request [ 415.692772] binder: undelivered TRANSACTION_COMPLETE 14:47:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1000000000000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 415.924190] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075f) [ 415.931368] FAT-fs (loop6): Filesystem has been set read-only [ 415.937394] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075f) [ 415.951599] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 415.963019] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000020) 14:47:34 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1400}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:34 executing program 7: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) tee(r0, r1, 0x1f, 0x4) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000000)={'ifb0\x00', {0x2, 0x4e20, @multicast2}}) 14:47:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xe00]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x3000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:34 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x6, 0x1000000020000) 14:47:34 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) socketpair(0x9, 0x5, 0x7fff, &(0x7f00000002c0)={0xffffffffffffffff}) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8, 0x35, 0x2, 0x3}, 0x8) mount(&(0x7f0000000080)='./file1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r2, 0x280080) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x1, 0x7fffffff, 0x101, 0x100, 0x6, 0x4, 0xfb9b, {0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x3e84, 0x7, 0x3, 0x3f}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240)={r3}, 0x8) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000900)=""/4096) sendfile(r2, r2, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 416.284670] XFS (loop4): unknown mount option [barrier]. [ 416.321860] 9pnet: p9_fd_create_tcp (554): problem connecting socket to [ 416.321860] 27.0.0.1 14:47:34 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x700000000000000, 0x1000000020000) 14:47:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x4]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x2010, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:34 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ptrace$getregset(0x4204, r2, 0xac92210c65e5d19b, &(0x7f00000000c0)={&(0x7f0000000040)=""/109, 0x6d}) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000280)='\\\x00') listen(r0, 0x0) sysfs$3(0x3) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000140)=""/156, &(0x7f0000000200)=0x9c) 14:47:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x60, &(0x7f0000000140)="06"}) [ 416.453898] binder_alloc: binder_alloc_mmap_handler: 519 20001000-20004000 already mapped failed -16 [ 416.464250] binder_alloc: 519: binder_alloc_buf, no vma [ 416.469697] binder: 519:589 transaction failed 29189/-3, size 0-0 line 2969 [ 416.477639] binder: 519:587 ERROR: BC_REGISTER_LOOPER called without request [ 416.494026] binder: undelivered TRANSACTION_ERROR: 29189 [ 416.519804] binder: 593:594 ERROR: BC_REGISTER_LOOPER called without request [ 416.529143] binder_alloc: binder_alloc_mmap_handler: 593 20001000-20004000 already mapped failed -16 [ 416.538566] binder: BINDER_SET_CONTEXT_MGR already set [ 416.543987] binder_alloc: 593: binder_alloc_buf, no vma [ 416.544146] binder: 593:594 ioctl 40046207 0 returned -16 [ 416.549446] binder: 593:597 transaction failed 29189/-3, size 0-0 line 2969 14:47:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x6800000000000000, &(0x7f0000000140)="06"}) [ 416.574317] binder: undelivered TRANSACTION_ERROR: 29189 [ 416.579822] binder: undelivered TRANSACTION_COMPLETE [ 416.586405] binder: undelivered TRANSACTION_ERROR: 29189 [ 416.593812] binder: 603:605 ERROR: BC_REGISTER_LOOPER called without request [ 416.601199] binder: undelivered transaction 746, put_user failed [ 416.607702] binder: 603:605 ioctl c0306201 20000040 returned -14 14:47:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x300000000000000, &(0x7f0000000140)="06"}) [ 416.616118] binder_alloc: binder_alloc_mmap_handler: 603 20001000-20004000 already mapped failed -16 [ 416.625687] binder: BINDER_SET_CONTEXT_MGR already set [ 416.631165] binder: 603:605 ioctl 40046207 0 returned -16 [ 416.637973] binder_alloc: 603: binder_alloc_buf, no vma [ 416.643435] binder: 603:606 transaction failed 29189/-3, size 0-0 line 2969 [ 416.651024] binder: undelivered TRANSACTION_ERROR: 29189 [ 416.656755] binder: undelivered TRANSACTION_COMPLETE [ 416.677450] binder: 607:608 ERROR: BC_REGISTER_LOOPER called without request [ 416.684734] binder: undelivered transaction 749, put_user failed [ 416.690980] binder: 607:608 ioctl c0306201 20000040 returned -14 [ 416.699355] binder_alloc: binder_alloc_mmap_handler: 607 20001000-20004000 already mapped failed -16 [ 416.708774] binder: BINDER_SET_CONTEXT_MGR already set [ 416.712947] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075f) [ 416.714382] binder: 607:608 ioctl 40046207 0 returned -16 14:47:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x3e8]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x6000, &(0x7f0000000140)="06"}) [ 416.721237] FAT-fs (loop1): Filesystem has been set read-only [ 416.721783] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075f) [ 416.728060] binder_alloc: 607: binder_alloc_buf, no vma [ 416.735855] binder: undelivered TRANSACTION_COMPLETE [ 416.745298] binder: 607:609 transaction failed 29189/-3, size 0-0 line 2969 14:47:35 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f0000000180)=@buf={0x9f, &(0x7f00000000c0)="7d3c0ebe161edd8c2c37bb07d06fa9a798715db2ba0753b9a84ce19d177927fa3ed788a95bca9801e5c6a2a8f93ba462043b3b20d833b6e0b6f7ffd3a1d5e0ad55a62a36c4a1dd0f429740bc52807cadf96096d9ed4b037309d86c857b147ad59658d743f8eecf5b2fa2b42c88eb344c748ed3545b94ad187cc37abe6a174ef821a9cd393355faedb4b8cf7504a777f9e12c1a1dac05428655c1551b0d0189"}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b701000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000a7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000006a0a00fe00000000850000001c000000b70000000000000095000000000000004aa52f1e598cde716c1a7ee9d99a368610c693b76f8d36146b5555f9512d52ec01a909e9a0addd1f8e030cdc49eed3d4397eeddd8d3c7296984f7c017453b402"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) [ 416.784994] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000ff0) [ 416.796616] binder: 614:617 ERROR: BC_REGISTER_LOOPER called without request [ 416.805531] binder_alloc: binder_alloc_mmap_handler: 614 20001000-20004000 already mapped failed -16 [ 416.811728] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 416.818082] binder_alloc: 614: binder_alloc_buf, no vma [ 416.822474] binder: BINDER_SET_CONTEXT_MGR already set [ 416.827380] binder: 614:618 transaction failed 29189/-3, size 0-0 line 2969 [ 416.840213] binder: 614:617 ioctl 40046207 0 returned -16 [ 416.877672] binder: undelivered TRANSACTION_ERROR: 29189 [ 416.919861] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075f) [ 416.927055] FAT-fs (loop6): Filesystem has been set read-only [ 416.934811] binder: undelivered TRANSACTION_COMPLETE [ 416.940154] binder: undelivered TRANSACTION_ERROR: 29189 [ 416.943276] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075f) [ 416.954863] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075f) [ 416.962274] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075f) [ 416.970065] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075f) [ 416.977427] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075f) [ 416.985123] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075f) [ 416.992711] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075f) [ 417.007084] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000ff0) [ 417.014425] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000202) 14:47:35 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x5}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x2000000000000000, &(0x7f0000000140)="06"}) 14:47:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x7, 0x7, 0x0, 0x1, 0x30}]}, &(0x7f0000f6bffb)="47500500", 0x0, 0xffffff2f, &(0x7f00001a7f05)=""/251}, 0x18) sendto$inet6(r0, &(0x7f0000000000)="c2486b937dfdbc3f2a9878e66179da17ffab262dc6b6ebdc009908969c739cf1e2281195696ee729826c8e4df40fc742b2dee9d90c65f5ecec62e5f4cba2cdb866422affcc0beea1643f331f0467b509a8918d4dd70a3a98ee78f6bedeff95ab2fe70e5a8b093aebf55430e042ae36dab0d8500a61cb4feb9b6b189a3c5130d9899ac43c1bb5b643536a4f74a859c178848f5e430d39a57544b0d1c18a21035772e6a8745e6779f4bad3515c359a63342541e14f49d521cdbb7dac9f2c89ae6f839b0b0f202b1dbca5e22916bc8dad1e4cea02c4dd17", 0xd6, 0x4011, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @local, 0xffffffff}, 0x1c) 14:47:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xff00, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xf0ffffff7f0000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:35 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0xbd, 0x80000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xff, 0x7, 0x3, 0x10001, 0x0, 0x0, 0x78, 0x7581]}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) sched_getparam(r3, &(0x7f0000000040)) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x801, &(0x7f0000030ff0)={0x2, 0x2000000000, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000001340)=""/200, &(0x7f0000001480)=0xc8) clone(0x0, &(0x7f0000000180), &(0x7f0000001300), &(0x7f00000011c0), &(0x7f0000000280)) openat$rfkill(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/rfkill\x00', 0x2, 0x0) mount(&(0x7f0000001440)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000012c0)='proc\x00', 0x0, &(0x7f0000000100)) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r4, &(0x7f00000002c0)=""/4096, 0x1000) wait4(0x0, &(0x7f0000000180), 0xa0000000, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @local}}}, &(0x7f00000001c0)=0x100) 14:47:35 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xb4000000, 0x1000000020000) 14:47:35 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x5, 0x1000000020000) [ 417.195261] binder: 636:647 ERROR: BC_REGISTER_LOOPER called without request [ 417.202626] binder: undelivered transaction 755, put_user failed [ 417.208881] binder: 636:647 ioctl c0306201 20000040 returned -14 [ 417.219355] binder_alloc: binder_alloc_mmap_handler: 636 20001000-20004000 already mapped failed -16 [ 417.229631] binder: BINDER_SET_CONTEXT_MGR already set [ 417.235014] binder: 636:647 ioctl 40046207 0 returned -16 14:47:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x20000000, &(0x7f0000000140)="06"}) [ 417.235440] binder_alloc: 636: binder_alloc_buf, no vma [ 417.246073] binder: 636:658 transaction failed 29189/-3, size 0-0 line 2969 [ 417.254694] binder: undelivered TRANSACTION_ERROR: 29189 [ 417.260330] binder: undelivered TRANSACTION_COMPLETE 14:47:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x900000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 417.297503] binder: 667:669 ERROR: BC_REGISTER_LOOPER called without request [ 417.305149] binder: undelivered transaction 758, put_user failed [ 417.311824] binder: 667:669 ioctl c0306201 20000040 returned -14 [ 417.318968] binder_alloc: binder_alloc_mmap_handler: 667 20001000-20004000 already mapped failed -16 [ 417.331031] binder: BINDER_SET_CONTEXT_MGR already set [ 417.336398] binder: 667:669 ioctl 40046207 0 returned -16 [ 417.336644] binder_alloc: 667: binder_alloc_buf, no vma 14:47:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x4, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x4c000000, &(0x7f0000000140)="06"}) [ 417.347450] binder: 667:670 transaction failed 29189/-3, size 0-0 line 2969 [ 417.355454] binder: 667:669 ERROR: BC_REGISTER_LOOPER called without request [ 417.379179] binder: undelivered TRANSACTION_ERROR: 29189 [ 417.392271] binder: undelivered TRANSACTION_COMPLETE 14:47:35 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f00000012c0)=[{&(0x7f0000001280)='7', 0x1}], 0x1) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000100)) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000040)=""/21, &(0x7f0000000080)=0x15) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c) [ 417.399654] binder: 675:677 ERROR: BC_REGISTER_LOOPER called without request [ 417.407458] binder: undelivered transaction 761, put_user failed [ 417.414140] binder: 675:677 ioctl c0306201 20000040 returned -14 [ 417.420307] 9pnet: p9_fd_create_tcp (679): problem connecting socket to [ 417.420307] 27.0.0.1 [ 417.432401] binder_alloc: binder_alloc_mmap_handler: 675 20001000-20004000 already mapped failed -16 [ 417.442419] binder: BINDER_SET_CONTEXT_MGR already set 14:47:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x6000000, &(0x7f0000000140)="06"}) 14:47:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xc0ed0000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xb8000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 417.448360] binder: 675:677 ioctl 40046207 0 returned -16 [ 417.454023] binder_alloc: 675: binder_alloc_buf, no vma [ 417.459768] binder: 675:681 transaction failed 29189/-3, size 0-0 line 2969 [ 417.467681] binder: 675:677 ERROR: BC_REGISTER_LOOPER called without request [ 417.476708] binder: undelivered TRANSACTION_ERROR: 29189 [ 417.483109] binder: undelivered TRANSACTION_COMPLETE [ 417.532615] binder: 684:685 ERROR: BC_REGISTER_LOOPER called without request [ 417.540072] binder: undelivered transaction 764, put_user failed [ 417.546955] binder: 684:685 ioctl c0306201 20000040 returned -14 [ 417.554249] binder_alloc: binder_alloc_mmap_handler: 684 20001000-20004000 already mapped failed -16 [ 417.555366] 9pnet: p9_fd_create_tcp (691): problem connecting socket to [ 417.555366] 27.0.0.1 [ 417.563785] binder: BINDER_SET_CONTEXT_MGR already set [ 417.578386] binder_alloc: 684: binder_alloc_buf, no vma [ 417.583831] binder: 684:693 transaction failed 29189/-3, size 0-0 line 2969 [ 417.591821] binder: undelivered TRANSACTION_COMPLETE [ 417.597025] binder: 684:685 ioctl 40046207 0 returned -16 [ 417.603707] binder: undelivered TRANSACTION_ERROR: 29189 14:47:36 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x20001641}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:36 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f00000012c0)=[{&(0x7f0000001280)='7', 0x1}], 0x1) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000100)) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000040)=""/21, &(0x7f0000000080)=0x15) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 14:47:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x1000000, &(0x7f0000000140)="06"}) 14:47:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xf6ffffff00000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xe8030000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:36 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0xbd, 0x80000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0xff, 0x7, 0x3, 0x10001, 0x0, 0x0, 0x78, 0x7581]}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) sched_getparam(r3, &(0x7f0000000040)) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x801, &(0x7f0000030ff0)={0x2, 0x2000000000, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000001340)=""/200, &(0x7f0000001480)=0xc8) clone(0x0, &(0x7f0000000180), &(0x7f0000001300), &(0x7f00000011c0), &(0x7f0000000280)) openat$rfkill(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/rfkill\x00', 0x2, 0x0) mount(&(0x7f0000001440)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000012c0)='proc\x00', 0x0, &(0x7f0000000100)) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r4, &(0x7f00000002c0)=""/4096, 0x1000) wait4(0x0, &(0x7f0000000180), 0xa0000000, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @local}}}, &(0x7f00000001c0)=0x100) 14:47:36 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xac, 0x1000000020000) 14:47:36 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xf, 0x1000000020000) [ 418.079169] binder: 708:714 ERROR: BC_REGISTER_LOOPER called without request [ 418.086824] binder: undelivered transaction 767, put_user failed [ 418.093431] binder: 708:714 ioctl c0306201 20000040 returned -14 [ 418.103329] binder_alloc: binder_alloc_mmap_handler: 708 20001000-20004000 already mapped failed -16 [ 418.113431] binder: BINDER_SET_CONTEXT_MGR already set [ 418.119738] binder: 708:714 ioctl 40046207 0 returned -16 14:47:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x410, &(0x7f0000000140)="06"}) [ 418.125395] binder_alloc: 708: binder_alloc_buf, no vma [ 418.130807] binder: 708:724 transaction failed 29189/-3, size 0-0 line 2969 [ 418.139826] binder: undelivered TRANSACTION_COMPLETE [ 418.150295] binder: undelivered TRANSACTION_ERROR: 29189 [ 418.175574] binder: 733:736 ERROR: BC_REGISTER_LOOPER called without request [ 418.184485] binder_alloc: binder_alloc_mmap_handler: 733 20001000-20004000 already mapped failed -16 [ 418.194236] binder: BINDER_SET_CONTEXT_MGR already set [ 418.194251] binder_alloc: 733: binder_alloc_buf, no vma [ 418.199579] binder: 733:736 ioctl 40046207 0 returned -16 [ 418.204956] binder: 733:738 transaction failed 29189/-3, size 0-0 line 2969 [ 418.219183] binder: undelivered TRANSACTION_ERROR: 29189 14:47:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0xfffffdfd, &(0x7f0000000140)="06"}) 14:47:36 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f00000012c0)=[{&(0x7f0000001280)='7', 0x1}], 0x1) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000100)) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000040)=""/21, &(0x7f0000000080)=0x15) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c) [ 418.231994] binder: undelivered TRANSACTION_COMPLETE [ 418.246699] binder: 741:744 ERROR: BC_REGISTER_LOOPER called without request [ 418.254212] binder: undelivered transaction 773, put_user failed [ 418.260615] binder: 741:744 ioctl c0306201 20000040 returned -14 [ 418.263956] FAT-fs (loop1): bogus number of reserved sectors [ 418.272722] FAT-fs (loop1): Can't find a valid FAT filesystem [ 418.296092] binder_alloc: binder_alloc_mmap_handler: 741 20001000-20004000 already mapped failed -16 [ 418.305590] binder: BINDER_SET_CONTEXT_MGR already set [ 418.311265] binder: 741:744 ioctl 40046207 0 returned -16 [ 418.317261] binder_alloc: 741: binder_alloc_buf, no vma [ 418.322723] binder: 741:747 transaction failed 29189/-3, size 0-0 line 2969 [ 418.330316] binder: 741:744 ERROR: BC_REGISTER_LOOPER called without request [ 418.338461] binder: undelivered TRANSACTION_ERROR: 29189 14:47:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x5, &(0x7f0000000140)="06"}) 14:47:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x7ffff000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x900000000000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 418.344726] binder: undelivered TRANSACTION_COMPLETE [ 418.357372] FAT-fs (loop6): bogus number of reserved sectors [ 418.363256] FAT-fs (loop6): Can't find a valid FAT filesystem [ 418.380519] binder: 754:758 ERROR: BC_REGISTER_LOOPER called without request 14:47:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x1f4]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:36 executing program 7: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000240)=0x3, 0x4) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=""/239, 0xef}, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000200)=0x42, 0x4) syz_emit_ethernet(0xfdef, &(0x7f00003f3fd5)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x6c, @multicast1, 0x4e24, 0x1, 'lc\x00', 0x1, 0x7fffffff, 0x54}, 0x2c) [ 418.395747] binder_alloc: binder_alloc_mmap_handler: 754 20001000-20004000 already mapped failed -16 [ 418.406422] binder: BINDER_SET_CONTEXT_MGR already set [ 418.412309] binder: 754:758 ioctl 40046207 0 returned -16 [ 418.418383] binder_alloc: 754: binder_alloc_buf, no vma [ 418.423891] binder: 754:764 transaction failed 29189/-3, size 0-0 line 2969 [ 418.432222] binder: 754:758 ERROR: BC_REGISTER_LOOPER called without request [ 418.465776] binder: undelivered TRANSACTION_ERROR: 29189 [ 418.498117] binder: undelivered TRANSACTION_COMPLETE [ 418.542330] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20004 14:47:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x48000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x300, &(0x7f0000000140)="06"}) 14:47:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xfc00000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000140)='./file0/file1\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x6e63, 0x3e) write$P9_RREADDIR(r0, &(0x7f0000000300)=ANY=[], 0xfffffd1c) creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) 14:47:37 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x7ffff000}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) [ 418.922121] binder: 790:794 ERROR: BC_REGISTER_LOOPER called without request [ 418.931470] binder_alloc: binder_alloc_mmap_handler: 790 20001000-20004000 already mapped failed -16 [ 418.941257] binder: BINDER_SET_CONTEXT_MGR already set [ 418.946718] binder: 790:794 ioctl 40046207 0 returned -16 [ 418.953251] binder_alloc: 790: binder_alloc_buf, no vma [ 418.958846] binder: 790:798 transaction failed 29189/-3, size 0-0 line 2969 14:47:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)='\t'}) 14:47:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xffff1f0000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 418.966965] binder: 790:794 ERROR: BC_REGISTER_LOOPER called without request [ 418.980709] binder: undelivered TRANSACTION_ERROR: 29189 [ 419.007829] binder: BINDER_SET_CONTEXT_MGR already set [ 419.016786] binder: 806:808 ioctl 40046207 0 returned -16 [ 419.023379] binder_alloc: 790: binder_alloc_buf, no vma [ 419.027807] binder: undelivered TRANSACTION_COMPLETE [ 419.033998] binder: 806:808 transaction failed 29189/-3, size 0-0 line 2969 [ 419.041961] binder: 806:808 ERROR: BC_REGISTER_LOOPER called without request 14:47:37 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x100000000000000, 0x1000000020000) 14:47:37 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0xfffffdef}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x7000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:37 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x200000000000000, 0x1000000020000) [ 419.070868] 9pnet: p9_fd_create_tcp (815): problem connecting socket to [ 419.070868] 27.0.0.1 14:47:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x6800, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x900]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x400000000000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x2000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 419.311384] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20004 14:47:37 executing program 7: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) socket(0x4, 0x80007, 0xe6) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000640)="f75b8632a2abf8e488ac9b00816cdc20bd92420a10c6f03c38a054babff3dc00c625d032a11b248ad3fe0b75034a8d3de543ed1f5de4795deb1e42705a169051253b1091e4586b13ede25ff43a01fa61ecb602100dee56fe96aa47cb17f4c87fb7711078cd3a626b646e3732463941a3b564712fa0cff7828231031586df147e8a494d49e5") ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000780)) getgroups(0x3, &(0x7f0000000440)=[0xee01, 0xee01, 0xffffffffffffffff]) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000003c0)=ANY=[@ANYBLOB="9ab3e7b0ddfa9657080000000000000000000000000000000000003f00000000000000000000000000fa91a038c184fc63103d017ba9e6076f7e585e63f5e786de7a2ebc4eed436c85f5e12d89a656b142e5a9656a"]) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x80045300, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"}) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)=0x0) getxattr(&(0x7f0000000140)='./file0//ile0\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="747240000000642e8a74683170707031005a0ca5c5f2f8f782fb198f51ef6eb705f4f12822d13febef913b498aa58f822f8ce7c3e8800a10850c6f0290fe95bacac0aea1fdfba3858b6f3b8e648bc3f0d982f00a26ab6e0121fdee196531375628cb97072709bc57d2"], &(0x7f0000000540)=""/253, 0xfd) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000340)=0x4) timer_settime(r5, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r4, 0x1000000000013) 14:47:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x7a00, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xfc000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x9]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 419.454439] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075f) [ 419.461740] FAT-fs (loop6): Filesystem has been set read-only [ 419.472186] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075f) [ 419.508516] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075f) [ 419.515720] FAT-fs (loop1): Filesystem has been set read-only [ 419.560464] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075f) [ 419.584424] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000ff0) [ 419.592394] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 14:47:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xe00000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x600, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 419.666350] attempt to access beyond end of device [ 419.669853] 9pnet: p9_fd_create_tcp (885): problem connecting socket to [ 419.669853] 27.0.0.1 [ 419.671365] loop4: rw=1, want=130, limit=112 [ 419.684821] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 419.706470] attempt to access beyond end of device [ 419.711501] loop4: rw=1, want=131, limit=112 [ 419.715939] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 419.726800] attempt to access beyond end of device [ 419.731807] loop4: rw=1, want=132, limit=112 [ 419.736239] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 419.745141] attempt to access beyond end of device [ 419.750167] loop4: rw=1, want=133, limit=112 [ 419.754591] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 419.762435] attempt to access beyond end of device [ 419.767390] loop4: rw=1, want=142, limit=112 [ 419.771925] Buffer I/O error on dev loop4, logical block 141, lost async page write [ 419.779762] attempt to access beyond end of device [ 419.784725] loop4: rw=1, want=143, limit=112 [ 419.789137] Buffer I/O error on dev loop4, logical block 142, lost async page write [ 419.796981] attempt to access beyond end of device [ 419.801933] loop4: rw=1, want=144, limit=112 [ 419.806368] Buffer I/O error on dev loop4, logical block 143, lost async page write [ 419.808276] binder_alloc: binder_alloc_mmap_handler: 806 20001000-20004000 already mapped failed -16 [ 419.814210] attempt to access beyond end of device [ 419.823792] binder_alloc: 806: binder_alloc_buf, no vma [ 419.828523] loop4: rw=1, want=145, limit=112 [ 419.828535] Buffer I/O error on dev loop4, logical block 144, lost async page write [ 419.828966] attempt to access beyond end of device [ 419.833938] binder: 806:891 transaction failed 29189/-3, size 0-0 line 2969 [ 419.838336] loop4: rw=1, want=153, limit=112 14:47:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)='4'}) 14:47:38 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x6004, 0x1000000020000) 14:47:38 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xffffffffffffff7f, 0x1000000020000) [ 419.838664] attempt to access beyond end of device [ 419.846535] binder: undelivered TRANSACTION_ERROR: 29189 [ 419.851116] loop4: rw=1, want=182, limit=112 [ 419.851131] Buffer I/O error on dev loop4, logical block 181, lost async page write [ 419.868162] binder: undelivered TRANSACTION_ERROR: 29189 [ 419.873618] attempt to access beyond end of device [ 419.895735] loop4: rw=1, want=183, limit=112 [ 419.900159] Buffer I/O error on dev loop4, logical block 182, lost async page write [ 419.917163] attempt to access beyond end of device [ 419.922182] loop4: rw=1, want=184, limit=112 [ 419.928151] binder: 892:899 ERROR: BC_REGISTER_LOOPER called without request [ 419.928186] attempt to access beyond end of device [ 419.940519] loop4: rw=1, want=185, limit=112 [ 419.945584] attempt to access beyond end of device [ 419.945713] binder_alloc: binder_alloc_mmap_handler: 892 20001000-20004000 already mapped failed -16 [ 419.950573] loop4: rw=1, want=206, limit=112 14:47:38 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x4d0}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x7, 0x280080) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000040)) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000100)={0x0, 0x1f}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000140)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x200800, 0x0) 14:47:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x10, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:38 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xfec00000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="05"}) [ 419.951143] attempt to access beyond end of device [ 419.969290] loop4: rw=1, want=207, limit=112 [ 419.973891] binder: BINDER_SET_CONTEXT_MGR already set [ 419.979369] binder: 892:899 ioctl 40046207 0 returned -16 [ 419.985180] binder_alloc: 892: binder_alloc_buf, no vma [ 419.990684] binder: 892:903 transaction failed 29189/-3, size 0-0 line 2969 [ 419.991711] attempt to access beyond end of device [ 420.002795] loop4: rw=1, want=208, limit=112 [ 420.008948] binder: undelivered TRANSACTION_COMPLETE 14:47:38 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xf4ffffff00000000, 0x1000000020000) [ 420.037267] binder: undelivered TRANSACTION_ERROR: 29189 [ 420.046427] binder: 913:918 ERROR: BC_REGISTER_LOOPER called without request [ 420.058069] binder_alloc: binder_alloc_mmap_handler: 913 20001000-20004000 already mapped failed -16 [ 420.070004] binder: BINDER_SET_CONTEXT_MGR already set [ 420.074533] 9pnet: p9_fd_create_tcp (922): problem connecting socket to [ 420.074533] 27.0.0.1 14:47:38 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x18000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 420.076843] binder: 913:918 ioctl 40046207 0 returned -16 [ 420.090096] binder_alloc: 913: binder_alloc_buf, no vma [ 420.091130] attempt to access beyond end of device [ 420.095533] binder: 913:920 transaction failed 29189/-3, size 0-0 line 2969 [ 420.100449] loop4: rw=1, want=209, limit=112 [ 420.112445] binder: 913:918 ERROR: BC_REGISTER_LOOPER called without request [ 420.120856] binder: undelivered TRANSACTION_ERROR: 29189 [ 420.127637] binder: undelivered TRANSACTION_COMPLETE [ 420.150677] attempt to access beyond end of device [ 420.155671] loop4: rw=1, want=258, limit=112 [ 420.184422] attempt to access beyond end of device [ 420.189436] loop4: rw=1, want=259, limit=112 [ 420.218060] attempt to access beyond end of device [ 420.223090] loop4: rw=1, want=260, limit=112 [ 420.230035] kworker/dying (22) used greatest stack depth: 8704 bytes left [ 420.250977] attempt to access beyond end of device [ 420.255965] loop4: rw=1, want=261, limit=112 [ 420.260863] attempt to access beyond end of device [ 420.265890] loop4: rw=1, want=270, limit=112 [ 420.270811] attempt to access beyond end of device [ 420.275794] loop4: rw=1, want=271, limit=112 [ 420.276845] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075f) [ 420.280967] attempt to access beyond end of device [ 420.287441] FAT-fs (loop6): Filesystem has been set read-only [ 420.292822] loop4: rw=1, want=272, limit=112 [ 420.299668] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075f) 14:47:38 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)='\t'}) 14:47:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)='\a'}) 14:47:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x300000000000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:38 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xff00]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:38 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xf4000000, 0x1000000020000) [ 420.321513] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 420.339505] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000020) [ 420.350810] attempt to access beyond end of device [ 420.355807] loop4: rw=1, want=273, limit=112 [ 420.362498] binder: 939:944 ERROR: BC_REGISTER_LOOPER called without request [ 420.372873] binder_alloc: binder_alloc_mmap_handler: 939 20001000-20004000 already mapped failed -16 [ 420.382708] binder: BINDER_SET_CONTEXT_MGR already set [ 420.388191] binder: 939:944 ioctl 40046207 0 returned -16 [ 420.395469] binder_alloc: 939: binder_alloc_buf, no vma [ 420.400902] binder: 939:946 transaction failed 29189/-3, size 0-0 line 2969 [ 420.408101] binder: 939:944 ERROR: BC_REGISTER_LOOPER called without request [ 420.416412] binder: BINDER_SET_CONTEXT_MGR already set 14:47:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)='T'}) [ 420.422736] binder_alloc: 939: binder_alloc_buf, no vma [ 420.428189] binder: 945:951 transaction failed 29189/-3, size 0-0 line 2969 [ 420.432530] binder: undelivered TRANSACTION_ERROR: 29189 [ 420.448772] binder: 945:954 ERROR: BC_REGISTER_LOOPER called without request [ 420.455368] binder: BINDER_SET_CONTEXT_MGR already set [ 420.461365] binder: 953:955 ioctl 40046207 0 returned -16 14:47:38 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xe803]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 420.468373] binder_alloc: 939: binder_alloc_buf, no vma [ 420.473799] binder: 953:955 transaction failed 29189/-3, size 0-0 line 2969 [ 420.482214] binder: 953:955 ERROR: BC_REGISTER_LOOPER called without request [ 420.498038] attempt to access beyond end of device [ 420.503018] loop4: rw=1, want=633, limit=112 [ 420.507824] binder: 945:948 ioctl 40046207 0 returned -16 14:47:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x200000000000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 420.522110] binder: undelivered TRANSACTION_COMPLETE [ 420.533696] binder: undelivered TRANSACTION_ERROR: 29189 14:47:38 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xfe80]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 420.570485] FAT-fs (loop6): bogus number of reserved sectors [ 420.576466] FAT-fs (loop6): Can't find a valid FAT filesystem [ 420.641526] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075f) [ 420.648743] FAT-fs (loop1): Filesystem has been set read-only [ 420.678577] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075f) [ 420.707743] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 420.717693] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 14:47:39 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x4}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:39 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x30, &(0x7f0000000140)={'mangle\x00'}, &(0x7f0000000000)=0x54) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) 14:47:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xff000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:39 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x2]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:39 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xfffffff5, 0x1000000020000) 14:47:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0xffffffffffffffbd) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x0) r1 = getpgid(0x0) dup2(r0, r0) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x1) ioprio_get$pid(0x3, r1) socketpair(0x11, 0x0, 0x100000001, &(0x7f0000000040)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='mqueue\x00', 0x0, 0x0) 14:47:39 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xfe80000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x6c000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:39 executing program 4: mmap(&(0x7f0000014000/0x3000)=nil, 0x3000, 0x4, 0x44114, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x5, 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) dup2(r0, r1) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x32, 0xa2}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r3, 0x4}, 0x8) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x300) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000100)={0x0, @broadcast, @remote}, &(0x7f0000000140)=0xc) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00000003c0)={0xffffffffffff0000, 0x1000}) 14:47:39 executing program 7: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/112, 0x70}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000540)=0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x8, 0x3, 0x1000}, 0x4) r2 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffe, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000014c0)={[], 0x8, 0x80000000, 0x4, 0x4, 0x2, r1}) write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14}, 0x14) open(&(0x7f0000000300)='./file2\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000580)=[@in6={0xa, 0x0, 0x9, @mcast2}, @in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0xd}, 0x1}, @in6={0xa, 0x4e20, 0xfb, @ipv4={[], [], @multicast2}, 0x4}], 0x54) sendmmsg$alg(r2, &(0x7f0000001380)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="4d968c3e2fb219ac75ba99c129fcccc5b577315d1b57c6e7c9a38b7470daec11e98fa794aada6ef898769a3050513ec64559eab2806bdb566f7417cd8ddcc172d551802c18", 0x45}, {&(0x7f00000002c0)="d0121bb26aeb2a540336ba84fa5eea76e105ce09823bc435f59f8bf1a3c0da1fb86985303b870fe84f795055", 0x2c}], 0x2, 0x0, 0x0, 0x8000}, {0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="0958c57cab0fc0ba3bea95b9dd85832f88299f46abcb388a9696d82a38d4b347764822fe9bad5b1d9532b9857c3888a9cc96b15826057de413e482a2eba1db2a73fed81236abd861aff550f8bddacb", 0x4f}, {&(0x7f0000000400)="d4c902d07ede46948412b9d78212de99611bb926ce934752bba44e98345b63f69309dfd790874cfd39ff625ff8e97313f2be92701f21f38c7b293e8c9a95fa6a88aee5126b6ea85f8f4a27612d2ba7056e4b268520d5e5be2446ddbe6894fb4d923bdef34f2cc31566d05bf6b0ec40761bb5d9e8413f3b7c92b31c1ae5a2d24320d8656cf8cde2f7461f1039aecc2baa035959e159f727e2a7cc9dd6667340179428ca476482864ed924cbeba5c5d887c03a1cc9b21028f252839291de58d1de6de4", 0xc2}, {&(0x7f0000000600)="8491b0c5619504bbff837149ed5bd69cd397d091bea095820a48a0bafb0068a03dc3e3c84bb9c765f4a46869d91a834ed529151f3a0f3c30cb4a10e10977f76f339722c3ff9f518491dcc28e5d87b0b2ae78759d52e0c6af8cb74ff0d00c8cdca30f0b41e45bdc101c30bf74", 0x6c}], 0x3, &(0x7f0000000680)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x70, 0x117, 0x2, 0x55, "976358467ec8ee41af0d7fb38ba6e96ea8b2e4e24cd8e014ee18d676a1fd7f176b6b4c89c47cb5d03e1b23222bc57118f4fb81b04fb037f2076002d115337c3e83258f0451af5f3a945277abcaa4dddc0acf27cb02"}, @op={0x18, 0x117, 0x3, 0x1}], 0xa0, 0x8080}, {0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000740)="38bdaf6965edd400261f96d02985fdfe92859f09feb4886e14dc30f32a1bf9b392c3831b5f08d81279e30e0cfada72be5ee80052709f6b4aa6fa42d612dddda2c2d4cd1a36db3417afdad28d1ccaf0a8177687d85223f5c0365e3fc8b4878825d980ce7ad5a3f0e802d3c7257e9d0e456126c61b5369a68622062feed30c58b97dd607c164eb2da3337ceb390e0c767d189b62d42d9812cfa73a37c0a43efa6ad81598c6fc56268cbb8906a2abdb4df782053370f1c6c654e5b858153b9b3a66658db0740eada917bf96b5bc358292d042ee5f675dddd08a64eab7697d8116668d2fdd13454441d1def18a1e126d7ca1e31e797764a21dcd", 0xf8}, {&(0x7f0000000840)="999f5720071b966abdc66d6a4828a5751962ede96b4e5a66e9566ed339fa8547f47b8f4dcbdbbdfb199b5791f066626408f40990eb55a942b0c4927bbeb2fbba224a898d8d8fd8448bd3969177d1b79ec825ce58fdeedc71a1f9c53a358ef809d1f970c3968e7e7de9c8efe64bc0079be0", 0x71}], 0x2, &(0x7f0000000900)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xc0, 0x117, 0x2, 0xa6, "0296de0db1b5e3ef18d120a0d63f7f97f9c14d2ef3a798e0b334a15d747c5a790a5247043f0613bccbcdad0bff23e3038e29987b6fe5fd1b88eff8c2cfcdba012fd571a9da90b31cc1e5eb89284e504451fb3dbec419507ad83a3b8beaf76a73036b345aca6d0f2b5a88625880cfa5af582ee95c6708f9c2ab62ddf376aa5f9d8879d9c55a9c8981e96804e0f9299c4166a6522b4cb8fd3f89c5c8b90079b795a6815961ff1c"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x20, 0x117, 0x2, 0xb, "3f12541ea772baeda742c7"}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x68, 0x117, 0x2, 0x51, "6934793c71481411e5ae945f23cc0f102aa685c72865975db7a4466d6dd924807c702c2246f55136ac8bda06e7993a5cae8fdafa7f6dc229131d87e87c7855609c388e0ae111413e18949aa4afdba857f1"}, @iv={0xf8, 0x117, 0x2, 0xde, "ca8a8f7f89d792ef37650cf329357daabe91d76332429791553f69f6de12943086bc75c48287fb362684e9cfd9aeaeb2a21115d1429d488fa420be747da2b632bad02a4dafee69a3adf8815fc5f407238631f3b962f1b9ce5f310f67d7b6a61e38d0067bf4e2a3d3476afd91979ec89d01a6ccb6080f705bf4ae06954f613e355d376087e62d998e072dfb38e3a5cd38dbc32c2e47b0eec542509918f8b4d84c9974d597c6fa4c8743dbc9773ed511f03c030dcff63a81900e141b7743f3538ca9eee9f72f5e26f90241991482c346dde72f802ec8746bb3d8b601c9f696"}], 0x288, 0x40000c0}, {0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)="da2094bfa3a30a69484a497f252db9df796ddeb8c4a52c989acd66eb81c8592c206d8da412130b4b6b581a68c314aa2980ae36c392f25b4c03bb7fb3d5d33c5ccb8ace62ffb00c04f3", 0x49}, {&(0x7f0000000c40)="f3426c4feb1d7245f06aba74c53f4e65264f88444a25832e6f296092ce03db70008d2e866365fb2774065dd5bb58288e6835bd6ac421a6364e6eeb7272ebe5db059ed7e532fce0e66c76", 0x4a}, {&(0x7f0000000cc0)="518df9689b83c310a0316558e126037e001a48c088d63672eb8a44ebc0513320a673164f1625b124f23177ab638507e033d5fccd55666ca9a4b52c38307f3898bc521af7847956d8090ae8da7614cc743df4aecee320cc9f8ca0546ce6cc8002cfa3afe981a87f0a1235311800e60cadb51f608adf90c6fbed88ed75b267155df7108a11a6ec6ff78c2912be47ec3ee29de0afde4b9915277cf92f7eb74b97db33b103b5d20d09811802a42fb334be15a24154f12c3eafda23", 0xb9}, {&(0x7f0000000d80)="e77df1d9ab8b", 0x6}], 0x4, &(0x7f0000000e00)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x78, 0x117, 0x2, 0x63, "73d3e228f9c556d6818d7dbbe92df326ceda1f30eb3f5c59935af9d8201dbdc871ef50aa8407934c308cc0aacd4ec0048b9d1461021bf82e60a95e8c9a0e0cb7e5afc01b24475c62a3caab39cb52b5c1efd9d583dd3638d044966f763fd91fe40ba4b0"}, @iv={0x70, 0x117, 0x2, 0x56, "a6d767cfb208df80832340df821a2c251803db78c1380a3ff10fb3bdd0cf47d699621ed0ff93eab2ccb8107d2ad85301d1745435b411ba5ba6b99c8c4f8c9ab9dd93cfde303297444c62cf4a10b5bf594729f5f750d9"}, @iv={0x58, 0x117, 0x2, 0x3f, "c95264b48878059afb1d5a08e06dff06a0448a013b3fca8b8bcaa60da9bf0e29be9244017a9174c26232317d4678bd5acf046e254907d9205485008dc221f8"}, @op={0x18}], 0x170, 0x4}, {0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000f80)="6b8bcaa9cd39422b978855915f233d6c0e4515164d61b372ec333b37aab474fb1d0e82499d6cff35814306d00b4fcce36194e72a1a", 0x35}, {&(0x7f0000000fc0)="ed9cc56d060e167854eccadc852b7ffcd61a7a8fea87abc8ca1a337d167738ef5f033616ac3a134145239efda33f1b0b80aa0e8a15afcf66d0056f73a3a12a598f4d6d8c9f11fddfe016991e3c3bd1f51f346589986393cbba54c2a48be33111f1a42d56541c1a34dd0beb83a6e5eba45cde83ac402cf4e3e503e1568976c30d33d01895f22e44f74b5ebc8381046c0283e3ec213557b4f2a2d45eb87709ee7bbb9eceaf7cbe3a5aaec6da494baf7e2a7911817c6017724cb3dafc508af38be7055432f7bdf881df649054be0e81a2ba3d2da0", 0xd3}, {&(0x7f00000010c0)="537ee86121db8357d2e0f78a17d66af3720e018905246d920f7de06abd840e6fe8ae6a460827909a4b429bb3694058a8125f41f922106e0b20203150df7670f978c45cd765b61ea7e99f52deff133fe5c1083846860461713d46130f90ee757306cd6e3b1d43bbba6cb00a5c2b2f161e62df5b277ad3be33a72cc76ef1508885cd71a73d6db1a72af32180b63b58ade6fb075e76f32015594cd20ae67581648f2461b0a4544bc5a38bf18f551137da531894c495ede362daadb7a38f4dfc3dadf609bcb88368fc7490b72ad3532ac2bb987684f235bf10842f1a6ca593f2d081f1136f0fbf8135f0054b0a7a05ab3a5af4e650", 0xf3}, {&(0x7f0000001800)="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", 0x1000}, {&(0x7f00000011c0)="02093aee527834009c761f7bcd982cfad95f970645577d6692780fe60da63411d8927ad475819399ee1ea15085411dd32cb235730cb036be250ec0988f0a9355e1ce5e8f26f11c", 0x47}], 0x5, &(0x7f00000012c0)=[@iv={0x80, 0x117, 0x2, 0x6c, "d8dcefd7317dbf213df1ff4ad9e4cb43d32257b3750330795ad6c6f1c6de9d707b521c39329d935669e3fc775e8e6bc34bced7a0848d8170cf02caf26cc6ea5c16e59e1ca499f96b557c445684f5fdf63b823ed238ba632b5374453c26fafc39d6692e78087e7906f9d87c0d"}, @op={0x18}], 0x98, 0x4080}], 0x5, 0x0) 14:47:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x20000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 420.927757] 9pnet: p9_fd_create_tcp (1014): problem connecting socket to [ 420.927757] 27.0.0.1 [ 421.018004] 9pnet: p9_fd_create_tcp (1031): problem connecting socket to [ 421.018004] 27.0.0.1 [ 421.146047] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075f) [ 421.153283] FAT-fs (loop1): Filesystem has been set read-only [ 421.159470] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075f) [ 421.172239] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 421.180623] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 421.250306] binder_alloc: binder_alloc_mmap_handler: 953 20001000-20004000 already mapped failed -16 [ 421.260191] binder_alloc: 953: binder_alloc_buf, no vma [ 421.265715] binder: 953:1038 transaction failed 29189/-3, size 0-0 line 2969 [ 421.273068] binder: 953:1037 ERROR: BC_REGISTER_LOOPER called without request [ 421.280952] binder: undelivered TRANSACTION_ERROR: 29189 [ 421.286869] binder: undelivered TRANSACTION_ERROR: 29189 14:47:39 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xfffffff5, 0x1000000020000) 14:47:39 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xa000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x44100, 0x0) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000140)) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920f05"]) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x101ff, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:47:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x6, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:39 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0x2c) io_setup(0x5, &(0x7f0000000040)=0x0) r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x400, 0x8000) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x7fc, r0, &(0x7f0000000080), 0x0, 0x2, 0x0, 0x1, r2}]) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000346fc8)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 421.366933] 9pnet: p9_fd_create_tcp (1049): problem connecting socket to [ 421.366933] 27.0.0.1 14:47:39 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x2}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:39 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x1000000000000, 0x1000000020000) 14:47:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) sigaltstack(&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000180)={0x2, 0x80, 0x6, 0x0, 0x8}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) 14:47:39 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x6]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xa00000000000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:39 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x20, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/100) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000080)=""/47) 14:47:39 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x400001000) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000140)=0x3a0d) ioctl$EVIOCGREP(r1, 0x8010743f, &(0x7f0000d1df52)=""/174) [ 421.693313] binder: 1067:1079 ERROR: BC_REGISTER_LOOPER called without request [ 421.702808] binder_alloc: binder_alloc_mmap_handler: 1067 20001000-20004000 already mapped failed -16 [ 421.713318] binder: BINDER_SET_CONTEXT_MGR already set [ 421.718677] binder: 1067:1079 ioctl 40046207 0 returned -16 [ 421.724572] binder_alloc: 1067: binder_alloc_buf, no vma [ 421.730103] binder: 1067:1083 transaction failed 29189/-3, size 0-0 line 2969 14:47:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x800) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) 14:47:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x4800000, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000023c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="bd17beefe07e8df32349134d1152b9111b8b61524acdf98e96161a1ef506fcf67abc54b8a022710e2dd97f3542e9c2f1039c1a3357dc2aee0c864328af948065eed3c07acd0afd44a800000000000000000000", 0x53, 0x7}]) 14:47:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x6c00000000000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:40 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x40030000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 421.738844] binder: undelivered TRANSACTION_ERROR: 29189 [ 421.748447] binder: undelivered TRANSACTION_COMPLETE [ 421.772610] binder: 1092:1093 transaction failed 29189/-22, size 0-0 line 2854 [ 421.780700] binder: 1092:1093 ERROR: BC_REGISTER_LOOPER called without request 14:47:40 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f00000000c0), 0x10) 14:47:40 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="04dcedfff7000000000000") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000440)="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", 0x137}, {&(0x7f0000000400)="87a9ea9e95d17a3562627fdc852799d6fbb48b258e2e14b2f4299001a797d804f0520998", 0x24}, {&(0x7f0000000240)="931f446048", 0x1db}, {&(0x7f00000002c0)="023e17e62bdacc0700a9de9bd4e1e4ff9c6db8", 0x13}, {&(0x7f0000000300)="d68a53b803f98231015839e7458ffcd5752628fec4fcee9178022e85b0c328487d6ac34cfec99a9321e0ea26d7b6034f9cfb0a7f210456376db5ddc8f5103e6287249027bcf20d83d6099f775cc63c5a11afe38391c1435ac9", 0x59}], 0x5, 0x4) 14:47:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xffffffff00000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:40 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xfeffffff00000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:40 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xffffff0f00000000, 0x1000000020000) 14:47:40 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0xa}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x900, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:40 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xfcff000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:40 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) write(r0, &(0x7f0000000200)="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", 0x1000) r1 = getpgrp(0xffffffffffffffff) r2 = getpgid(r1) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x2a8a41, 0x0) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000140)) prctl$void(0x4000000000000020) 14:47:40 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000340)=""/4096, &(0x7f0000000000)=0x1000) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x10000) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[]) 14:47:40 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x5000000, 0x1000000020000) 14:47:40 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xe803000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 422.555159] 9pnet: p9_fd_create_tcp (1164): problem connecting socket to [ 422.555159] 27.0.0.1 [ 422.569190] binder_alloc: binder_alloc_mmap_handler: 1092 20001000-20004000 already mapped failed -16 [ 422.579006] binder: BINDER_SET_CONTEXT_MGR already set [ 422.584608] binder: 1092:1169 ioctl 40046207 0 returned -16 [ 422.597275] binder: 1092:1170 transaction failed 29189/-22, size 0-0 line 2854 14:47:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000015c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) vmsplice(r0, &(0x7f0000001500)=[{&(0x7f0000000280)="392e9aeef1b8b7817d43ad99d303797b1418119f867c758dc92fdbf3fc4571741ec7df0dc90f7bcdbf12af34e1d93cda16be417852412890118154532c4d86731f76d5d5040f46a86727f897db2b5c681f300a", 0x53}, {&(0x7f00000000c0)="5232a44368b23e871632840725e3b56eef01f8c1a83d6881242fd734e183e6e833f84e5ef1bdd30c36718bd9aaaf5df698", 0x31}, {&(0x7f0000000340)="0c25484db6508bb129200d98b4eaf0585d9cfb7df4d3aa04cb8918928ef1ce5f3c03cc7331bdfdb4cb426ee4c25c9fec01a7dda7c9da3d089414fe40f352647014bbab2b5ff9f2ff7094358ad54e246a24fa5fde8f5fd7b6ee35c1f5", 0x5c}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f00000003c0)="810f15423dfabc80f280eed059ecc4ff76603dc6950c0427c4cb9fe2423e30266d86637adea22e9560e244b742", 0x2d}, {&(0x7f0000001480)="1b6efb17b7ddfe90ddf8b9611036b4579cc22ce73540d877359d7c93f846d373d773a3bdc5115077a15bd9cf73d5a3cdc482668000f3a6a4ba9f0cf55873944160ab5c2637538e6e07e51d572e4bbd", 0x4f}, {&(0x7f0000000400)="6af62292c01882430962d485e09f5bd398d3e2b0322f673e432c597185488f90e3acb32baf6b0098bc0fc4ea", 0x2c}], 0x7, 0xb) r2 = dup3(r0, r1, 0x80000) statx(r2, &(0x7f0000000080)='./file0\x00', 0x0, 0x10, &(0x7f0000000180)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x20010, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b63e134"], 0x1, 0x0, &(0x7f0000000140)="06"}) 14:47:40 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='security.capability\x00', 0x0) fsetxattr(r0, &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000040)='^#-*\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f00000012c0)=@known='security.capability\x00') ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000000)) [ 422.605069] binder: 1092:1169 ERROR: BC_REGISTER_LOOPER called without request [ 422.614454] binder: undelivered TRANSACTION_ERROR: 29189 [ 422.641125] binder: undelivered TRANSACTION_ERROR: 29189 14:47:40 executing program 7: syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x52, &(0x7f0000000a80), 0x0, &(0x7f00000001c0)={[{@uid={'uid'}}]}) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x10000, @local, 0x2}}}, &(0x7f0000000400)=0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000440)={r1, 0x200, 0x401, 0x2}, &(0x7f0000000480)=0x10) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e23}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x0, {0x2, 0x4e20, @local}, 'dummy0\x00'}) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, &(0x7f00000001c0)) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000140)={0xffffffffffffffff}) getpeername$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, &(0x7f0000000240)=0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) [ 422.648626] binder: 1176:1177 got transaction to context manager from process owning it [ 422.656939] binder: 1176:1177 transaction failed 29201/-22, size 0-0 line 2845 [ 422.667190] binder: BINDER_SET_CONTEXT_MGR already set [ 422.673187] binder: 1176:1183 ioctl 40046207 0 returned -16 [ 422.679562] binder: 1176:1177 unknown command 887186187 [ 422.685562] binder: 1176:1177 ioctl c0306201 20000040 returned -22 [ 422.693437] binder: undelivered TRANSACTION_COMPLETE 14:47:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x688000, 0x0) getdents64(r2, &(0x7f0000000180)=""/200, 0xc8) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) [ 422.712263] binder: undelivered transaction 805, process died. [ 422.735078] binder: 1191:1192 ERROR: BC_REGISTER_LOOPER called without request [ 422.744931] binder: BINDER_SET_CONTEXT_MGR already set [ 422.750369] binder: 1191:1192 ioctl 40046207 0 returned -16 [ 422.756670] binder_alloc: 1191: binder_alloc_buf, no vma 14:47:40 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xec040000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b63000022d527cee5f4aafb70e810d89e71831050da9b24fbabad0f3cfbb82f113f64611622a897b0501c19e273807acbf81ced67732af45c6822980c040f88aa1b63d86aa42ddaf33f6e6dd7e845df0d5b46f5"], 0x1, 0x0, &(0x7f0000000140)="06"}) 14:47:41 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x40000007, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/3, 0x3}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000300)=""/4096, &(0x7f0000000100)=0x1000) dup2(r2, r1) setsockopt$inet6_dccp_int(r1, 0x21, 0x0, &(0x7f00000001c0)=0x2, 0x4) 14:47:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x6000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 422.762233] binder: 1191:1194 transaction failed 29189/-3, size 0-0 line 2969 [ 422.770272] binder: undelivered TRANSACTION_COMPLETE [ 422.772940] binder: 1191:1192 ERROR: BC_REGISTER_LOOPER called without request [ 422.830125] binder: BINDER_SET_CONTEXT_MGR already set [ 422.832967] ISOFS: Unable to identify CD-ROM format. [ 422.835849] binder: 1199:1203 ioctl 40046207 0 returned -16 [ 422.844248] binder: undelivered TRANSACTION_ERROR: 29189 [ 422.852608] binder_alloc: 1191: binder_alloc_buf, no vma [ 422.858467] binder: 1199:1203 transaction failed 29189/-3, size 0-0 line 2969 [ 422.859154] 9pnet: p9_fd_create_tcp (1207): problem connecting socket to [ 422.859154] 27.0.0.1 [ 422.875513] binder: 1199:1203 ERROR: BC_REGISTER_LOOPER called without request [ 422.935429] ISOFS: Unable to identify CD-ROM format. 14:47:41 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x400000000000000, 0x1000000020000) [ 423.223810] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075f) [ 423.231063] FAT-fs (loop6): Filesystem has been set read-only [ 423.237180] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075f) [ 423.251341] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 423.260191] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000020) 14:47:41 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x8}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x60000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x2000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@dev={0xfe, 0x80, [], 0x1e}, 0x1, 0x0, 0xff, 0x75221d52d5cc71d8, 0x812e, 0x9, 0x1}, 0x20) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") prctl$setmm(0x23, 0x1, &(0x7f0000ffc000/0x2000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffffffffff9}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400a02, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000001c0)={'irlan0\x00', @random="2d0910fde5d2"}) statx(r4, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0)) getsockopt$inet_mreqsrc(r4, 0x0, 0x2f, &(0x7f00000002c0)={@loopback, @remote, @multicast2}, &(0x7f0000000300)=0xc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x400, 0x0) 14:47:41 executing program 7: r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0xcc9) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, 0x0, &(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x1}, r1) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x145) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x1, 0x3, [0x800, 0x8, 0x8]}, &(0x7f0000000080)=0xe) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000140)={0x3}, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x4, 0x2, 0x9, 0x7, r3}, &(0x7f0000000100)=0x10) 14:47:41 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xf6000000, 0x1000000020000) 14:47:41 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xb2000000, 0x1000000020000) 14:47:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xfc00]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x7, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 423.410559] 9pnet: p9_fd_create_tcp (1246): problem connecting socket to [ 423.410559] 27.0.0.1 14:47:41 executing program 7: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000180)={r1, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x3, 0x19, 0xd4f2, 0x6, 0x3ff}, &(0x7f0000000240)=0x98) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) sendmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000300), 0x0, &(0x7f0000000340), 0x2}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x13, &(0x7f0000000e40), 0x0, &(0x7f00000012c0), 0x302}}], 0x2, 0x0) 14:47:41 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x10000000000000, 0x8d4, 0x10}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xe, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x84}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7, 0x800) ioctl$TCSBRK(r0, 0x5409, 0x2) 14:47:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x5, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 423.509140] 9pnet: p9_fd_create_tcp (1268): problem connecting socket to [ 423.509140] 27.0.0.1 [ 423.610071] binder_alloc: binder_alloc_mmap_handler: 1199 20001000-20004000 already mapped failed -16 [ 423.620316] binder_alloc: 1199: binder_alloc_buf, no vma [ 423.620715] 9pnet: p9_fd_create_tcp (1291): problem connecting socket to [ 423.620715] 27.0.0.1 [ 423.625974] binder: 1199:1289 transaction failed 29189/-3, size 0-0 line 2969 [ 423.643213] binder: 1199:1288 ERROR: BC_REGISTER_LOOPER called without request [ 423.653116] binder: undelivered TRANSACTION_ERROR: 29189 14:47:41 executing program 5: r0 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x80800) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000180)=0xc) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000001c0)=r1) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0x1, 0x20000000, 0x400, 0xa97, 0x7fffffff, 0x0, 0x100000000, 0x3, 0x7, 0x7fffffff}, 0x10) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x1, 0x0, &(0x7f0000000140)="06"}) 14:47:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x80fe]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:41 executing program 7: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000001540)=[{&(0x7f0000001440)}], 0x400, &(0x7f0000001640)={[{@mode={'mode'}}, {@mode={'mode'}}, {@map_off='map=off'}, {@cruft='cruft'}, {@hide='hide'}, {@norock='norock'}, {@nocompress='nocompress'}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x2, 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000180)) r2 = syz_open_pts(r0, 0x0) read(r2, &(0x7f0000000040)=""/1, 0x1) read(r2, &(0x7f0000000240)=""/106, 0x6a) ioctl$TIOCSETD(r2, 0x5437, &(0x7f0000fd0ffc)) 14:47:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8cffffff00000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 423.660306] binder: undelivered TRANSACTION_ERROR: 29189 [ 423.697444] binder: 1293:1295 unknown command 0 [ 423.702308] binder: 1293:1295 ioctl c0306201 20000040 returned -22 [ 423.710205] binder: BINDER_SET_CONTEXT_MGR already set [ 423.715644] binder: 1293:1295 ioctl 40046207 0 returned -16 [ 423.721994] binder_alloc: 1293: binder_alloc_buf, no vma [ 423.727538] binder: 1293:1295 transaction failed 29189/-3, size 0-0 line 2969 [ 423.735259] binder: 1293:1301 unknown command 0 [ 423.740085] binder: 1293:1301 ioctl c0306201 20000040 returned -22 [ 423.758630] binder: undelivered TRANSACTION_ERROR: 29189 [ 423.776062] binder: undelivered transaction 813, process died. [ 423.782212] binder: undelivered TRANSACTION_COMPLETE [ 423.796579] ISOFS: Unable to identify CD-ROM format. [ 423.852392] ISOFS: Unable to identify CD-ROM format. [ 423.931004] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075f) [ 423.938208] FAT-fs (loop1): Filesystem has been set read-only [ 423.944347] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075f) [ 423.957720] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 423.966203] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 14:47:42 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x3}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:42 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xe]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff0000b6c073fe9cfa167def7b1667d663bb49adb62999c9ecee1d863f036d773b7fd39d4f01947b47c1134ce64c462a4ca970374d3271875b519ca7c9529067d0a6ca0efef4de27d96c882a9d716bbb6d592a94e7cbfebb42976c410400008131eb153776af6640a894cfb6a3b094068244a1b4da6666066e125a7819ba68cd4b97c95740d79d9ce39e2fc9e072817b6c707f46e98868b475de45"], 0x1, 0x0, &(0x7f0000000140)="06"}) 14:47:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xedc000000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:42 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x9, 0x8}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0xfff8000000000000, 0x4, 0xc, 0xfffffffffffffff9, 0x6, 0x80000000, 0x1000, 0x3, r1}, 0x20) mq_getsetattr(r0, &(0x7f00000000c0)={0x1ff, 0x37eb, 0xfffffffffffffffa, 0x1, 0x7ff, 0x3ff, 0x5, 0xd9e}, &(0x7f0000000100)) ioctl$TIOCNXCL(r0, 0x540d) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={r1, 0x0, 0x4b, "4caed61e3d3f67de0544e119d0c7dff150a212ce9b06f3644e869232e227e7cb095a1179ec916e20909010d4d7c112a17ddb5b31e097a0d313b7726b97ad5844e120724103bcd5040ebb8e"}, 0x53) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x2a2, 0x201, 0x7, 0x2, r1}, 0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000200)={r1, 0x9, 0x2}, 0x8) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000280)=0x10000) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x8020, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000300)=[@in={0x2, 0x4e20, @rand_addr=0x8}, @in={0x2, 0x4e22, @local}]}, &(0x7f0000000380)=0x10) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f00000003c0)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000400)={r2, 0x3, 0x3, 0x0, 0x80, 0x6}, &(0x7f0000000440)=0x14) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000480)={'ip6gre0\x00', 0x1f}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000004c0)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000500)=[{0x8, 0x5}, {0xe, 0x6}, {0x4, 0x6}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x0, 0x7fffffff}, {0x4, 0x3b}, {0x3, 0x4}, {0x4, 0x7}, {0x4, 0x6}], 0xa) write$P9_RREADLINK(r0, &(0x7f0000000580)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f00000005c0)={0x1fe, 0x0, &(0x7f0000ffe000/0x1000)=nil}) r3 = syz_open_dev$adsp(&(0x7f0000000600)='/dev/adsp#\x00', 0x5, 0x80c0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000640)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000680)=0x20000001c) r4 = semget$private(0x0, 0x4, 0x480) semctl$SEM_INFO(r4, 0x1, 0x13, &(0x7f00000006c0)=""/201) name_to_handle_at(r3, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x7b, 0x9, "053f43480f01a9aedd79f5337973e50852ce8e616a0b5d5913d98b9ffde600cb74905db5a8643552204975bd06b0d97b97687c9112b8e701645292629c87b63dfd3a5d697ebd0626b56b3084b76fee9df60b8c00a134be94244e4cbe69ec96c218802c1f29e009d646d0bfdae72cd9ac9c85e9"}, &(0x7f0000000880), 0x1000) msgget$private(0x0, 0x20) fanotify_mark(r0, 0x20, 0x20000, r3, &(0x7f00000008c0)='./file0\x00') setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000900)={0x401, {{0x2, 0x4e20, @multicast2}}}, 0x88) recvmsg(r0, &(0x7f0000002000)={&(0x7f00000009c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/9, 0x9}, {&(0x7f0000001a80)=""/135, 0x87}, {&(0x7f0000001b40)}, {&(0x7f0000001b80)=""/222, 0xde}, {&(0x7f0000001c80)=""/84, 0x54}, {&(0x7f0000001d00)=""/128, 0x80}, {&(0x7f0000001d80)=""/240, 0xf0}, {&(0x7f0000001e80)=""/24, 0x18}, {&(0x7f0000001ec0)=""/41, 0x29}], 0xa, &(0x7f0000001fc0)=""/26, 0x1a, 0xff}, 0x40) [ 424.232533] binder: 1323:1330 unknown command 65535 [ 424.237782] binder: 1323:1330 ioctl c0306201 20000040 returned -22 [ 424.244991] binder_alloc: binder_alloc_mmap_handler: 1323 20001000-20004000 already mapped failed -16 [ 424.254661] binder_alloc: 1323: binder_alloc_buf, no vma [ 424.256648] binder: BINDER_SET_CONTEXT_MGR already set [ 424.260199] binder: 1323:1333 transaction failed 29189/-3, size 0-0 line 2969 [ 424.273068] binder: undelivered TRANSACTION_ERROR: 29189 14:47:42 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x2000000, 0x1000000020000) 14:47:42 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xb500, 0x1000000020000) 14:47:42 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0) dup2(r0, r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), &(0x7f00000001c0)}}}], 0x0, 0x0, &(0x7f0000000480)}) 14:47:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xffffffffffffffab, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x226, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b6300006392bba4a8bdc714fce42773bf7138dbb1a7cbccdc2952bfc4000fc90dd47c0a352a5ae6843c50"], 0x1, 0x0, &(0x7f0000000140)="06"}) 14:47:42 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x7fffef58]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:42 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@rq={'rq', 0x3d, 0x7}}]}}) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x124) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) truncate(&(0x7f0000000040)='./file0/bus\x00', 0x0) [ 424.274930] binder: 1323:1330 ioctl 40046207 0 returned -16 [ 424.280508] binder: undelivered transaction 816, process died. 14:47:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x5000000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) [ 424.344423] binder: 1342:1344 ERROR: BC_REGISTER_LOOPER called without request [ 424.372998] binder: undelivered TRANSACTION_COMPLETE 14:47:42 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xb80b]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 424.398858] binder: BINDER_SET_CONTEXT_MGR already set [ 424.427606] binder: release 1343:1368 transaction 819 out, still active [ 424.435338] binder_alloc: binder_alloc_mmap_handler: 1342 20001000-20004000 already mapped failed -16 [ 424.443335] 9pnet: p9_fd_create_tcp (1365): problem connecting socket to [ 424.443335] 27.0.0.1 [ 424.447758] binder: 1343:1356 ioctl 40046207 0 returned -16 [ 424.459796] binder: BINDER_SET_CONTEXT_MGR already set [ 424.465208] binder: 1342:1344 ioctl 40046207 0 returned -16 14:47:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = dup(r0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000300)=0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r4], 0xdc, 0x0, &(0x7f0000000580)="c6cfca0c54f21e01f63f6ab671f608a6cf9a5048035daefc0be617b40e05d92eb6be8c4ea3fe7ee92475373da7c38a02354bfb180dcb612a93063fcfa71a31dcfb994890ad6cc598a293bbd1d19569911f180592f728f7e9e1a3cea5ff0ed397faa7a3826b5f87f427c1fd7df089015503351447f20c215b98bd02876b2548d597ba536a51ff5c055045371c91923c5057b84543c4c53e709348cb34423f4db4754e6939425aeb4fbc0aa674a2444c6e76b65c55b52734d79776e829fe4f88cf16a08693d19dbdc6004ed23c6f061dbc449ab48db6a621456e6225dd"}) r5 = mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x30, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x6c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0f630c400000000001000000000000000f630c4003000000020000000000000011634840000000000000000004000000000000000000000001000000000000000000000030000000000000003000000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="000000000100000000000000852a62770b000000", @ANYRES64=r5, @ANYBLOB="0400000000000000"], @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\t\x00\x000\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x\x00\x00\x00\x00\x00\x00\x00x\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ffffffff00000000"], 0xbd, 0x0, &(0x7f0000000480)="ba09a3cda70c4fe41284ae07900ff6a1d6eaf6d470a8b8e2d4c14544674dec114a8c35af4fdc411a8c67e1d3bdf22137d0674c364587805df847e3b3a80a9a13ff221b6e175686f24746cefb4d7f0c3a926a69d4d9081610fefa8cb8820b526761907e4de2e6f61afa3c99da8c34e9fcd395d8165a89187571c0c50b4fa03fad3b0395dec8c3aeb15d90671e6c5e9d79198772d0eadb0ee01d11530c6fd9b5a28801d1963ff9b96d2f328bab1a6bd05d2dedec7dd8333358ebaab3cf3c"}) r6 = socket$inet_dccp(0x2, 0x6, 0x0) accept4$inet(r6, &(0x7f0000000040), &(0x7f00000000c0)=0x10, 0x80800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\vcE\x00'], 0x1, 0x0, &(0x7f0000000140)="ff"}) 14:47:42 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@rq={'rq', 0x3d, 0x7}}]}}) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x124) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) truncate(&(0x7f0000000040)='./file0/bus\x00', 0x0) [ 424.471252] binder: 1342:1370 ERROR: BC_REGISTER_LOOPER called without request [ 424.481322] binder: unexpected work type, 4, not freed [ 424.486689] binder: undelivered TRANSACTION_COMPLETE [ 424.501186] binder: release 1342:1344 transaction 819 in, still active [ 424.507934] binder: send failed reply for transaction 819, target dead [ 424.515548] binder_alloc: binder_alloc_mmap_handler: 1343 20001000-20004000 already mapped failed -16 14:47:42 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x700]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) [ 424.527080] binder_alloc: 1343: binder_alloc_buf, no vma [ 424.532634] binder: 1343:1368 transaction failed 29189/-3, size 24-8 line 2969 [ 424.557128] binder: undelivered TRANSACTION_ERROR: 29189 [ 424.576306] binder: 1375:1376 unknown command 65535 [ 424.581478] binder: 1375:1376 ioctl c0306201 20000440 returned -22 [ 424.590516] binder: 1375:1376 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 424.597348] binder: 1375:1376 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 424.604183] binder: 1375:1376 got transaction to context manager from process owning it [ 424.612373] binder: 1375:1376 transaction failed 29201/-22, size 48-48 line 2845 [ 424.626097] binder: 1375:1376 unknown command 4547339 [ 424.631477] binder: 1375:1376 ioctl c0306201 20000080 returned -22 [ 424.638938] binder_alloc: binder_alloc_mmap_handler: 1375 20001000-20004000 already mapped failed -16 [ 424.648673] binder: BINDER_SET_CONTEXT_MGR already set [ 424.654528] binder: 1375:1376 ioctl 40046207 0 returned -16 [ 424.666082] binder: 1375:1383 unknown command 65535 [ 424.671238] binder: 1375:1383 ioctl c0306201 20000440 returned -22 [ 424.677820] binder: 1375:1383 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 424.684631] binder: 1375:1383 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 424.691676] binder_alloc: 1375: binder_alloc_buf, no vma [ 424.697195] binder: 1375:1383 transaction failed 29189/-3, size 48-48 line 2969 [ 424.749417] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075f) [ 424.756601] FAT-fs (loop1): Filesystem has been set read-only [ 424.762666] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075f) [ 424.782401] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 424.791658] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 424.841678] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075f) [ 424.848849] FAT-fs (loop6): Filesystem has been set read-only [ 424.854927] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000075f) [ 424.867976] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 424.876057] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000020) 14:47:43 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x6}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:43 executing program 7: r0 = socket(0x19, 0x807, 0x3) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f00000000c0)=0x5, 0x2) sendto$unix(r0, &(0x7f0000000100)="7cf322640b4a6727f3d92a05fd012d000717a99db9b7a7c099db4cf23d9e73778474b9c369bc54b9bda57e7b70a3d48bd2d9bc0091a95b9a9437f56d56c4c2722ff18310c95adcbed741e2db78154e5fa7ebd8a8e8d2265369b90c8c189752dddb0961a015e15c0c9e029d450847a54c26a6d44382f5c113974a658187f69c91b63dfa7159beec6692c86cff6a8dfc0a4c3214b8c1997a", 0xfffffffffffffc88, 0x0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r1) 14:47:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x20100000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:43 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xf4010000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0xff, &(0x7f00000000c0)="c16eab4ba858458ee92096") r1 = socket$inet6(0xa, 0x3, 0x3c) accept$unix(r0, &(0x7f0000000000), &(0x7f0000000080)=0x6e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="000204f3ffffffffffffff00000000000000ffff7f000001"], 0x18) sendmsg(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000003b40), 0x0, 0x800}, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) 14:47:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="006340400000007da30a387dd6ad6395e135dd7fce74fc04529084c6a93cbf0caf2cdd44099183b3fd36ba4efc0ae780a111fb29216af7e66c26"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) 14:47:43 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xb1, 0x1000000020000) 14:47:43 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xc0, 0x1000000020000) 14:47:43 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f00000000c0)) r1 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5f, 0xca201) write$P9_RRENAME(r1, &(0x7f0000000200)={0x7, 0x15, 0x1}, 0x7) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000006c0)="6e6f646573e6", 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) write$P9_RUNLINKAT(r3, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7) write$P9_RREADDIR(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="8d5679150e12216cb23ea93b49186edd9592f22e012d0573bd5797cd8355020f9bb980b387f8aa37bd80ba927642dfdf0b35a1688db4266b74a7de3d46cf4de883aeab92f48f2b9c3e1eed0a056e7da2f21f1cb32e99489536b4afd1a4a70a7e330d9f9169ae7e7830810ae613226760ca36360ccc3ec30b5abeb98b3d"], 0x7) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8916, &(0x7f0000000080)="025cc83d6d345f8f7620512e6c3a3c26a070") ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, "804e9586cf8a6d2d0700524928dc862da340dec9ee4a6bb74e77d3dd1a52f33cc1748d00", "9b9565fd6c7860bd47638a0e3a6899a829b38528694cb064080000bdf5c1d14998d5bbac6c4deae26bc26c30acd5983cc9a8453e000873477ebc926e83d8fccc", "73e37038ac9e1afce8d40c23003f15590457370200000000000000ffffff0051"}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000180), 0x1) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) [ 425.064508] binder: 1398:1405 got transaction to invalid handle [ 425.070668] binder: 1398:1405 transaction failed 29201/-22, size 5672907143892930825-3025030960059452156 line 2854 [ 425.082603] binder: 1398:1405 ERROR: BC_REGISTER_LOOPER called without request 14:47:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x2000, &(0x7f0000000180)={'trans=tcp,', {'port'}}) 14:47:43 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x1000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:43 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000540)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000100)=""/28, 0xffffffffffffff7d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000580)={{0x80, 0x3}, "13701b21870a60480000000000039b3fd5cec307e8ef3d13eb790ec9c45abaf90d229db6926c475b78f8b2433700000f0000000000000009fba8f376589701a4", 0xa9824f69d1376637, 0x10800a, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) r1 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000180)='ppp1\x00', 0xfffffffffffffffb) keyctl$revoke(0x3, r1) sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x800, 0xfffffffffffffbff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f000019ffe9)={0xc5, @time={0x77359400}}) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x2, 0x2000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty, @rand_addr}, &(0x7f0000000240)=0xc) bind$can_raw(r2, &(0x7f00000004c0)={0x1d, r3}, 0x10) r4 = getpid() keyctl$dh_compute(0x17, &(0x7f0000000380)={r1, r1, r1}, &(0x7f0000000640)=""/196, 0xc4, &(0x7f0000000500)={&(0x7f00000003c0)={'speck64-generic\x00'}}) sched_setattr(r4, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000440)={0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000002c0)={0x0, 0x0, 'client1\x00', 0x0, "1be29523018e3d53", "de39c6faa1b760d822b85a82f30c17190fceebdaf70cee81992786c169f8bf56"}) read(r0, &(0x7f0000000080)=""/75, 0x4b) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000400)=0x2006) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000800)='/dev/sequencer2\x00', 0x0, 0x0) sendto$packet(r5, &(0x7f0000000740)="feea1649e028aeaaf8a5dbc2c7eab9", 0xf, 0x20000000, &(0x7f0000000780)={0x11, 0x1f, r3, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 14:47:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'%rans=tcp,', {'port'}}) 14:47:43 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') bind$alg(r0, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000640)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000740)=0xe8) sendmsg$nl_route(r1, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)=@ipmr_newroute={0x13c, 0x18, 0x200, 0x70bd2a, 0x25dfdbff, {0x80, 0x0, 0x10, 0x4, 0xff, 0x6, 0xc8, 0xb, 0x100}, [@RTA_METRICS={0xb8, 0x8, "21a959fa138c41d0ede55e2d0b22e8ba16d121fce5eba4ac958640eb366f554bf398d119164a6756b24600dd6af95b8479355a7e8bef752dab1b33b3bd8eb8680a4962f26a0bf388ada4147b8f91a83c665bebdbd6ad212dfff5ca71cd189f417fd686237d3a7a0cacd42af06db801ba7074e1a431e9953e4cdbf102bfe80f2f7e04b953fd0b4e7d24a9d04ece2c10fce29f9220527971808ce3c6952007f8292eac9778e6902590edd185b0aa1a8206a065d9"}, @RTA_ENCAP={0xc, 0x16, @typed={0x8, 0x70, @fd=r1}}, @RTA_FLOW={0x8, 0xb, 0x1}, @RTA_IIF={0x8, 0x1, r2}, @RTA_METRICS={0x4c, 0x8, "2761ae7e6e8e8be4555a70537015c240c993ebada83b8a0a54038dd37ad7c4790ca9d7ed542cc888c82b9d12cbfb6ddec4c5d46002abf385c8881192fb5e6fba008c4db37a625f"}]}, 0x13c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x40000) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x800, 0x800}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={r3, 0xfffffffffffffff8}, 0x8) r4 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r4, r1, &(0x7f0000000240), 0x8000) 14:47:43 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xa00]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'\nrans=tcp,', {'port'}}) [ 425.275830] 9pnet_virtio: no channels available for device [ 425.275830] 27.0.0.1 [ 425.321502] 9pnet_virtio: no channels available for device [ 425.321502] 27.0.0.1 [ 425.323102] could not allocate digest TFM handle speck64-generic [ 425.339606] could not allocate digest TFM handle speck64-generic [ 425.861889] binder_alloc: binder_alloc_mmap_handler: 1398 20001000-20004000 already mapped failed -16 [ 425.873544] binder: BINDER_SET_CONTEXT_MGR already set [ 425.879159] binder: 1398:1482 ioctl 40046207 0 returned -16 [ 425.885016] binder: 1398:1483 got transaction to invalid handle [ 425.891109] binder: 1398:1483 transaction failed 29201/-22, size 5672907143892930825-3025030960059452156 line 2854 [ 425.899225] binder: undelivered TRANSACTION_ERROR: 29201 14:47:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x34000}], 0x1, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:44 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x7]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:44 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'dummy0\x00'}) sysfs$3(0x3) 14:47:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'t%ans=tcp,', {'port'}}) 14:47:44 executing program 4: r0 = gettid() r1 = memfd_create(&(0x7f0000000280)='bdev]vmnet1\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x7) 14:47:44 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xb200000000000000, 0x1000000020000) 14:47:44 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x6000, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000400)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004004}, 0x10) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xcae, 0x140) r5 = add_key(&(0x7f00000002c0)='cifs.spnego\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000480)="1b5cd3c0692697d12f3d5c1a9ef7c97647cb7eaa27e3a87baeb5554504a34b19ab7921720ad11980c7dac340c1ee6c37ea920d2453803b24612f20a01302bcaac685445ed615f2d1fc66d6770f9c270dc0531b7344d1af5e8c777ef3b18d4c31c6ba1ac8ba6026a1daacfb167bdc4121ea029dab51eb33eaeaf189092bd898b07945694af74bb0cea8178be63578d8ebe5044307055bf30d5a586d18c66d81b3938204b164323729cbee13f0a0dc584cc8b143be359ae2d98b4d2ffcbaac7a4977f943f331af49293fa4827d92c280368cd9e3da5c3049fd530cbd7f", 0xdc, 0xfffffffffffffff9) add_key(&(0x7f0000000180)='rxrpc_s\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000200)="3a60d32c75d562de7f3deb8847b87229afaa1ccd2ea8a49688459986fd8e5f3af3e8a36fb811a7b601f4b67453c13d2660d0f789323f612d686a50e3a09a10273653e6779d3d86aebddf5390539c96d785a1e6a01025c74f164c8befcf4518520e43138baaeec76ebbef010fce2ea11644a158487ee00ca8053affb6f5d8c99218e07ee97cbe91041e7b8a9808637dba56c559aad7e66042682768fb19d9664df3ebaf3bc99d232a4242c3e2ee27faf93bb16e3ebd34", 0xb6, r5) ioctl$KVM_ASSIGN_SET_INTX_MASK(r4, 0x4040aea4, &(0x7f00000000c0)={0xfffffffffffffff8, 0x4, 0x9, 0x4, 0x80}) 14:47:44 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xd, 0x1000000020000) [ 425.911957] binder: undelivered TRANSACTION_ERROR: 29201 [ 425.976781] binder: 1493:1495 ERROR: BC_REGISTER_LOOPER called without request [ 425.987066] binder: BINDER_SET_CONTEXT_MGR already set [ 425.992476] binder: 1493:1495 ioctl 40046207 0 returned -16 [ 425.998526] binder: 1493:1507 ERROR: BC_REGISTER_LOOPER called without request [ 425.998530] binder_alloc: 1493: binder_alloc_buf, no vma [ 425.998551] binder: 1493:1495 transaction failed 29189/-3, size 0-0 line 2969 [ 426.020391] binder: undelivered TRANSACTION_ERROR: 29189 14:47:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c630004"], 0x1, 0x0, &(0x7f0000000140)="06"}) [ 426.021728] 9pnet_virtio: no channels available for device [ 426.021728] 27.0.0.1 [ 426.049138] binder: undelivered TRANSACTION_COMPLETE [ 426.057092] binder: 1521:1526 unknown command 67134252 [ 426.062668] binder: 1521:1526 ioctl c0306201 20000040 returned -22 14:47:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'t\nans=tcp,', {'port'}}) [ 426.072800] binder_alloc: binder_alloc_mmap_handler: 1521 20001000-20004000 already mapped failed -16 [ 426.083153] binder: BINDER_SET_CONTEXT_MGR already set [ 426.088671] binder: 1521:1526 ioctl 40046207 0 returned -16 [ 426.098146] binder_alloc: 1521: binder_alloc_buf, no vma [ 426.103739] binder: 1521:1530 transaction failed 29189/-3, size 0-0 line 2969 14:47:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000000c0)=0x380, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2, 0x0, &(0x7f0000000300)=ANY=[@ANYRES16=0x0], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0xfd51, 0x0, &(0x7f0000000140)="06"}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000340)={'broute\x00', 0x0, 0x3, 0xcb, [], 0x2, &(0x7f0000000180)=[{}, {}], &(0x7f00000001c0)=""/203}, &(0x7f00000002c0)=0x78) [ 426.123808] FAT-fs (loop6): bogus number of reserved sectors [ 426.129777] FAT-fs (loop6): Can't find a valid FAT filesystem [ 426.144729] binder: undelivered TRANSACTION_ERROR: 29189 [ 426.154204] binder: BINDER_SET_CONTEXT_MGR already set [ 426.159663] binder: 1537:1539 ioctl 40046207 0 returned -16 [ 426.166254] binder: 1537:1539 unknown command 0 [ 426.171214] binder: 1537:1539 ioctl c0306201 20000440 returned -22 14:47:44 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x1800000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:44 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffff0d, 0x100) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000080)={0x3f, 0x6, 0xee4, 0x2, 0x1c8, 0x7}) shutdown(r0, 0x2) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000040), 0x4) [ 426.178637] binder: 1537:1539 ERROR: BC_REGISTER_LOOPER called without request [ 426.186373] 9pnet_virtio: no channels available for device [ 426.186373] 27.0.0.1 [ 426.195151] binder: undelivered TRANSACTION_COMPLETE [ 426.201223] binder: undelivered transaction 834, process died. 14:47:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trfns=tcp,', {'port'}}) 14:47:44 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x100000000000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:44 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x5}, [{}], "", [[], [], [], [], []]}, 0x578) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x20000000000, 0x10, r0, 0x1ffffffffe) read(r0, &(0x7f00000001c0)=""/196, 0xc4) r1 = socket(0x7, 0xa, 0x7a6a4a02) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) connect$packet(r1, &(0x7f0000000180)={0x11, 0x17, r2, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x14) [ 426.326743] 9pnet_virtio: no channels available for device [ 426.326743] 27.0.0.1 [ 426.381105] 9pnet_virtio: no channels available for device [ 426.381105] 27.0.0.1 [ 426.463112] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075f) [ 426.470401] FAT-fs (loop1): Filesystem has been set read-only [ 426.502058] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000075f) [ 426.529554] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 426.542060] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 14:47:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmmsg(r2, &(0x7f0000006040)=[{{&(0x7f0000001340)=@sco={0x1f, {0x0, 0x6}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)="98", 0x1}], 0xfffffdef, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@l2, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002d00)=ANY=[]}}], 0x2, 0x0) 14:47:44 executing program 4: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) getpid() getpgid(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000200)=0x0) syz_open_procfs(r0, &(0x7f00000002c0)="74696d657273022a2e0172b0713d29d5664d2441b88c256ade63f39fd0b277d9c72c3e031aa2c73043e87d04d73261145ce2104f49460397132ce51ef9a7331429590c6ae2748c54996bf879937a51f2154355dd1bc6f0f5fdebf7ea86aa31fb87") mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) 14:47:44 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0x9000000]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'tr\nns=tcp,', {'port'}}) 14:47:44 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x40) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000240)={0x6000, 0xd003, 0xed, 0x3ff, 0x6}) r2 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000000c0)=0x80, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x14e20, 0x0, @mcast2}, 0xa) r3 = socket(0x4, 0x4, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x7, 0x80000000}, &(0x7f0000000100)=0x8) set_tid_address(&(0x7f0000000280)) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r4, 0x9}, 0x8) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000380)=0x3b, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000001c0)={r0}) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000002c0)=0x4, 0x8) r5 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r5, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000180)=0x3, 0x4) listen(0xffffffffffffffff, 0x22d6) 14:47:44 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0xb6000000, 0x1000000020000) 14:47:45 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) sendmsg$nl_netfilter(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001f0000168fada1eee45152c81d99190000000000000000000000000043bfb63afd78b35bc957d5c8a2f48ab4034eda361fd63c50237da3dd5748830e3fd52fe557d42abd5572e7a6054a1f3b99ef1369f7af40c8f3c55c4830e8436fba8799d40bebc79d0dd4a213b38f8f7d4ec58da5c9d54182ce5ba6a821ebb8"], 0x20002154}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 426.802100] 9pnet_virtio: no channels available for device [ 426.802100] 27.0.0.1 14:47:45 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback, [0x0, 0x0, 0xffff1f00]}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18}, 0x0) 14:47:45 executing program 7: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x42bfc) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x100, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x401, 0x8000) connect$unix(r3, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xffffffffffffffc8, 0x5, 0x8}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000002c0)={r4, 0x400, 0x2, [0x2, 0x7f]}, &(0x7f0000000300)=0xc) fcntl$setstatus(r1, 0x4, 0x0) 14:47:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'tra\ns=tcp,', {'port'}}) 14:47:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffc, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000ee71aaee5c168ed741"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) 14:47:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000016000/0x3000)=nil, 0x3000, 0x0, 0x8032, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000100)={{0x2, 0x4e23, @local}, {0x307, @random="53feb0e87333"}, 0x30, {0x2, 0x4e24, @remote}, 'bcsf0\x00'}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00'}) sendmmsg(r1, &(0x7f0000001180)=[{{&(0x7f00000001c0)=@sco, 0x80, &(0x7f0000000840)=[{&(0x7f0000001600)="da", 0x1}], 0x1, &(0x7f0000003040)}}], 0x1, 0x0) clock_gettime(0x7, &(0x7f0000000080)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0x0, &(0x7f00000000c0), 0x6) close(r1) 14:47:45 executing program 6: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)}}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x3ff, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x84) sendfile(r1, r1, &(0x7f0000000040), 0x8080fffffffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000380)=0x2e00000000000000, 0x1000000020000) 14:47:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='\n27.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'tra%s=tcp,', {'port'}}) [ 426.952493] binder_alloc: binder_alloc_mmap_handler: 1537 20001000-20004000 already mapped failed -16 [ 426.962901] binder: 1537:1607 unknown command 0 [ 426.967983] binder: 1537:1607 ioctl c0306201 20000440 returned -22 [ 426.971643] 9pnet_virtio: no channels available for device [ 426.971643] 27.0.0.1 [ 426.983091] binder: 1537:1542 ERROR: BC_REGISTER_LOOPER called without request [ 427.026240] ------------[ cut here ]------------ [ 427.031057] ODEBUG: init active (active state 0) object type: timer_list hint: delayed_work_timer_fn+0x0/0x90 [ 427.041324] WARNING: CPU: 0 PID: 1625 at lib/debugobjects.c:329 debug_print_object+0x16a/0x210 [ 427.050059] Kernel panic - not syncing: panic_on_warn set ... [ 427.050059] [ 427.057406] CPU: 0 PID: 1625 Comm: syz-executor7 Not tainted 4.18.0-rc7-next-20180803+ #31 [ 427.065788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.075122] Call Trace: [ 427.077695] dump_stack+0x1c9/0x2b4 [ 427.081313] ? dump_stack_print_info.cold.2+0x52/0x52 [ 427.086498] panic+0x238/0x4e7 [ 427.089679] ? add_taint.cold.5+0x16/0x16 [ 427.093816] ? __warn.cold.8+0x148/0x1ba [ 427.097862] ? debug_print_object+0x16a/0x210 [ 427.102344] __warn.cold.8+0x163/0x1ba [ 427.106216] ? debug_print_object+0x16a/0x210 [ 427.110697] report_bug+0x252/0x2d0 [ 427.114308] do_error_trap+0x1fc/0x4d0 [ 427.118181] ? do_raw_spin_unlock+0xa7/0x2f0 [ 427.122574] ? math_error+0x3e0/0x3e0 [ 427.126363] ? __internal_add_timer+0x2e0/0x2e0 [ 427.131013] ? vprintk_default+0x28/0x30 [ 427.135063] ? vprintk_func+0x81/0x117 [ 427.138935] ? printk+0xa7/0xcf [ 427.142203] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 427.147029] do_invalid_op+0x1b/0x20 [ 427.150725] invalid_op+0x14/0x20 [ 427.154163] RIP: 0010:debug_print_object+0x16a/0x210 [ 427.159250] Code: 3a 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 92 00 00 00 48 8b 14 dd 60 a8 3a 87 4c 89 f6 48 c7 c7 00 9e 3a 87 e8 26 70 e2 fd <0f> 0b 83 05 09 33 26 05 01 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f [ 427.178131] RSP: 0018:ffff88019bb5f658 EFLAGS: 00010082 [ 427.183476] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffc90012c02000 [ 427.190729] RDX: 00000000000055af RSI: ffffffff816366f1 RDI: 0000000000000001 [ 427.197981] RBP: ffff88019bb5f698 R08: ffff88018299a400 R09: ffffed003b603ec2 [ 427.205234] R10: ffffed003b603ec2 R11: ffff8801db01f617 R12: 0000000000000001 [ 427.212503] R13: ffffffff87f9d1c0 R14: ffffffff873aa400 R15: ffffffff816988b0 [ 427.219759] ? __internal_add_timer+0x2e0/0x2e0 [ 427.224414] ? vprintk_func+0x81/0x117 [ 427.228288] ? debug_print_object+0x16a/0x210 [ 427.232772] __debug_object_init+0x8e9/0x12e0 [ 427.237251] ? kasan_check_read+0x11/0x20 [ 427.241381] ? do_raw_spin_unlock+0xa7/0x2f0 [ 427.245773] ? debug_object_free+0x690/0x690 [ 427.250164] ? kasan_check_write+0x14/0x20 [ 427.254389] ? do_raw_spin_lock+0xc1/0x200 [ 427.258611] ? trace_hardirqs_on+0xd/0x10 [ 427.262744] ? __debug_object_init+0x581/0x12e0 [ 427.267397] ? lock_acquire+0x1e4/0x540 [ 427.271372] ? prepare_to_wait+0x1b3/0x460 [ 427.275593] ? debug_object_free+0x690/0x690 [ 427.279984] ? kasan_check_read+0x11/0x20 [ 427.284115] ? do_raw_spin_unlock+0xa7/0x2f0 [ 427.288506] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 427.293070] ? kasan_check_write+0x14/0x20 [ 427.297291] ? do_raw_spin_lock+0xc1/0x200 [ 427.301510] ? trace_hardirqs_on+0xd/0x10 [ 427.305651] debug_object_init+0x16/0x20 [ 427.309695] init_timer_key+0xa9/0x490 [ 427.313578] ? __queue_work+0x1410/0x1410 [ 427.317720] ? init_timer_on_stack_key+0xe0/0xe0 [ 427.322464] ? kasan_check_write+0x14/0x20 [ 427.326684] ? lock_sock_nested+0x9f/0x120 [ 427.330904] ? __lockdep_init_map+0x105/0x590 [ 427.335384] vsock_stream_connect+0xc7a/0xfc0 [ 427.339867] ? vsock_dgram_connect+0x500/0x500 [ 427.344436] ? lock_acquire+0x1e4/0x540 [ 427.348393] ? __might_fault+0x12b/0x1e0 [ 427.352442] ? lock_downgrade+0x8f0/0x8f0 [ 427.356571] ? finish_wait+0x430/0x430 [ 427.360443] ? lock_release+0xa30/0xa30 [ 427.364401] ? check_same_owner+0x340/0x340 [ 427.368716] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 427.374243] ? _copy_from_user+0xdf/0x150 [ 427.378375] ? security_socket_connect+0x94/0xc0 [ 427.383125] __sys_connect+0x37d/0x4c0 [ 427.387000] ? __ia32_sys_accept+0xb0/0xb0 [ 427.391226] ? __kasan_slab_free+0x131/0x170 [ 427.395619] ? trace_hardirqs_on+0xd/0x10 [ 427.399753] ? kmem_cache_free+0x22e/0x2d0 [ 427.403972] ? __x64_sys_futex+0x47f/0x6a0 [ 427.408197] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.413730] ? exit_to_usermode_loop+0x1f4/0x380 [ 427.418473] ? syscall_slow_exit_work+0x500/0x500 [ 427.423303] __x64_sys_connect+0x73/0xb0 [ 427.427352] do_syscall_64+0x1b9/0x820 [ 427.431223] ? syscall_return_slowpath+0x5e0/0x5e0 [ 427.436138] ? syscall_return_slowpath+0x31d/0x5e0 [ 427.441052] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 427.446051] ? prepare_exit_to_usermode+0x291/0x3b0 [ 427.451058] ? perf_trace_sys_enter+0xb10/0xb10 [ 427.455716] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 427.460996] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 427.466169] RIP: 0033:0x456cb9 [ 427.469351] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 427.488237] RSP: 002b:00007f739634fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 427.495940] RAX: ffffffffffffffda RBX: 00007f73963506d4 RCX: 0000000000456cb9 [ 427.503192] RDX: 0000000000000010 RSI: 0000000020000200 RDI: 0000000000000014 [ 427.510445] RBP: 00000000009301e0 R08: 0000000000000000 R09: 0000000000000000 [ 427.517695] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 427.524948] R13: 00000000004caf78 R14: 00000000004c2d48 R15: 0000000000000002 [ 428.613978] Shutting down cpus with NMI [ 428.618405] Dumping ftrace buffer: [ 428.621924] (ftrace buffer empty) [ 428.625613] Kernel Offset: disabled [ 428.629220] Rebooting in 86400 seconds..